2 reads
Projects and issue search.
- List projects
- Search issues (JQL)
A site finding becomes an issue in Jira. Protuno can then move it to another status as the fix is verified. Writes ask you first by default.
No install needed for the audit. We suggest connecting a staging copy of your site first, before your live site.
Reads can run on their own. Writes ask you first by default.
2 reads
Projects and issue search.
2 writes
Create an issue and move its status. Both ask first by default.
Showing 4 of 4 capabilities
List projectsjira.project.read
Lists the projects the account can see, so Protuno knows where an issue belongs.
Search issues (JQL)jira.issue.search
Searches for issues with a JQL query, to find one that matches a finding.
Create an issuejira.issue.create
Creates a new issue in a project, one issue per finding.
Undo: Move the issue to a closed or cancelled status. Jira has no safe reverse of create.
Move an issue to another statusjira.issue.transition
Moves an issue to a new workflow status, only after the fix is verified.
Undo: Read the issue's prior status first, then move it back to that status.
Protuno can turn a site finding into a Jira issue, and move it to another status as the fix lands. Every write asks first by default.
Searches issues with a JQL query, so Protuno does not file a duplicate for something already tracked.
ReadsLists the projects the account can see, so Protuno knows where a new issue belongs.
ReadsCreates a new issue describing one finding, for example a plugin stuck mid-update.
Ask firstMoves an issue to another status once Protuno has verified the fix worked.
Ask firstNo playbook reads it yet. This is where a finding becomes a ticket.
How it connects: you create an Atlassian API token and paste it into Protuno with your Jira site address and your Atlassian account email. Protuno works with Atlassian Cloud sites only, for example yourname.atlassian.net. The token acts with the permissions of the account that created it.
Copy the token when Atlassian shows it.
you see: A token shown once on Atlassian's own page, with the expiry you set.
Paste your Jira site address, your Atlassian account email and the API token.
you see: Three fields (site, email, token) and a Connect button.
you see: Reads on the left and writes on the right: listing projects and searching issues on the left, and creating an issue and moving its status on the right.
Writes ask you first by default.
you see: A control for each capability, with writes set to ask first.
you see: A plain sentence summing up exactly what was granted, an Agree button and a confirmation screen.
Atlassian's docs do not name a paid-plan requirement for API access. Access follows the permissions of the account that created the token.
Atlassian applies three limits at once: an hourly quota of points (reads and writes cost points), a per-second burst limit on each endpoint, and a cap on how often one issue can be changed. Go over any of them and Jira returns an HTTP 429 error. Atlassian's rate limiting page has the current numbers.
It cannot delete issues, administer projects or permissions, or look up users. It creates issues and moves their status, and both ask you first by default.
Protuno reads issues live from the Jira REST API v3 each time a playbook runs. There is no cached copy. The finding itself is written into an issue, and the raw payload from Jira is not stored.
Confirm the issue was created in the project you expect. Jira only writes to the project named in the request. Also check that the account that created the token still has access to that site and project.
In Atlassian, open id.atlassian.com/manage-profile/security/api-tokens and delete the token. Disconnecting in Protuno does not revoke the key at Atlassian. Delete it there to cut access for good.
Capability names and default settings (on its own or ask first) are Protuno's own, and they can change as the product develops. Playbook plan, schedule and date come from Protuno's agent pages. Protuno last confirmed this connector's build status on 13 Oct 2026. Vendor limits and permissions on this page follow the vendor's public documentation as reviewed on 13 Oct 2026. The vendor's own page is the final word.
The free audit looks at the site from the outside. Connect tools afterwards, one capability at a time.
We suggest connecting a staging copy of your site first, before your live site.
That does not look like a web address. Try yourdomain.com
85 Site ChecksNo Credit Card100% Free