Connect Jira to B6AI
Set up the Jira integration end to end, from creating credentials in Jira to verifying the live connection and using it in your bots.
Overview
The Jira integration lets bots and agents turn conversations into tracked work. When a customer reports a bug or requests a feature, B6AI can create a Jira issue in the right project, with the conversation attached.
Nothing gets lost between support and engineering, every request lands in your backlog.
What you can do with Jira
Once connected, your bots and agents can use Jira inside conversations and automations. Typical uses include:
- Create an issue (bug, task or story) from a conversation.
- Add comments and attach the transcript to an existing issue.
- Update an issue’s status or assignee.
- Look up an issue’s status by key and report it back in chat.
- Link the issue back to the originating conversation for traceability.
How the integration works
B6AI calls the Jira Cloud REST API against your site (yourco.atlassian.net). You can use a Basic-auth API token (an account email plus the token) for a single site, or OAuth 2.0 (3LO) for consented, revocable access.
Calls act with the permissions of the account the credentials belong to, so ensure it can create issues in the target project.
Prerequisites
Make sure all of the following are in place before you start. Each one is required, skipping any will cause the connection to fail later.
- A Jira Cloud site and an account that can create issues in the target project.
- Your Jira site URL and the target project key.
- The Enterprise Admin role in B6AI.
Choose a connection method
B6AI supports more than one way to connect Jira. Pick the one that fits your organization’s policies, the rest of this guide works for either.
| Method | When to use it | Notes |
|---|---|---|
| API token (recommended) | A single Jira site and the quickest setup | Uses an account email plus an API token (Basic auth). |
| OAuth 2.0 (3LO) | Consent-based, revocable, or multi-site access | Create an app at developer.atlassian.com with scopes and a redirect URL. |
Generate your Jira API token (or OAuth 2.0 credentials)
B6AI authenticates with Jira using your Jira API token (or OAuth 2.0 credentials). Follow these steps exactly, each field you copy here is entered into B6AI later.
- Go to id.atlassian.com/manage-profile/security/api-tokens.
- Click Create API token, label it “B6AI”, and Copy the token.
- Note the email address of that Atlassian account.
- Note your Jira site URL (https://yourco.atlassian.net) and the target Project key (for example SUP).
Required permissions & scopes
Grant only the scopes below. Each one maps to a specific B6AI capability; requesting fewer reduces risk and speeds up any review your Jira administrator performs. The table explains exactly what each scope allows and why it is needed.
| Scope / permission | What it allows | Why B6AI needs it |
|---|---|---|
| read:jira-work | Read issues, projects and fields | Look up status and validate the project |
| write:jira-work | Create and update issues and comments | Create issues and add comments from chat |
| manage:jira-webhook | Register webhooks | Receive issue-updated events to sync status |
| read:jira-user | Read users | Resolve assignees by name or email |
Finish configuration inside Jira
Complete these steps in the Jira console before connecting B6AI, so the credentials are fully active.
- For the API-token method, make sure the account has the Create Issues permission in the target project.
- For OAuth, add the scopes above, register the B6AI redirect URL, and distribute the app to your site.
Connect Jira in B6AI
Now enter your credentials in B6AI. Signed in as an Enterprise Admin, open Settings → Integrations, find the Jira card and click Connect, then complete the form. Every field is explained below.
- In B6AI, open Settings → Integrations → Jira.
- Choose API token or OAuth.
- Enter your site URL, account email and API token (or complete OAuth).
- Select a default project key and issue type.
- Click Save: B6AI reads the project to confirm access.
{
"provider": "jira",
"site_url": "https://yourco.atlassian.net",
"email": "jira-bot@yourco.com",
"api_token": "ATATT…",
"project_key": "SUP",
"issue_type": "Task"
}| Field | What it is | Example value |
|---|---|---|
| Site URL | Your Jira Cloud base URL | https://yourco.atlassian.net |
| The account the API acts as | jira-bot@yourco.com | |
| API token | Token from id.atlassian.com | ATATT3xFfGF0… |
| Default project key | Where new issues are created | SUP |
| Default issue type | Type applied to created issues | Task |
Verify the connection
Confirm the integration is live before you rely on it in a bot.
- Confirm the Jira card shows “Connected”.
- Run the test: it creates a test issue in your default project.
- Open Jira and confirm the issue exists, then transition or delete it.
Troubleshooting
If the connection fails or an action does not work, match the symptom below to its cause and fix.
| Symptom / error | Likely cause | How to fix it |
|---|---|---|
| 401 Unauthorized | Wrong email or token | Re-create the API token and re-copy it; confirm the email |
| 403 Forbidden | The account can’t create issues there | Grant the account Create Issue permission in the project |
| 400 (field required) | The project requires a field (e.g. components) | Provide the required fields in the Action node |
| 404 (project) | Wrong project key or site | Confirm the site URL and project key |
Limitations & rate limits
Keep these constraints in mind so your bots behave predictably at scale.
- Jira Cloud applies per-site REST rate limits and may return 429.
- Available fields depend on your project’s screens and schemes.
- API-token calls act as a single user.
Security best practices
- Grant only the scopes and permissions listed above, never request more “just in case”.
- Rotate your Jira API token (or OAuth 2.0 credentials) on a regular schedule, and immediately if you suspect exposure.
- Restrict the Enterprise Admin role (which manages integrations) to a small, trusted group.
- Prefer a dedicated service account or bot user over a personal login, so access survives staff changes.
- Review the integration’s activity in the B6AI Activity Logs periodically for unexpected calls.
- Disconnect the integration the moment a credential leaks; then rotate it in Jira before reconnecting.
Recommendations
- Test against a sandbox or non-production Jira account before connecting live data.
- Document which bots and flows depend on this integration so changes are predictable.
- Set a recurring reminder to review scopes and rotate credentials.
- Enable only the capabilities you actually use today; you can widen scopes later.