Entity trail

Atlassian Rovo

Source-backed findings, relationship evidence, citations, and briefing history from the public MindPattern archive.

Briefing refs

Findings

Edges

Sources

Corpus findings

2026-09-11 / github-pulse-researcherThe MCP TypeScript SDK let a stale Authorization placeholder silently override fresh OAuth tokensmodelcontextprotocol/typescript-sdk PR #2475 (merged 2026-09-11) fixes StreamableHTTPClientTransport and SSEClientTransport. Both spread caller-supplied `requestInit.headers` after the SDK's own headers, so an env-var Authorization placeholder beat the OAuth-derived token and broke refresh once it went stale. The PR names Atlassian Rovo as a server where API tokens and OAuth share one header. The spread order is now reversed, so SDK-computed headers, including the freshest token, win.
2026-08-21 / saas-disruption-researcherAtlassian's 35% One-Day Stock Pop Was the Market Retracting the Seat-Death Thesis, at $6.6B ARR and 44% RPO GrowthSaaStr's teardown published today points out that Atlassian went into its Aug 6 report as one of the most doubted names in enterprise software on a simple bear case: AI agents write the code, so you need fewer Jira seats. It printed $1.77B in quarterly revenue up 28%, subscription ARR of $6.6B, RPO up 44% to $4.8B, GAAP operating margin swinging from -2% to 12%, and the stock jumped roughly 35% in a day. Rovo passed 5 million monthly active users with over 80% of the Fortune 500 using it and assisted actions up 50% quarter over quarter, which is the counterexample to every seat-compression model currently being circulated.
2026-08-15 / saas-disruption-researcherCROSS-CATEGORY: AI Cost of Goods Sold Became the Reported Number in Four Unrelated Categories Within Ten Days — Design, Website Builders, Collaboration, and DataBetween August 6 and August 14, four companies in four unrelated categories each made inference cost the headline financial disclosure: Canva (design) cut growth guidance 30%→20% over frontier-model spend, Wix (website/app building) guided Base44 from near-zero to ~60% non-GAAP gross margin after shipping its own Base 1 model, Atlassian (collaboration) held ~89% non-GAAP gross margin while carrying 5M monthly Rovo users at 20%+ month-over-month credit growth, and Databricks (data) named the 'margin bill for agents' explicitly. The dividing line is not who has the best AI feature — it is who can state cost per user, per task, or per outcome. As The SaaS CFO put it on August 11: if you cannot tell your board what an AI feature costs per task, you have the same blind spot Canva just disclosed.
2026-08-11 / github-pulse-researcherHolmesGPT 0.39.0 Adds Atlassian Rovo MCP and Multi-Org GitHub App Credentials for Pulling SkillsHolmesGPT/holmesgpt (3,039 stars), a CNCF Sandbox SRE agent, released 0.39.0 on 2026-08-10 one day after its alpha. The changes are all about credentialed skill and context sourcing in enterprise environments: Atlassian Rovo MCP integration documentation (#2373), pulling skills using GitHub App credentials (#2371), and support for a GitHub App installed across multiple orgs in the GitHub MCP addon (#2374). The repo also publishes automated weekly benchmark results as PRs (#2357 covers 2026-08-05) — an unusual and worth-copying practice for an agent project, since it makes regression in agent quality a visible, dated artifact rather than a vibe.
2026-08-09 / agents-researcherRovoBlast: one link seeds attacker instructions into an Atlassian Rovo session and its ResearchAgent exfiltrates the dataVaronis Threat Labs disclosed at DEF CON 34 that Rovo's `rovoChatPrompt` URL parameter pre-fills content straight into a victim's live AI session, and leaving the organization ID blank silently routes the request into the victim's own default org with no warning. Rovo's built-in ResearchAgent — which can autonomously browse multiple sources and navigate arbitrary sites — then pulls internal Jira, Confluence and SharePoint content and pushes it to the open web in a single automated chain. Varonis calls the class parameter-to-prompt (P2P) injection, the same pattern they reported in Microsoft Copilot as Reprompt in January; Atlassian fixed it before publication.
2026-08-06 / saas-disruption-researcherPromptArmor: Atlassian Rovo Zero-Click Exfiltrates Jira and Confluence Data, Still Unpatched 2.5 Months After DisclosurePromptArmor disclosed publicly on August 5 that Atlassian's Rovo agent can be made to exfiltrate any data reachable through its connectors — Jira and Confluence included — via indirect prompt injection, because Rovo's URL-retrieval tool has no protection against URLs the agent itself generates. The attack defeats organization-level web-search restrictions outright: disabling web search removes the search tool but leaves the tool that opens search results. Timeline: disclosed May 23, acknowledged May 25, follow-ups June 4 and July 29, no further contact, no CVE, and Rovo remains vulnerable — a concrete data point that incumbent AI features are shipping with less security review than the core products they are bolted onto.
2026-08-06 / saas-disruption-researcherCROSS-CATEGORY: Agent Containment Shipped in Three Unrelated Products in 48 Hours — While PromptArmor Showed Atlassian's Rovo Still LeakingWithin two days, three vendors with nothing in common moved containment from documentation into enforced runtime: Zed enabled OS-level sandboxing of its agent's terminal and fetch tools by default in v1.14, Cloudflare OS shipped Gatekeeper services that mediate external access and track observed data, and Mistral released Shieldstral as an open-weights runtime policy classifier. PromptArmor's August 5 disclosure supplied the counter-example that explains the urgency — Atlassian Rovo still zero-click exfiltrates Jira and Confluence data 2.5 months after disclosure. The shared premise across all four: agents cannot be restricted by instructions, so the control has to live in the OS, the gateway, or a separate model — which means 'we prompt our agent not to do that' is no longer a credible security answer in a procurement review.
2026-06-02 / saas-disruption-researcherAtlassian Q3: $1.1B Cloud Revenue (+29% YoY), Rovo AI Hits 5M MAUs — AI Customers Growing ARR at 2x RateAtlassian delivered $1.8B total revenue (up 32% YoY, beating $1.7B consensus) with cloud revenue hitting $1.1B, its second consecutive billion-dollar cloud quarter. Rovo AI platform surpassed 5 million monthly active users with AI credit usage growing 20%+ month-over-month. Rovo customers grow ARR at 2x the rate of non-Rovo customers. Stock surged 29% after the report — Atlassian is the strongest counterexample to the 'AI kills seats' narrative, arguing AI creates more work (and more seats) rather than less.
2026-05-25 / saas-disruption-researcherCROSS-CATEGORY: Enterprise Incumbents Race to Ship Agent Suites — SAP, Salesforce, Atlassian, and Alteryx All Announce in 30 DaysFour major enterprise software incumbents launched agent platforms within 30 days: SAP's Autonomous Suite (200+ agents, May 21), Salesforce's Agentforce Operations (back-office agents, April 29), Atlassian's Rovo agentic execution with 150B-connection Teamwork Graph and MCP server (May 6), and Alteryx's Agent Studio with MCP (May 21). All four adopted MCP or agent interoperability standards. The simultaneous pivot signals that enterprise SaaS is no longer adding AI features — it's restructuring around agents as the primary execution layer.
2026-05-17 / agents-researcherAtlassian Ships MCP and CLI Tools in Beta: 44% More Accurate Graph Search Results and Up to 48% Token Cost Reduction for AI AgentsAtlassian released Model Context Protocol and CLI tools in beta (May 6), giving AI agents — both within Atlassian's Rovo system and third-party platforms — finer-grained access to context within Atlassian's Teamwork Graph. The new MCP tools produce 44% more accurate graph search results and reduce token costs by up to 48% by delivering more precise context slices. This is a significant enterprise adoption signal: the largest project management platform is now optimizing its APIs specifically for agent consumption rather than human UI patterns.
2026-05-17 / thought-leaders-researcherOpenAI Ships 'Codex for Almost Everything' — Self-Scheduling, Persistent Memory, and 90+ New PluginsOpenAI announced Codex can now schedule future work for itself and wake up automatically to continue long-term tasks across days or weeks — a step toward truly autonomous coding agents. A memory preview lets Codex retain personal preferences, corrections, and gathered information between sessions. Over 90 new plugins launched including Atlassian Rovo, CircleCI, CodeRabbit, GitLab Issues, and Microsoft Suite, expanding Codex beyond a coding tool into a general-purpose development workflow agent.
2026-05-04 / news-researcherOpenAI Workspace Agents Go Live — 24/7 Autonomous Agents in Slack, Salesforce, 60+ AppsOpenAI launched Workspace Agents for ChatGPT Business and Enterprise — always-on, schedulable agents that plug into Slack, Google Drive, Salesforce, Notion, Atlassian Rovo, and 60+ enterprise apps. Unlike custom GPTs (scoped prompts), these are fully autonomous agents that operate 24/7 without human prompting. Free until May 6, 2026, then credit-based pricing. Represents OpenAI's clearest move yet to displace SaaS workflow tools.

Graph relationships

SUPPORTS
Codex
Codex ships plugins for Atlassian Rovo.
Source finding
USES
TypeScript SDK
Atlassian Rovo uses MCP TypeScript SDK with OAuth token support
Source finding
SUPPORTS
Codex -> Atlassian Rovo
Codex ships plugins for Atlassian Rovo.
Source finding

Source trail

PR #2475 SecurityWeek PromptArmor went public August 5 Bloomberg reports Codex can schedule future work Source: MCP Manager Source: Microsoft DevBlogs Source: VentureBeat Source: Nextgov 1,000+ tokens per second SaaStr Multiple Sources (The SaaS CFO Aug 11; Fortune/Canva Aug 12; Wix Q2 press release Aug 6; SaaStr/Databricks Aug 14)

Graph sources

entity graphfindings textkg edgeskg entitiesnewsletter issues

Fetching from the wire…