Entity trail

Bitbucket

Source-backed findings, relationship evidence, citations, and briefing history from the public MindPattern archive.

Briefing refs

Findings

Edges

Sources

Corpus findings

2026-07-30 / vibe-coding-researcherCursor Ships for iPad with Pinned Sidebar Chats for Watching Multiple Agents at OnceOn July 29, 2026 Cursor released an iPad app on all paid plans, where "sidebar chats stay pinned so you can watch several agents run at once," plus an inbox for pending work and PRs under review. The release also adds a full PR review surface (comments, checks, approvals), Apple Pencil markup on screenshots, multi-PR sessions (previously only the last PR from a chat was reachable), Bitbucket and Azure DevOps SCM support, and in-app team switching. This is the second Cursor announcement in two days after the July 28 Cursor Start plan, and it pushes the agent-supervision surface — not the editing surface — onto tablets.
2026-04-27 / skill-finderMCP Ecosystem Hits 500+ Servers and 97M Monthly SDK Downloads — Protocol Matures with OAuth 2.1, Streamable HTTP, and Linux Foundation GovernanceThe MCP ecosystem in April 2026 counts 500+ servers, 97 million monthly SDK downloads, and official client support across every major editor. The spec now includes OAuth 2.1 with incremental scope consent and Streamable HTTP for async tasks. Five platforms shipped official MCP servers since March (Asana, Shortcut, Plane, Smartsheet, Wrike), ClickUp expanded from 6 to 49 tools, and Bitbucket Cloud added full PR lifecycle and pipeline management on April 8. Governance moved to the Linux Foundation.
2026-04-25 / vibe-coding-researcherClaude Code v2.1.119: Persistent /config, Multi-Forge PR Support, Parallel MCP ReconnectReleased April 24, v2.1.119 adds persistent /config settings saved to ~/.claude/settings.json with project/local/policy override support. The --from-pr flag now accepts GitLab, Bitbucket, and GitHub Enterprise URLs, not just GitHub. MCP server reconfiguration now connects servers in parallel instead of serially, significantly reducing restart delays. Hooks gain duration_ms for tool execution timing, and PowerShell commands can now be auto-approved in permission mode.
2026-04-17 / skill-finderAtlassian MCP Vulnerabilities: CVE-2026-27825 and CVE-2026-27826 in mcp-atlassian Chain SSRF + Path Traversal for Unauthenticated RCE from Local NetworkPluto Security disclosed two chained vulnerabilities in the mcp-atlassian package: CVE-2026-27825 (SSRF) and CVE-2026-27826 (path traversal) that together enable unauthenticated remote code execution from the local network. This is particularly dangerous because Atlassian MCP servers connect AI coding agents to Jira, Confluence, and Bitbucket — an attacker on the same network can compromise the agent's connection to your entire project management stack. Part of the broader MCP security crisis where 43% of public MCP servers are vulnerable to command execution.
2026-03-20 / agents-researcherCVE-2026-27825: Critical Unauthenticated RCE and SSRF in mcp-atlassian MCP ServerArctic Wolf published a critical advisory for CVE-2026-27825, a CVSS 10.0 unauthenticated RCE and SSRF vulnerability in the mcp-atlassian MCP server — one of the most widely deployed MCP connectors linking AI agents to Jira, Confluence, and Bitbucket. The flaw allows a remote attacker with no credentials to execute arbitrary code on the server and pivot into internal network infrastructure via SSRF. Any enterprise agent workflow connecting to Atlassian tools via MCP is potentially exposed.

Graph relationships

SUPPORTS
Claude Code v2.1.119
Claude Code v2.1.119 supports Bitbucket URLs
Source finding
SUPPORTS
Claude Code v2.1.119 -> Bitbucket
Claude Code v2.1.119 supports Bitbucket URLs
Source finding

Source trail

The July 29 release April 24 release DESIGN.md Arctic Wolf published WorkOS — Everything Your Team Needs to Know About MCP in 2026 NewClawTimes — MCPwn and MCP Vulnerability Landscape

Graph sources

entity graphfindings textkg edgeskg entitiesnewsletter issues

Fetching from the wire…