Zum Hauptinhalt springen
tsecurity.de LIVE
Echtzeit-Radar & Feeds
Alle RSS Feeds
👥 Community & Social
Podcasts & Audio BriefingsCrowdStrike: China’s 15th Five-Year Plan: What You Need to Know(24.09.2026 um 13:00 Uhr)
Malware / Trojaner / VirenClickFix: 17.000 URLs zeigen Copy-and-Paste als KI-freie Malware-Falle(24.09.2026 um 13:18 Uhr)
Malware / Trojaner / VirenIT Security News Hourly Summary 2026-09-24 13h : 12 posts(24.09.2026 um 13:00 Uhr)
IT Security NachrichtenPlanet Labs Opens Berlin Satellite Factory(24.09.2026 um 13:02 Uhr)
IT Security NachrichtenRedesigning Security Architecture in the Agentic AI Era(24.09.2026 um 13:00 Uhr)
Sicherheitslücken (CVE)[NEU] [hoch] Rancher: Schwachstelle ermöglicht Cross-Site Scripting(24.09.2026 um 12:59 Uhr)
Sicherheitslücken (CVE)[NEU] [kritisch] WordPress: Schwachstelle ermöglicht Codeausführung(24.09.2026 um 12:59 Uhr)
Podcasts & Audio BriefingsCrowdStrike: China’s 15th Five-Year Plan: What You Need to Know(24.09.2026 um 13:00 Uhr)
Malware / Trojaner / VirenClickFix: 17.000 URLs zeigen Copy-and-Paste als KI-freie Malware-Falle(24.09.2026 um 13:18 Uhr)
Malware / Trojaner / VirenIT Security News Hourly Summary 2026-09-24 13h : 12 posts(24.09.2026 um 13:00 Uhr)
IT Security NachrichtenPlanet Labs Opens Berlin Satellite Factory(24.09.2026 um 13:02 Uhr)
IT Security NachrichtenRedesigning Security Architecture in the Agentic AI Era(24.09.2026 um 13:00 Uhr)
Sicherheitslücken (CVE)[NEU] [hoch] Rancher: Schwachstelle ermöglicht Cross-Site Scripting(24.09.2026 um 12:59 Uhr)
Sicherheitslücken (CVE)[NEU] [kritisch] WordPress: Schwachstelle ermöglicht Codeausführung(24.09.2026 um 12:59 Uhr)
Intelligence View
⚡ tsecurity.de Intelligence

Building an agentic Jira automation platform with MCP and Temporal

Most "AI automation" demos fall apart the moment a workflow needs to run longer than a single request. An agent makes a few tool calls, the process crashes or times out, and you lose all state. I wanted something that could drive real,…

0
↗ Quelle (dev.to)
Reagiere als Erste:r — dein Feedback zählt!

Most "AI automation" demos fall apart the moment a workflow needs to run longer than a single request. An agent makes a few tool calls, the process crashes or times out, and you lose all state. I wanted something that could drive real, multi-step work inside Atlassian (Jira and Confluence) and survive restarts, retries, and failures. So I built an open-source platform around two ideas: MCP for tool access and Temporal for durable execution.



Repo: https://github.com/ahmet-ozel/atlassian-ai-workflow-platform






The problem with one-shot agents



A typical agent loop looks like: read a ticket, decide on an action, call a tool, repeat. This is fine for short tasks. It breaks down when a workflow spans minutes or hours, depends on external systems that fail intermittently, or needs to be resumed after a deploy. If your orchestration lives in a single Python process, any crash means you start over. For business workflows that touch real Jira issues, that is not acceptable.






Why MCP for tools



The Model Context Protocol (MCP) standardizes how an agent discovers and calls tools. Instead of hard-coding Jira API calls into the agent, I expose Jira and Confluence as MCP tools. The agent sees a clean, typed tool surface (create issue, transition status, search, comment, fetch a Confluence page) and the protocol handles the wiring.



The practical benefit is decoupling. I can add or change tools without touching the agent logic, and the same tools work with any MCP-compatible client. It also keeps the agent prompt focused on intent rather than API mechanics.






Why Temporal for orchestration



Temporal gives you durable workflows. The workflow code looks like ordinary Python, but every step is checkpointed. If a worker dies, the workflow resumes from the last completed step on another worker. Retries, timeouts, and backoff are declarative.



This maps perfectly onto agent workflows. Each LLM call and each tool call becomes a Temporal activity. If an LLM provider rate-limits you or a Jira call fails, Temporal retries that single activity instead of replaying the whole reasoning chain. Long-running approvals (wait for a human to review before transitioning a ticket) become a normal part of the workflow instead of a hack.



The tradeoff is added infrastructure. Temporal is one more service to run, and you have to think in terms of deterministic workflow code versus side-effecting activities. For short, stateless tasks it is overkill. For anything that has to be reliable, it pays for itself quickly.






Architecture



The stack ties together a few pieces:




  • An MCP integration layer that exposes Atlassian tools to the agent

  • Temporal workers that run the durable workflows and activities

  • A webhook gateway that turns Jira events into workflow triggers

  • An admin dashboard plus a Streamlit UI for running and inspecting workflows

  • Multi-provider LLM support (OpenAI, Anthropic, Gemini, and self-hosted vLLM)



Everything runs in a single Docker Compose stack, so you can bring the whole system up locally and see the moving parts together. Provider choice is config-driven, which makes it easy to swap a hosted model for a local one during development.






What I learned



Separating "what to do" from "how to survive doing it" was the key insight. The agent reasons about intent and picks tools. Temporal owns reliability. MCP owns the tool boundary. Keeping those three responsibilities apart made each one much simpler to reason about and test.



The other lesson: deterministic workflow code is a discipline. Anything non-deterministic (network calls, timestamps, random values) has to live in an activity, not the workflow body. Once that clicked, debugging got a lot easier because the workflow history is a precise, replayable log of what happened.



It currently targets Atlassian, but the tool layer is designed to extend to other platforms.






Feedback welcome



I would like to hear how others handle long-running agent workflows. Are you using Temporal, a queue plus your own state machine, or a custom orchestration loop? And for MCP users: how are you structuring tools when one agent needs access to several systems at once?



Repo and setup instructions: https://github.com/ahmet-ozel/atlassian-ai-workflow-platform

CTI Threat Relationship Graph2 Knoten / 1 Relationen
CVE / Incident Software MITRE ATT&CK CWE Weakness IoC
SOC Incident Playbook: Remote Code Execution (RCE) Defense
title: Detect Exploitation - Building an agentic Jira automation platform with MCP and Temporal
id: 4d6348cb-c343-4847-a28b-47b5792f5282
status: experimental
description: Automatisch generierte SIEM-Erkennungsregel basierend auf CTI Intelligence
references:
  - https://tsecurity.de/
author: iShareStuff CTI Automated Detection Engine
date: 2026-09-24
logsource:
  category: network_connection
  product: any
detection:
  selection:
      CommandLine|contains:
        - 'exploit'
  condition: selection
falsepositives:
  - Legitime administrative Zugriffe oder Penetrationstests
level: high
tags:
  - attack.initial_access
rule CTI_Threat_Indicator {
    meta:
        author = "iShareStuff CTI Automated Detection Engine"
        date = "2026-09-24"
        description = "YARA Signature for "
    strings:
        $str = "Building an agentic Jira autom" ascii wide
    condition:
        any of them
}
tsecurity.de Cognitive Threat RAG
Fokus-Vektor:

Kognitive Analyse für identifizierte Bedrohung: Erhöhte Bedrohungslage im Bereich Building an agentic Jira automation plat.... Basierend auf 368k Vektor-Korrelationen werden sofortige Isolationsmaßnahmen für betroffene Endpunkte empfohlen.

🛡️ Angriffsfläche & Exposure

Netzwerk/Remote-Zugriff ohne Vorauthentifizierung möglich.

Empfohlene Sofortmaßnahmen
  • 1. Perimeter-Inspektion: Relevante Portfreigaben und exponierte Endpunkte unverzüglich scannen.
  • 2. Patch-Applikation: Hersteller-Hotfix einspielen oder betroffene Daemons in isolierte DMZ-Segmente überführen.
  • 3. Telemetrie & EDR-Alerts: Prozessaufrufe und Child-Processes auf anomale Shell-Spawns überwachen.
🔗 Semantisch verwandte Zero-Days MariaDB 11.7 VEC
Ähnliche Beiträge
🔍 Verwandte News

Auch interessante Nachrichten Building an agentic Jira automation platform with MCP and Temporal

Thematisch verwandte Begriffe: Building, agentic, Jira, automation · 6 Treffer

Laden...

Beiträge werden geladen ...

Laden...

Videos werden geladen ...

Laden...

Beiträge werden geladen ...

Laden...

Videos werden geladen ...

Laden...

Beiträge werden geladen ...

Laden...

Videos werden geladen ...

Laden...

Beiträge werden geladen ...

Laden...

Videos werden geladen ...

Zum Aktualisieren ziehen
ZERO-DAY CVE-2026-97152 | Nanomsg versions 0.5-beta through 1.x before 1.2.3 has a remotely exploi…
Advisory →
TTS Reader • tsecurity.de Voice
tsecurity.de Icon
tsecurity.de App
Offline-Lesen, Eilmeldungen & 0ms Ladezeit

Installiere tsecurity.de direkt auf deinen Home-Bildschirm für das ultimative Vollbild-Magazinerlebnis ohne Browser-Leisten.

Nächster Beitrag
Themen-Radar & Intelligence Matrix
Echtzeit-Taxonomie nach Angriffsvektoren & Plattformen

tsecurity.de Live Threat Radar

🔴 LIVE RADAR
MONITORING
AKTIV
CVE-DATENBANK
LIVE
🔍
Community Radar & Live Chat
Sentinel Bot online • Live-Stream
Dein Cluster: Security Explorer
Match:
lädt…
Verbindung zum Community-Stream wird aufgebaut...
Bearbeitungsmodus — Senden überschreibt deine Nachricht
Community-Puls — was gerade passiert
lädt…
Aktivitäten deiner Analysten
lädt…
Neues Thema oder Eilmeldung einreichen

Reiche interessante Links, Zero-Days oder Debatten ein. Die Community entscheidet per Upvote über die Veröffentlichung.

Heiß diskutierte Einreichungen
🔖 Gespeicherte Artikel
📂 Keine gespeicherten Artikel vorhanden.
Zurück Ziehen Vor
Links: vorheriger Artikel Rechts: nächster Artikel unten: schließen
News NIS-2 Frühwarnung Tier-1 Intel TTP ⏱️ 3 Min vor 10 Min
Artikeldaten werden geladen...

Zurück: vorheriger Vor: nächster
↗ Original-Quelle
Social Reaktionen Deine Reaktion zählt
Einstufung & Relevanz-Poll 0 Stimmen
In sozialen Netzwerken teilen 1-Klick