> For the complete documentation index, see [llms.txt](https://www.cakewalk.security/docs/llms.txt). Markdown versions of documentation pages are available by appending `.md` to page URLs; this page is available as [Markdown](https://www.cakewalk.security/docs/ai-agent-access/connections-and-integrations/agent-connections/youtrack.md). # YouTrack Connect your company's YouTrack so agents work with issues, articles and projects through Cakewalk's gateway. A YouTrack administrator creates one OAuth client first. Connect your company's YouTrack to Cakewalk's MCP Gateway. Every agent tool call against YouTrack passes through the gateway and is evaluated against your Policies. ## Setup Flow: Register your own app YouTrack does not register applications automatically. Its own documentation states that OAuth Dynamic Client Registration isn't supported yet. So a YouTrack administrator creates one OAuth client by hand and hands the Client ID and Client secret to your Cakewalk Admin. That happens once per company. ## Requirements * YouTrack 2025.3 or later. The remote MCP server shipped in that release. Cloud instances were upgraded automatically. Self hosted YouTrack Server needs the upgrade. * A YouTrack administrator who can open Administration > Access Management. * A Cakewalk Admin, to add the Connection and enter the credentials. * Your YouTrack instance name. Cakewalk builds the endpoint as `https://{instance}.youtrack.cloud/mcp`. ## Step 1: Create an OAuth Client in YouTrack 1. In YouTrack, go to **Administration > Access Management > OAuth Clients**. 2. Select **New OAuth client** and give it a name your team recognizes, for example Cakewalk. In the **Home URL** field, enter: ``` https://www.cakewalk.security/ ``` 3. Open the **Authentication** tab. 4. Tick the following boxes: **Client Credentials flow**, **Authorization Code flow**, **Require PKCE** and **Require user consent**. Cakewalk's gateway uses PKCE with S256. 5. Under **Base URL**, add Cakewalk's base URL: ``` https://mcp-gateway.getcakewalk.io ``` 6. Under **Redirect URIs**, add Cakewalk's redirect URI: ``` https://mcp-gateway.getcakewalk.io/api/v1/Auth/Callback ``` 7. Select **Save**. 8. On the **Authentication** tab, copy the **Client ID**. To reveal the **Client secret**, select **Change** next to it and copy the value. > You never enter scopes. Your YouTrack instance publishes the scope its MCP server needs, and the gateway reads it when an employee signs in. {% hint style="info" %} You never enter scopes. Your YouTrack instance publishes the scope its MCP server needs, and the gateway reads it when an employee signs in. {% endhint %} ## Step 2: Add the Connection in Cakewalk 1. Open . 2. Go to **Connections**, select **Add org connection**, then **Browse catalog**. 3. Select **YouTrack** and select **Continue**. 4. On **Configure connections**, enter your YouTrack instance name in the **instance** field. The **MCP Url** shown above the field updates to the full endpoint. 5. Enter the **Client ID** and **Client secret** from Step 1. 6. Select **Confirm**. Credentials are encrypted in your browser before they reach Cakewalk. ### Self hosted YouTrack Server The catalog card builds a `youtrack.cloud` address, so a self hosted instance does not fit it. Add YouTrack as a custom Connection instead: the same OAuth client from Step 1, Connection type **OAuth with client ID and secret**, and **MCP Url** set to your own host, for example `https://youtrack.company.com/mcp`. Cloud instances still on the older `myjetbrains.com` domain take the same path, with `https://.myjetbrains.com/youtrack/mcp`. See [Add a Custom Connection](/docs/ai-agent-access/how-to-guides/connections/add-a-custom-connection.md). ## Step 3: Employees Connect No credentials change hands again. From an agent platform connected to Cakewalk, the employee connects YouTrack, signs in and approves access. Each call then runs with that employee's own YouTrack permissions, and each call is still evaluated against your Policies. {% hint style="info" %} YouTrack can hide projects and issues from connected AI clients. An agent may get narrower results than the employee sees in YouTrack. That filtering is a YouTrack setting, not a Cakewalk Policy. {% endhint %} ## Verifying It Works The YouTrack Connection card flips to Active on All Connections. From an agent platform connected to Cakewalk, ask the agent to find a recent YouTrack issue. If YouTrack returns results, the Connection is live. The Connection's **Tools** tab fills in on that first connect. ## Troubleshooting * **Sign in completes but the Connection does not go Active, or no tools appear.** YouTrack's MCP server answers the gateway's first discovery probe in a shape the MCP SDK rejects. Cakewalk handles that shape as of 2026-08-18. If the Connection was attempted before then, reconnect once. * **YouTrack's login opens, then the agent reports an authorization problem.** Recheck the Client ID and Client secret in Cakewalk, and confirm the redirect URI on the OAuth client matches exactly, with no trailing slash. * **The MCP endpoint returns 404.** The instance is below 2025.3, or the instance name is wrong. Open `https://.youtrack.cloud/mcp` in a browser: a 401 means the server is there and only the authorization is missing. * **Permanent tokens are not a path here.** YouTrack also documents a permanent token sent as an `Authorization: Bearer` header for clients that cannot complete OAuth. Cakewalk's gateway is OAuth based, so the OAuth client above is the only supported route. ## Learn More * [Remote MCP server, YouTrack Cloud](https://www.jetbrains.com/help/youtrack/cloud/model-context-protocol-server.html) * [Remote MCP server, YouTrack Server](https://www.jetbrains.com/help/youtrack/server/model-context-protocol-server.html) * [OAuth clients](https://www.jetbrains.com/help/youtrack/cloud/oauth-clients.html) * [MCP tools](https://www.jetbrains.com/help/youtrack/devportal/ai-tools.html) * [Custom MCP tools as YouTrack apps](https://www.jetbrains.com/help/youtrack/devportal/apps-mcp-tools.html) --- # Agent Instructions This documentation is published with GitBook. GitBook is the documentation platform designed so that both humans and AI agents can read, navigate, and reason over technical content effectively. Learn more at gitbook.com. ## Querying This Documentation If you need additional information that is not directly available in this page, you can query the documentation dynamically by asking a question. Perform an HTTP GET request on the current page URL with the `ask` query parameter, and the optional `goal` query parameter: ``` GET https://www.cakewalk.security/docs/ai-agent-access/connections-and-integrations/agent-connections/youtrack.md?ask=&goal= ``` `ask` is the immediate question: it should be specific, self-contained, and written in natural language. `goal` is optional and describes the broader end goal you are ultimately trying to accomplish on behalf of the user. GitBook uses it to tailor the answer towards what is most useful for that goal. The response will contain a direct answer to the question and relevant excerpts and sources from the documentation. Use this mechanism when the answer is not explicitly present in the current page, you need clarification or additional context, or you want to retrieve related documentation sections.