Ctrlk
Go to WebsiteLoginGet a Demo
For the complete documentation index, see llms.txt. This page is also available as Markdown.

YouTrack

Connect your company's YouTrack so agents work with issues, articles and projects through Cakewalk's gateway. A YouTrack administrator creates one OAuth client first.

Connect your company's YouTrack to Cakewalk's MCP Gateway. Every agent tool call against YouTrack passes through the gateway and is evaluated against your Policies.

Setup Flow: Register your own app

YouTrack does not register applications automatically. Its own documentation states that OAuth Dynamic Client Registration isn't supported yet. So a YouTrack administrator creates one OAuth client by hand and hands the Client ID and Client secret to your Cakewalk Admin. That happens once per company.

Requirements

  • YouTrack 2025.3 or later. The remote MCP server shipped in that release. Cloud instances were upgraded automatically. Self hosted YouTrack Server needs the upgrade.

  • A YouTrack administrator who can open Administration > Access Management.

  • A Cakewalk Admin, to add the Connection and enter the credentials.

  • Your YouTrack instance name. Cakewalk builds the endpoint as https://{instance}.youtrack.cloud/mcp.

Step 1: Create an OAuth Client in YouTrack

  1. In YouTrack, go to Administration > Access Management > OAuth Clients.

  2. Select New OAuth client and give it a name your team recognizes, for example Cakewalk. In the Home URL field, enter:

    https://www.cakewalk.security/

  3. Open the Authentication tab.

  4. Tick the following boxes: Client Credentials flow, Authorization Code flow, Require PKCE and Require user consent. Cakewalk's gateway uses PKCE with S256.

  5. Under Base URL, add Cakewalk's base URL:

    https://mcp-gateway.getcakewalk.io

  6. Under Redirect URIs, add Cakewalk's redirect URI:

    https://mcp-gateway.getcakewalk.io/api/v1/Auth/Callback

  7. Select Save.

  8. On the Authentication tab, copy the Client ID. To reveal the Client secret, select Change next to it and copy the value.

You never enter scopes. Your YouTrack instance publishes the scope its MCP server needs, and the gateway reads it when an employee signs in.

You never enter scopes. Your YouTrack instance publishes the scope its MCP server needs, and the gateway reads it when an employee signs in.

Step 2: Add the Connection in Cakewalk

  1. Open https://app.getcakewalk.io.

  2. Go to Connections, select Add org connection, then Browse catalog.

  3. Select YouTrack and select Continue.

  4. On Configure connections, enter your YouTrack instance name in the instance field. The MCP Url shown above the field updates to the full endpoint.

  5. Enter the Client ID and Client secret from Step 1.

  6. Select Confirm.

Credentials are encrypted in your browser before they reach Cakewalk.

Self hosted YouTrack Server

The catalog card builds a youtrack.cloud address, so a self hosted instance does not fit it. Add YouTrack as a custom Connection instead: the same OAuth client from Step 1, Connection type OAuth with client ID and secret, and MCP Url set to your own host, for example https://youtrack.company.com/mcp. Cloud instances still on the older myjetbrains.com domain take the same path, with https://<name>.myjetbrains.com/youtrack/mcp. See Add a Custom Connection.

Step 3: Employees Connect

No credentials change hands again. From an agent platform connected to Cakewalk, the employee connects YouTrack, signs in and approves access. Each call then runs with that employee's own YouTrack permissions, and each call is still evaluated against your Policies.

YouTrack can hide projects and issues from connected AI clients. An agent may get narrower results than the employee sees in YouTrack. That filtering is a YouTrack setting, not a Cakewalk Policy.

Verifying It Works

The YouTrack Connection card flips to Active on All Connections. From an agent platform connected to Cakewalk, ask the agent to find a recent YouTrack issue. If YouTrack returns results, the Connection is live. The Connection's Tools tab fills in on that first connect.

Troubleshooting

  • Sign in completes but the Connection does not go Active, or no tools appear. YouTrack's MCP server answers the gateway's first discovery probe in a shape the MCP SDK rejects. Cakewalk handles that shape as of 2026-08-18. If the Connection was attempted before then, reconnect once.

  • YouTrack's login opens, then the agent reports an authorization problem. Recheck the Client ID and Client secret in Cakewalk, and confirm the redirect URI on the OAuth client matches exactly, with no trailing slash.

  • The MCP endpoint returns 404. The instance is below 2025.3, or the instance name is wrong. Open https://<instance>.youtrack.cloud/mcp in a browser: a 401 means the server is there and only the authorization is missing.

  • Permanent tokens are not a path here. YouTrack also documents a permanent token sent as an Authorization: Bearer header for clients that cannot complete OAuth. Cakewalk's gateway is OAuth based, so the OAuth client above is the only supported route.

Learn More

PreviousThoughtSpot
NextZoom

Last updated

Was this helpful?