Jira Cloud logo

Jira Cloud

Overview

Jira Cloud uses HTTP Basic auth for REST API access — your Atlassian account email plus an API token you create in your Atlassian profile. The connector also needs your site's bare subdomain (the piece before .atlassian.net in your Jira URL) so it knows which tenant to query. API tokens are free on every Jira plan including Free.

Setup guide

Obtain an API token

  1. Sign in to Atlassian and go to https://id.atlassian.com/manage-profile/security/api-tokens.
  2. Click Create API token. Give it a label that identifies this integration (e.g. Ingest connector).
  3. Pick an expiration window. Atlassian forces a 1-year maximum; tokens must be rotated before expiry or the connector will return 401. Note the expiration date and set a reminder.
  4. Copy the token. Atlassian only shows it once — if you close the dialog without copying, you'll need to recreate it.

Add the token to Ingest

  1. In the Ingest UI under Connectors → Jira Cloud, paste the bare subdomain into Atlassian Cloud subdomain (e.g. acme for https://acme.atlassian.net).
  2. Paste your Atlassian account email into Email.
  3. Paste the API token into API token.
  4. Save. The connector validates by calling /rest/api/2/myself against your tenant; a successful response confirms credentials and tenant subdomain.

Mind the limits

API-token traffic is governed by Atlassian's burst rate limits only — the broader points-based hourly quota explicitly excludes Basic auth callers. Burst defaults to 100 requests/second per endpoint per tenant, with select hot endpoints (e.g. /issue/{id}/changelog) raised to 200 req/s. The connector throttles globally to 5 req/s, well below the floor.

The runtime treats 429, 500, 502, 503, and 504 as retryable and respects the Retry-After header. 400, 401, 403, and 404 are fatal — the most common cause of 400 is an unbounded JQL query (the new /search/jql endpoint requires at least one criterion) or a mismatched endpoint version. 401 means the token is wrong, expired, or the email doesn't match the token owner.

Pick endpoints

The connector ships 39 platform endpoints plus 2 admin/paid endpoints that stay disabled by default. Most analytics use cases need this core set:

  • Issuesissue_search is the workhorse (cursor-paginated via /rest/api/2/search/jql); pair with issue_changelog, issue_comments, and issue_worklog for full ticket history.
  • Projectsproject_search plus project_versions and project_components for release planning and component breakdowns. project_categories and project_types are tiny dimension tables.
  • Issue dimensionsissue_types, statuses, status_categories, priorities, resolutions, issue_link_types, and fields give the lookup tables you need to translate raw issue data into reports.
  • Boards & sprints (Jira Software customers only) — boards, board_sprints, board_issues, sprint_issues, and board_configuration. Free tier of Jira Software is enough.
  • Workflows & schemesworkflows, workflow_schemes, permission_schemes, notification_schemes, plus four scheme-related lookups. Most customers enable a subset based on their reporting needs.
  • Users & groupsusers_search, groups, group_members.
  • Dashboards & filtersdashboards, filters, plus filter_my and filter_favourite for per-user views.
  • Sysinfomyself, server_info, my_permissions for identity and permission auditing.

audit_records (admin scope only) and priority_schemes (Premium/Enterprise edition only) ship under untested/ and need manual activation per your account's plan and permissions.

Supported streams

37 endpoints are available out of the box. Each endpoint syncs into its own Iceberg table in Snowflake.

EndpointDescriptionReference
board_configuration
board_configuration
board_issues
board_issues
boards
boards
dashboards
dashboards
field_configurations
field_configurations
fields
fields
filter_favourite
filter_favourite
filter_my
filter_my
filters
filters
group_members
group_members
groups
groups
issue_changelog
issue_changelog
issue_comments
issue_comments
issue_link_types
issue_link_types
issue_search
issue_search
issue_security_schemes
issue_security_schemes
issue_types
issue_types
issue_worklog
issue_worklog
my_permissions
my_permissions
myself
myself
notification_schemes
notification_schemes
permission_schemes
permission_schemes
priorities
priorities
project_categories
project_categories
project_components
project_components
project_search
project_search
project_types
project_types
project_versions
project_versions
resolutions
resolutions
screen_schemes
screen_schemes
server_info
server_info
status_categories
status_categories
statuses
statuses
users_search
users_search
workflow_schemes
workflow_schemes
workflows
workflows
worklog_updated
worklog_updated

Authentication

Auth type
Basic Auth

Performance & limits

Rate limit
API-token (Basic auth) traffic is exempt from Atlassian's points-based hourly quota and is governed only by per-endpoint burst limits (default 100 req/s/endpoint, with hot endpoints like /issue/{id}/changelog at 200 req/s). Connector throttles globally to 5 req/s.
Automatic backoff
Ingest throttles requests to the published rate limit and retries with exponential backoff on transient errors. You don't need to handle 429s, retries, or pagination yourself.

Resources