Prerequisites
- A Backlog space with access to the projects you want to work in.
- A space-scoped API key, created from the issuing user’s Personal Settings → API tab.
- For create/update actions: the key’s user needs the matching project permission.
Read-only tracking works with any key whose user can see the target projects. Creating or updating issues, wikis, and pull requests additionally requires that user to have write permission on the project. If your space restricts API access, a space administrator must enable it before keys can be issued.
Setup
1
Create an API key
In Backlog, open your profile menu and go to Personal Settings → API. Enter a memo (e.g.
cloudthinker) and click Submit to generate the key, then copy it.2
Add the connection in CloudThinker
Navigate to Connections → Backlog and enter:
- Domain: your full Backlog domain, e.g.
<myorg>.backlog.com— the full host, not just the space key - API Key: the key you just created
Connection details
Required permissions
The API key inherits the access of the user who issued it. Read operations work with any key whose user can see the target projects. Create, update, and delete operations additionally require the user to have write permission on the project and explicit approval in CloudThinker.Agent capabilities
Once connected, agents have read access to your Backlog projects, issues, wikis, and repositories, plus a set of approval-gated write operations.Verify the connection
Example prompts
For spaces with many projects, scope requests to a single project or milestone so the agent returns focused results.
Troubleshooting
Requests return 404 or the wrong space
Requests return 404 or the wrong space
BACKLOG_DOMAIN is set to just the space key instead of the full domain. Use the complete host, e.g.
<myorg>.backlog.com, and reconnect.Connection works but no projects or issues appear
Connection works but no projects or issues appear
The key’s user is not a member of any project, or lacks visibility on the ones you expect. Add the user to the target project in Backlog, then re-run discovery.
Create or update actions fail with a permission error
Create or update actions fail with a permission error
The key’s user lacks write permission on the project. Re-issue the key under a user with the right project role, and approve the action when prompted.
Results look cut off on large projects
Results look cut off on large projects
Very large responses are trimmed to keep replies focused. Scope the request to a single project, milestone, or status, or ask for a count first and then drill in.
Security
- Least privilege — grant only the permissions the agents need for your use case; start read-only and widen later.
- Read-only by default — use read-only credentials unless you want agents to make changes through this connection.
- Rotate credentials — rotate keys and tokens on your normal schedule; CloudThinker picks up the new value when you update the connection.
- Revoke on offboarding — remove the credential at the provider when you delete a connection or a teammate leaves.
- Least-privilege user — issue the API key under a user with only the project access CloudThinker needs.
- Correct domain — store the full domain (
<myorg>.backlog.com), not just the space key.
Related
Atlassian Connection
Jira and Confluence issue tracking and knowledge base
Approval
How approval-gated actions work