Confluence setup guide

Agents find, read and write your company's documents and files.

Ways to connect

Company admins connect apps, on the Integrations page in Everdeck: open Confluence, choose one of the ways below, follow its steps and fill in its fields. Everdeck checks what you enter before it saves anything, and asks you to confirm it’s you (your second factor) before you type any secret. How connecting works.

Confluence can be connected 3 ways. Where there’s a key or token to paste, that’s usually the quickest.

API token

API key.

1. Signed in as the account the agent should use, open https://id.atlassian.com/manage-profile/security/api-tokens and choose Create API token.
2. Set an expiry (up to one year) and copy the token.
3. Enter your site URL, the account's email and the token. The agent can do anything that account can do in Confluence; a scoped token limits it.
4. Optional, to start work when a page is created or edited: once connected, set up the Confluence trigger on Everdeck's Intake page. Everdeck checks for new and edited pages the account can see every 5 minutes with this connection.

Field	What to enter
Site URL	Web address. For example https://your-team.atlassian.net.
Atlassian account email	Email address.
API token	A secret: Everdeck saves it encrypted and never shows it again. Where to find it.

Disconnecting deletes the credentials Everdeck saved, but Everdeck can't revoke them: the key, token or password itself keeps working at Confluence until you delete or rotate it there.

Scoped API token (personal or service account)

API key.

1. Signed in as the account the agent should use (a dedicated Atlassian service account works well), open https://id.atlassian.com/manage-profile/security/api-tokens and choose Create API token with scopes. Service account tokens are created by an organization admin in Atlassian Administration.
2. Pick Confluence and select these scopes: read:page:confluence, write:page:confluence, read:space:confluence, read:hierarchical-content:confluence, read:comment:confluence, write:comment:confluence and search:confluence.
3. Set an expiry (1 to 365 days) and copy the token; it cannot be shown again.
4. Enter your site URL, the account's email and the token.
5. Optional, to start work when a page is created or edited: once connected, set up the Confluence trigger on Everdeck's Intake page. Everdeck checks for new and edited pages the account can see every 5 minutes with this connection.

Field	What to enter
Site URL	Web address. For example https://your-team.atlassian.net.
Atlassian account email	Email address. For a service account, the email address shown for it in Atlassian Administration.
Scoped API token	A secret: Everdeck saves it encrypted and never shows it again. Where to find it.

Disconnecting deletes the credentials Everdeck saved, but Everdeck can't revoke them: the key, token or password itself keeps working at Confluence until you delete or rotate it there.

Your Atlassian OAuth 2.0 (3LO) app

Your OAuth app.

This way signs in with an OAuth app you create for Confluence, as its steps describe: Everdeck never uses an app of its own. Register this redirect URI with your app:

https://everdeck.io/api/oauth/callback

Then save the app’s client ID and secret in Everdeck, on the connect page or under OAuth apps, and sign in.

1. Open https://developer.atlassian.com/console/myapps and create an OAuth 2.0 integration.
2. Under Authorization, add the callback URL https://everdeck.io/api/oauth/callback.
3. Under Permissions, add the Confluence API and select the scopes listed below.
4. A new app is private: only the developer who created it can authorize it. If the agent will sign in with a different Atlassian account, open Distribution and turn on sharing.
5. Under Settings, copy the Client ID and Secret into the form, then sign in as the agent's account and approve access for your site.
6. Optional, to start work when a page is created or edited: once connected, set up the Confluence trigger on Everdeck's Intake page. Everdeck checks for new and edited pages the account can see every 5 minutes with this connection.

Field	What to enter
Site URL (optional)	Text. For example https://your-team.atlassian.net. Only needed when your Atlassian account can reach more than one site: the site to connect.

The scopes Everdeck asks for:

• read:page:confluence
• write:page:confluence
• read:space:confluence
• read:hierarchical-content:confluence
• read:comment:confluence
• write:comment:confluence
• search:confluence
• offline_access

Disconnecting deletes the tokens Everdeck saved. Remove Everdeck under Connected apps in the person's Atlassian account settings.

What agents can do

An agent uses an action only when its charter grants it, on the agent’s Tools tab, where you choose whether each one runs by itself (Auto), asks first or never runs. Each action has a risk tier: tier 3 actions, which customers or the public see, ask first unless you choose otherwise, and tier 4 actions (money, deleting things, access) always need a person. How tools and tiers work.

Actions marked Reads outside content return things people outside your company may have written. Agents treat what they read as information, never as instructions, and their riskier actions later in the same session need approval.

• Search the wikiTier 0 · ReadReads outside contentconfluence_search

  Search pages, blog posts and attachments with CQL, for example: type = page AND text ~ "refund policy", or space = HR AND title ~ "onboarding" ORDER BY lastmodified DESC.

• List spacesTier 0 · ReadReads outside contentconfluence_list_spaces

  List the spaces the account can see with their id, key and home page.

• Read a pageTier 0 · ReadReads outside contentconfluence_get_page

  Read a page's title, space, parent, current version number and body in storage format (XHTML). Read the page before updating it.

• List pages in a spaceTier 0 · ReadReads outside contentconfluence_list_pages_in_space

  List a space's pages, most recently changed first. depth root returns only top-level pages.

• List child pagesTier 0 · ReadReads outside contentconfluence_list_child_pages

  List the pages, folders and other content directly under a page.

• Create a pageTier 2 · ReversibleReads outside contentconfluence_create_page

  Publish a new page in a space, under a parent page when given (otherwise under the space's home page). The body is Confluence storage format, which is XHTML such as <h2>Summary</h2><p>Text</p><ul><li>Item</li></ul>.

• Update a pageTier 2 · ReversibleReads outside contentconfluence_update_page

  Replace a page's title and body. Send the whole new body (storage format) and the current version number plus one, both from get_page.

• List commentsTier 0 · ReadReads outside contentconfluence_list_comments

  Read the footer comments on a page, newest first.

• Comment on a pageTier 2 · ReversibleReads outside contentconfluence_add_comment

  Add a footer comment to a page. The comment is XHTML, for example <p>Updated the pricing table.</p>.

• Reply to a commentTier 2 · ReversibleReads outside contentconfluence_reply_to_comment

  Reply to a footer comment.

What can start work

These events from Confluence can become tasks for your agents through Intake. How Intake works.

A page was created or edited in spaces the account can see.

Connect Confluence first. Then, on the Intake page, open Webhooks and sources, find it under Connector triggers and select Start watching. Then, on the Rules tab, select New rule to say which requests become tasks and who gets them.

Testing, problems and disconnecting

Everdeck checks the connection when you save it. On the connection’s page in Integrations, Test checks it again at any time.

If Confluence later refuses the connection, for example because a key was deleted or a sign-in expired, the connection shows Needs attention on the Integrations page and the people who manage connections are told. Agents can’t use it until a company admin fixes it with Edit or Reconnect.

To stop agents using Confluence, open the connection and select Disconnect. Agents stop using it at once and its saved credentials are deleted. What else happens depends on how it was connected: each way above says.