Product Management & Roadmapping MCP Servers — Jira, Linear, Productboard, Aha!, Monday.com, and More

Product management is one of the best-served categories in the entire MCP ecosystem. Nearly every major PM tool now ships an official MCP server, and the community ecosystem is deep. Atlassian (Jira + Confluence), Linear, Monday.com, Asana, Shortcut, Notion, Aha!, Plane, Wrike, and Smartsheet all have official MCP servers. The community adds heavyweight implementations for ClickUp and Jira (5,400 stars). Hosted remote MCP is the dominant pattern — most vendors offer zero-config endpoints with OAuth. Part of our Business & Productivity category.

⚠️ Security alert: sooperset/mcp-atlassian has two critical patched CVEs — CVE-2026-27825 (RCE, CVSS 9.1) and CVE-2026-27826 (SSRF, CVSS 8.2). Upgrade to mcp-atlassian >= 0.17.0 immediately if you run this server.

This review covers issue tracking and project management (Jira, Linear, Asana, Monday.com, ClickUp, Shortcut, Plane, Wrike, Smartsheet), dedicated product management (Productboard, Aha!, Fibery), knowledge and documentation (Notion), feature request management (Canny), product analytics (PostHog, Mixpanel, Amplitude), and feature flag management (LaunchDarkly). For CRM platforms, see our CRM MCP Servers review. For IT service management, see ITSM MCP Servers.

The headline finding: vendor participation is extraordinary — 10+ vendors now ship official MCP servers, most with hosted remote endpoints. Atlassian leads on ecosystem depth with an official remote MCP plus a 5,400-star community server (upgrade to v0.17.0 for critical security patches). Linear leads on product-management-specific features — and Linear Agent now connects to external MCP tools. Wrike and Smartsheet join the official ecosystem with hosted remote servers. The biggest gap: dedicated roadmapping tools — Roadmunk, airfocus, and Craft.io still have zero MCP presence.

Issue Tracking & Project Management

Atlassian Jira + Confluence (Official + Community)

Atlassian offers both an official hosted remote MCP and the most popular community PM MCP server in the ecosystem.

The official Rovo MCP server provides secure, OAuth-authenticated access to Jira and Confluence. Key capabilities include Rovo Search across all Atlassian products, bulk creation of Confluence pages and Jira issues, data summarization, and full CRUD operations. Access respects user-level permissions — the AI agent can only access what the authenticated user can access. Free for all Atlassian Cloud customers. Rate limits vary by plan: 500/hr (Free), 1,000/hr (Standard), up to 10,000/hr (Enterprise). No FedRAMP or HIPAA support yet.

The community sooperset/mcp-atlassian server is a powerhouse — 72 tools covering both Jira and Confluence, supporting Cloud and Server/Data Center (Confluence v6.0+, Jira v8.14+). Authentication via API tokens, Personal Access Tokens, or OAuth 2.0. Supports HTTP transport (SSE + Streamable HTTP). MIT license. At ~5,400 stars, it’s one of the most starred MCP servers of any category.

⚠️ Critical security update: Two CVEs were disclosed and patched in v0.17.0: CVE-2026-27825 (CVSS 9.1, RCE) — arbitrary file write via unconstrained download_path in confluence_download_attachment could allow unauthenticated remote code execution; CVE-2026-27826 (CVSS 8.2, SSRF) — unauthenticated SSRF via custom HTTP header parsing, allowing attackers to probe internal networks and cloud metadata services. Version 0.17.0 adds validate_safe_path() and validate_url_for_ssrf() with path confinement, scheme/domain allowlisting, and private-IP blocking. Upgrade to mcp-atlassian >= 0.17.0 immediately.

The Jira ecosystem extends further: blue7wings/mcp-jira-server focuses on time tracking and version/release management, guanghuang/jira-mcp provides lightweight access, and cfdude/mcp-jira covers core issue operations. Multiple enterprise-grade MCP gateway solutions (MintMCP, Workato, CData) also provide managed Jira integration.

Linear (Official + Community)

Linear expanded its official MCP server in February 2026 with product-management-specific features that go beyond basic issue tracking:

• Create and edit initiatives — strategic themes that group projects
• Create and edit initiative updates — communicate progress on strategic goals
• Create and edit project milestones — track delivery checkpoints
• Issues, projects, comments — find, create, update across workspaces

The official server at mcp.linear.app/mcp uses OAuth 2.1 with dynamic client registration (also supports Bearer token). Streamable HTTP transport. Works natively in Claude and Cursor; other clients via mcp-remote module.

April 2026 update: Linear Agent MCP support — Linear’s own built-in AI agent can now connect to external MCP tools, letting it pull data from GitHub, Sentry, Figma, or any MCP-compatible service directly into triage and planning workflows. May 2026 update: GitHub PR URLs in document content saved via MCP are now automatically converted to diff mentions.

The community ecosystem includes tacticlaunch/mcp-linear (133 stars, TypeScript, MIT, issue/project/team management) and the now-deprecated jerhadf/linear-mcp-server (344 stars, which explicitly recommends migrating to the official server). dvcrn/mcp-server-linear adds multi-workspace support.

Asana (Official + Community)

Asana provides an official hosted MCP at mcp.asana.com/v2/mcp with OAuth authentication and Streamable HTTP transport. Asana V2 MCP is now GA. The V1 Beta SSE endpoint at mcp.asana.com/sse is deprecated and extended to shut down August 5, 2026 (original May 11 date was extended) — teams still on V1 need to migrate to mcp.asana.com/v2/mcp. Works with Claude, ChatGPT, and other MCP clients.

The community roychri/mcp-server-asana is excellent — 50+ tools with read-only mode option, advanced task filtering with custom fields, resource templates, and a comprehensive prompt system. MIT license. n0zer0d4y/asana-project-ops adds batch operations, direct section assignment, and selective tool activation for high-efficiency AI workflows. adlio/asanamcp provides a Rust implementation for teams that want STDIO transport.

Monday.com (Official)

Monday.com ships an official MCP server with two modes of operation:

1. Standard tools (15+) — boards, items, columns, groups, updates, custom activities, user search, workflow automation
2. Dynamic API tools (beta) — unlocks the full Monday.com GraphQL API surface dynamically, letting AI agents execute any API operation without hardcoded tool definitions

The hosted MCP at mcp.monday.com/mcp is the recommended zero-config option (OAuth authentication). Local installation also available via npm with API token. Read-only mode supported. Apps Framework tools included for developers building Monday.com integrations. MIT license. 396 stars.

ClickUp (Community)

ClickUp has no official MCP server but has the largest community server by tool count. taazkareem/clickup-mcp-server provides 150+ enterprise-grade tools covering tasks, checklists, sprints, comments, tags, spaces, lists, folders, files, docs, chat, and time tracking. Features OAuth 2.1 + API key hybrid auth, fuzzy search, OKR tracking, document management, file attachments, multi-workspace support, and Docker deployment. The current public repo has ~144 stars (relaunched; prior public repo had 460+ stars before reset). v0.12.10 adds full @mention support in chat messages/comments and automatic markdown → rich text conversion. Note: this is a proprietary/paid offering, unlike most PM MCP servers.

Multiple other community implementations exist from Nazruden, hauptsacheNet, DiversioTeam, and Leanware-io, all offering varying levels of ClickUp integration.

Shortcut (Official)

Shortcut (formerly Clubhouse) ships one of the most comprehensive official PM MCP servers. 60+ tools across 11 categories covering stories, epics, docs, iterations, milestones, labels, members, workflows, and more. The hosted server requires no setup — authentication handled via OAuth with no API token or local installation needed. Local installation also available with API token for teams that prefer it.

Notable features: read-only mode, tool limiting via environment variable (useful for restricting AI agent scope), and very active development (401 commits). MIT license. 98 stars.

Plane (Official)

Plane — the open-source project management tool — ships an official MCP server with 55+ tools across 8 categories: projects, issues, cycles, modules, initiatives, work logs, labels, and states. Built with FastMCP and Pydantic models for type safety. Supports stdio, SSE, and Streamable HTTP transports.

Authentication via API Key + Workspace Slug (stdio) or OAuth/PAT (remote HTTP). The server replaced an earlier Node.js implementation with a Python+FastMCP rewrite. MIT license. 228 stars.

Wrike (Official)

Wrike now ships an official hosted MCP server at mcp.wrike.com/app/mcp/sse, enabling AI assistants to access and interact with live Wrike workspace data. Two authentication modes: OAuth 2.0 (recommended, one-click sign-in) and Permanent Access Token (for headless/automated workflows). Works with Claude, ChatGPT, Microsoft Copilot, Cursor, and any MCP-compatible client. Accessible via Wrike’s Apps & Integrations settings. Wrike was previously absent from the official MCP ecosystem; this launch fills the gap for enterprise teams on the platform.

Smartsheet (Official)

Smartsheet provides an official hosted MCP server for AI-powered access to Smartsheet data. Key capabilities include sheet creation from templates or from scratch (unified creation tool), URL attachment to sheets/rows/comments, and text search within sheets. Smartsheet is positioned as work management / project tracking, making it relevant for PM workflows involving grid/spreadsheet-style project tracking. The official server supersedes the deprecated community smartsheet-platform/smar-mcp GitHub repository (users should migrate to the hosted endpoint).

Dedicated Product Management Tools

Productboard (Community)

Productboard — one of the most popular dedicated product management platforms — has no official MCP server. Two community implementations fill the gap:

Enreign/productboard-mcp is the more comprehensive option with 20+ tools covering features, product hierarchy, customer notes, objectives, key results, and release management. Supports Bearer token (default) and OAuth2 authentication. Includes configurable rate limiting, retry logic, and response caching. MIT license.

kenjihikmatullah/productboard-mcp is a lighter alternative with 10 tools focused on company, component, feature, note, and product retrieval plus status management. MIT license.

The absence of an official Productboard MCP server is a notable gap given the platform’s market position in dedicated product management. Productboard is available through Zapier MCP and Composio as managed integrations.

Aha! (Official + Community)

Aha! ships an official MCP server, though it’s read-only and minimal — just 3 tools (get_record, get_page, search_documents). Supports stdio and SSE transport. API token authentication. The official blog promotes integration with GitHub Copilot, Cursor, Claude Code, OpenAI Codex, and Devin — passing feature titles, descriptions, and to-dos to AI coding tools.

The community cedricziel/aha-mcp is significantly more capable with 12 tools and a standout feature: vector embeddings for semantic search. Uses sentence transformers + SQLite vector extensions to enable offline semantic queries against Aha! data. Includes offline database sync to local SQLite, hybrid live API + cached queries, incremental updates, and three transport modes (stdio, SSE, HTTP). MIT license. OAuth 2.0 and Bearer token support.

popand/aha-mcp is a fork of the official server that adds create_feature capability — the one write tool the official server is missing.

Fibery (Official)

Fibery takes a schema-driven approach similar to Planhat. Instead of hardcoded tools, the MCP server dynamically discovers your Fibery workspace structure — databases, fields, types, and relationships. You can query entities using natural language, create new entities, and update existing ones through conversational interfaces. The server retrieves database schemas and provides flexible access through the Fibery API.

Python-based, available on PyPI. 27 stars, 2.2K downloads. Works with Claude Desktop and any MCP-compatible client.

Knowledge & Documentation

Notion (Official)

Notion has one of the most starred PM MCP servers at ~3,700 stars. Version 2.0 introduced “data sources” as the primary abstraction for databases. 22 tools covering pages, databases, blocks, users, comments, and search. Docker support.

Recent updates (May–June 2026): Meeting Notes and block comments are now supported. Creating and updating databases is 91% more token-efficient. Each OAuth authorization now mints unique access_token + refresh_token pairs (fresh credentials per auth, not reused). New Developer portal centralizes management of connections, Workers, and personal access tokens.

Important: Notion is now only actively supporting the hosted remote MCP at mcp.notion.com/mcp with OAuth one-click install. The local GitHub repository is effectively deprecated — issues and PRs are not actively monitored. Teams should migrate to the hosted endpoint.

The community ecosystem is extensive: suekou/mcp-notion-server, awkoy/notion-mcp-server, ramidecodes/mcp-server-notion, and others provide alternative implementations for teams that need local deployment.

Feature Request Management

Canny (Official + Community)

Canny provides both an official MCP server and a feature-rich community implementation. The official server works with ChatGPT and Claude, available to teams on the Pro plan and above (Ideas beta). Recent updates added portal data alongside idea data, List Insights and List Idea Comments tools, and the ability to merge ideas directly via MCP for deduplication.

The community opensourceops/canny-mcp-server is impressive — 37 tools with Jira linking, batch operations, ETA management, company MRR tracking, and PM-focused workflows. Runs in read-only mode by default (19 read-only tools). Ships with 5 built-in prompts: weekly_triage, sprint_planning, executive_summary, jira_sync_status, and customer_impact — making it one of the few PM MCP servers with opinionated workflow support.

Product Analytics

PostHog (Official)

PostHog ships an official MCP server with 27+ tools covering analytics, feature flags, experiments, error tracking, and prompt management. Read-only mode available. One-command installation into 6+ IDEs. The standalone repo was archived January 2026 — the server now lives in the PostHog monorepo. Hosted MCP at mcp.posthog.com.

Mixpanel (Official)

Mixpanel provides an official hosted MCP server (beta) giving AI assistants direct access to query events, funnels, flows, retention, and session replays using natural language. Positioned as “conversational product analytics.”

Amplitude (Official)

Amplitude ships an official hosted MCP with a skills-based architecture — reusable analysis and instrumentation skills covering charts, dashboards, experiments, session replays, reliability, AI agent analytics, and tracking workflows. Configurable in Claude Code, Cursor, Claude, and Codex. Community server silviorodrigues/amplitude-mcp also available for direct API access.

Feature Flag Management

LaunchDarkly (Official)

LaunchDarkly ships an official MCP server for feature flag management — essential infrastructure for product managers controlling gradual rollouts. 28 tools covering flag creation, configuration, targeting rules, toggle management, AI configs, and gradual rollouts across multiple environments. Hosted MCP also available. MIT license. Works with Cursor, Claude Code, and other compatible editors.

What’s Missing

Several notable product management tools have no MCP servers (official or community):

• Roadmunk — dedicated roadmapping tool, no MCP server
• airfocus — product management and prioritization platform, no MCP server
• Craft.io — product management platform, no MCP server
• Pivotal Tracker — approaching end-of-life, no MCP server
• Rally (Broadcom) — enterprise agile, no MCP server
• Targetprocess (IBM) — SAFe/enterprise agile, no MCP server
• Height — modern project management, no MCP server found
• Teamwork — official GitHub repo exists (Teamwork/mcp) but limited documentation

Wrike and Smartsheet have now launched official MCP servers and are no longer gaps.

The dedicated roadmapping tools are the most conspicuous absence. Teams needing AI-powered roadmapping must use general-purpose PM tools with roadmapping features (Linear initiatives, Monday.com, Aha! roadmaps) rather than specialized roadmapping software.

Productboard having only community servers — despite being one of the top dedicated PM platforms — is also notable. Compare this to Aha!, which ships an official server (albeit minimal).

Key Trends

1. Hosted remote MCP is the default — Atlassian, Linear, Monday.com, Asana, Shortcut, Notion, Wrike, Smartsheet, PostHog, Mixpanel, and Amplitude all offer hosted endpoints. Local installation is becoming the fallback, not the primary path. Notion is now hosted-only for active support.

2. OAuth is standard — most vendors use OAuth 2.0/2.1 for hosted servers, with API tokens as fallback for local installations. This is more mature than many other MCP categories where API keys dominate.

3. Dynamic tools are emerging — Monday.com (dynamic API tools), Planhat (3 meta-tools), and Fibery (schema-driven) all let AI agents discover and interact with arbitrary data structures rather than using hardcoded tool definitions. This pattern reduces maintenance burden and adapts to custom configurations.

4. PM-specific features beyond CRUD — Linear’s initiatives and milestones plus Agent MCP support, Canny’s built-in PM prompts (weekly triage, sprint planning), and PostHog’s experiment management show vendors tailoring MCP tools for product management workflows rather than just exposing generic APIs.

5. Read-only modes are common — Shortcut, Asana, ClickUp, PostHog, and Canny all offer read-only modes. This reflects enterprise caution about AI agents making changes to production project management data.

6. Security vulnerabilities are now a real concern — CVE-2026-27825/CVE-2026-27826 in sooperset/mcp-atlassian are a wake-up call. High-star community MCP servers running with file system access are a meaningful attack surface. Organizations running self-hosted MCP servers should treat them as network-exposed services and apply patches promptly.

Bottom Line

Rating: 4.5/5 — Product management has the strongest vendor participation of any enterprise software category in the MCP ecosystem. Ten or more vendors now ship official MCP servers, most with hosted remote endpoints and OAuth authentication. Wrike and Smartsheet joined the official ecosystem since the last review. The community ecosystem adds depth where vendors haven’t gone far enough (ClickUp’s 150+ tools, Asana’s 50+ tools, Canny’s 37 tools with PM prompts). Product analytics coverage is excellent with PostHog, Mixpanel, and Amplitude all offering official servers. The main gaps remaining are dedicated roadmapping tools (Roadmunk, airfocus, Craft.io) and Productboard’s lack of an official server. Security note: if you run sooperset/mcp-atlassian, upgrade to v0.17.0 immediately for the CVE-2026-27825/27826 patches. For product managers, the MCP ecosystem is production-ready.