Configuration

Interactive Login

The fastest way to get started:

ctk auth

This prompts for your Confluence domain, email, and API token, verifies them against the Confluence API, and stores them locally.

Tip

Create an API token at https://id.atlassian.com/manage-profile/security/api-tokens. Select Confluence as the app and add granular scopes — ctk auth prints the full list.

API Token Scopes

Select “Confluence” as the app, then add granular scopes:

Read-only (8 scopes)

read:space:confluence
read:page:confluence
read:folder:confluence
read:hierarchical-content:confluence
read:comment:confluence
read:label:confluence
read:attachment:confluence
search:confluence

Full access (add 6 more)

write:page:confluence
write:folder:confluence
write:comment:confluence
write:label:confluence
delete:page:confluence
delete:folder:confluence

Caution

Write operations require both the write token scopes and CTK_ENABLE_WRITES=true. Token scopes alone are not enough — the env var gate is a second safety layer.

Credentials File

Credentials are stored at ~/.config/ctk/credentials.json with mode 0600:

{
  "domain": "mycompany",
  "email": "user@example.com",
  "api_token": "ATATT3x...",
  "created_at": "2025-01-15T10:30:00Z"
}

The domain field is the subdomain only (e.g., mycompany for mycompany.atlassian.net).

Environment Variables

You can skip stored credentials entirely by setting these environment variables:

Variable	Description
CONFLUENCE_DOMAIN	Confluence subdomain (e.g., mycompany)
CONFLUENCE_EMAIL	Atlassian account email
CONFLUENCE_API_TOKEN	Atlassian API token

Environment variables take precedence over stored credentials.

Write Gating

Variable	Description
CTK_ENABLE_WRITES	Set to true to enable create, update, delete operations
CTK_DISABLED_TOOLS	Comma-separated list of MCP tool names to disable

Caution

Write operations (create, update, delete, move) are disabled by default. You must explicitly set CTK_ENABLE_WRITES=true to enable them.

MCP Client Configuration

Claude Desktop

Add to ~/Library/Application Support/Claude/claude_desktop_config.json:

{
  "mcpServers": {
    "ctk": {
      "command": "/Users/you/.local/bin/ctk",
      "args": ["mcp"],
      "env": {
        "CONFLUENCE_DOMAIN": "mycompany",
        "CONFLUENCE_EMAIL": "user@example.com",
        "CONFLUENCE_API_TOKEN": "ATATT3x...",
        "CTK_ENABLE_WRITES": "true"
      }
    }
  }
}

Cursor

Add to .cursor/mcp.json in your project root:

{
  "mcpServers": {
    "ctk": {
      "command": "/Users/you/.local/bin/ctk",
      "args": ["mcp"],
      "env": {
        "CONFLUENCE_DOMAIN": "mycompany",
        "CONFLUENCE_EMAIL": "user@example.com",
        "CONFLUENCE_API_TOKEN": "ATATT3x...",
        "CTK_ENABLE_WRITES": "true"
      }
    }
  }
}

Claude Code

claude mcp add ctk -- /Users/you/.local/bin/ctk mcp

Set env vars in your shell or .mise.local.toml before launching.

Check Status

ctk status

Output:

Authenticated via stored credentials
  Domain:  mycompany.atlassian.net
  Email:   user@example.com
  Token:   ATAT...3xFg
  Stored:  2025-01-15 10:30:00
  File:    /Users/you/.config/ctk/credentials.json

Logout

ctk logout