---
title: Atlassian BitBucket Cloud
slug: connectors/atlassian-bitbucket-cloud
docTags: 
createdAt: 2026-06-09T16:29:47.084Z
---

The Atlassian BitBucket Cloud connector allows for automated management of repository artifacts, facilitating seamless integration with security workflows.

Atlassian BitBucket Cloud is a popular platform for hosting Git repositories, enabling teams to collaborate on code efficiently. This connector allows Swimlane Turbine users to automate the management of repository artifacts, including uploading, downloading, listing, and deleting files. By integrating with Atlassian BitBucket Cloud, users can streamline their development workflows, enhance collaboration, and ensure efficient artifact management directly within their security automation processes.

## Prerequisites

Before you can use the Atlassian BitBucket Cloud connector for Turbine, you'll need access to the BitBucket Cloud API. This requires the following:

- Access Token Authentication using bearer token such as a JWT, etc. with the following parameters:
  - URL: The endpoint URL for accessing BitBucket Cloud API.
  - Token: A valid bearer token for authenticating API requests.

## Asset Setup

This Connector supports the Access Token Authentication. Access Tokens are passwords (or tokens) that provide access to a single repository, project or workspace. These tokens can authenticate with Bitbucket APIs for scripting, CI/CD tools, Bitbucket Cloud-connected apps, and Bitbucket Cloud integrations.

Access Tokens are linked to a repository, project, or workspace, not a user account. The level of access provided by the token is set when a repository, or workspace admin creates it, by setting permission scopes.

There are three types of Access Token:

. Repository Access Tokens can connect to a single repository, preventing them from accessing any other repositories or workspaces.
. Project Access Tokens can connect to a single project, providing access to any repositories within the project.
. Workspace Access Tokens can connect to a single workspace and have access to any projects and repositories within that workspace.

## Capabilities

This Connector provides the following capabilities:

- Delete Download Artifact
- Get Download Artifact Link
- List Download Artifacts
- Upload Download Artifact

## API Documentation Link

[Atlassian BitBucket Cloud API Documentation Link](https://developer.atlassian.com/cloud/bitbucket/rest/api-group-downloads/#api-group-downloads)

\[Atlassian BitBucket Cloud Authentication Link] ([https://developer.atlassian.com/cloud/bitbucket/rest/intro/#basic-auth](https://developer.atlassian.com/cloud/bitbucket/rest/intro/#basic-auth))

## Additional Documentation

- [Atlassian BitBucket Cloud Connector Documentation](https://docs.swimlane.com/connectors/atlassian-bitbucket-cloud)
- [Atlassian BitBucket Cloud API Documentation](https://developer.atlassian.com/cloud/bitbucket/rest/intro/)

# Configurations

## HTTP Bearer Authentication

Access Token Authenticates using bearer token such as a JWT, etc.

### Configuration Parameters

| **Parameter** | **Description**                    | **Type** | **Required** |
| ------------- | ---------------------------------- | -------- | ------------ |
| url           | A URL to the target host.          | string   | Required     |
| token         | Token                              | string   | Required     |
| verify\_ssl   | Verify SSL certificate             | boolean  | Optional     |
| http\_proxy   | A proxy to route requests through. | string   | Optional     |

# Actions

## Delete Download Artifact

Delete a specified download artifact from an Atlassian BitBucket Cloud repository using workspace, repo\_slug, and filename as path parameters.

### Endpoint

- **URL:** `/2.0/repositories/{{workspace}}/{{repo_slug}}/downloads/{{filename}}`
- **Method:** `DELETE`

### Input

| **Argument Name**           | **Type** | **Required** | **Description**                                    |
| --------------------------- | -------- | ------------ | -------------------------------------------------- |
| `path_parameters.workspace` | string   | Required     | Parameters for the Delete Download Artifact action |
| `path_parameters.repo_slug` | string   | Required     | Parameters for the Delete Download Artifact action |
| `path_parameters.filename`  | string   | Required     | Parameters for the Delete Download Artifact action |

### Input Example

`{"path_parameters":{"workspace":"{23bad0dd-8e8c-4990-8679-0914c76e8edb}","repo_slug":"{bc6ba91b-ba02-4abb-9a15-5e5634f82c22}","filename":"Recorded_Future_get_Feed_Lists.txt"}}`

### Output

| **Parameter**   | **Type** | **Description**                  |
| --------------- | -------- | -------------------------------- |
| `status_code`   | number   | HTTP status code of the response |
| `reason`        | string   | Response reason phrase           |
| `response_text` | string   | Output field: response\_text     |

### Output Example

`{"status_code":204,"response_headers":{"server":"envoy","vary":"Authorization, Origin, cookie, user-context","cache-control":"max-age=0, no-cache, no-store, must-revalidate","Content-Type":"text/html; charset=utf-8","x-oauth-scopes":"repository:delete, runner:write, pullrequest:write, webhook, pipeline:variable, ...","x-b3-traceid":"d20373631c06d3c3","x-usage-output-ops":"0","x-used-mesh":"False","x-dc-location":"Micros-3","Strict-Transport-Security":"max-age=31536000; includeSubDomains; preload...`

## Get Download Artifact Link

Retrieve the actual file contents from Atlassian BitBucket Cloud using filename, repo\_slug, and workspace path parameters.

### Endpoint

- **URL:** `/2.0/repositories/{{workspace}}/{{repo_slug}}/downloads/{{filename}}`
- **Method:** `GET`

### Input

| **Argument Name**           | **Type** | **Required** | **Description**                                                                                   |
| --------------------------- | -------- | ------------ | ------------------------------------------------------------------------------------------------- |
| `path_parameters.workspace` | string   | Required     | This can either be the workspace ID (slug) or the workspace UUID surrounded by curly-braces.      |
| `path_parameters.repo_slug` | string   | Required     | This can either be the repository slug or the UUID of the repository, surrounded by curly-braces. |
| `path_parameters.filename`  | string   | Required     | Name of the file.                                                                                 |

### Input Example

`{"path_parameters":{"workspace":"{23bad0dd-8e8c-4990-8679-0914c76e8edb}","repo_slug":"{bc6ba91b-ba02-4abb-9a15-5e5634f82c22}","filename":"auto-mitigation.txt"}}`

### Output

| **Parameter**   | **Type** | **Description**                  |
| --------------- | -------- | -------------------------------- |
| `status_code`   | number   | HTTP status code of the response |
| `reason`        | string   | Response reason phrase           |
| `file`          | object   | Output field: file               |
| `file.filename` | string   | Name of the resource             |
| `file.file`     | string   | Output field: file.file          |

### Output Example

`{"status_code":200,"response_headers":{"x-amz-id-2":"c1vjV+TTsSIQ9bwE8NKoPmVHFZy/e/ugf3HbxKOcuDzNB307R5GlyEa0M1JO2Si90J24kL/EkJ0=","x-amz-request-id":"QYACE4XM1HQZ845N","Date":"Mon, 30 Oct 2023 10:31:02 GMT","Last-Modified":"Wed, 25 Oct 2023 08:19:49 GMT","ETag":"\"1f27ed2ab4e972fd047c71ae9bc22edd-2\"","x-amz-server-side-encryption":"AES256","x-amz-version-id":"XhhJ68Um8awo_h6pOCJxc3XAJElDxSDG","Content-Disposition":"attachment; filename=\"auto-mitigation.txt\"","Accept-Ranges":"bytes","Content-...`

## List Download Artifacts

Return a list of download links for artifacts in a specified Atlassian BitBucket Cloud repository using workspace and repo\_slug as path parameters.

### Endpoint

- **URL:** `/2.0/repositories/{{workspace}}/{{repo_slug}}/downloads`
- **Method:** `GET`

### Input

| **Argument Name**           | **Type** | **Required** | **Description**                                                                                   |
| --------------------------- | -------- | ------------ | ------------------------------------------------------------------------------------------------- |
| `path_parameters.workspace` | string   | Required     | This can either be the workspace ID (slug) or the workspace UUID surrounded by curly-braces.      |
| `path_parameters.repo_slug` | string   | Required     | This can either be the repository slug or the UUID of the repository, surrounded by curly-braces. |

### Input Example

`{"path_parameters":{"workspace":"{23bad0dd-8e8c-4990-8679-0914c76e8edb}","repo_slug":"{bc6ba91b-ba02-4abb-9a15-5e5634f82c22}"}}`

### Output

| **Parameter**                   | **Type** | **Description**                  |
| ------------------------------- | -------- | -------------------------------- |
| `status_code`                   | number   | HTTP status code of the response |
| `reason`                        | string   | Response reason phrase           |
| `values`                        | array    | Value for the parameter          |
| `values.name`                   | string   | Name of the resource             |
| `values.size`                   | number   | Value for the parameter          |
| `values.created_on`             | string   | Value for the parameter          |
| `values.user`                   | object   | Value for the parameter          |
| `values.user.type`              | string   | Type of the resource             |
| `values.user.links`             | object   | Value for the parameter          |
| `values.user.links.avatar`      | object   | Value for the parameter          |
| `values.user.links.avatar.href` | string   | Value for the parameter          |
| `values.user.created_on`        | string   | Value for the parameter          |
| `values.user.display_name`      | string   | Name of the resource             |
| `values.user.uuid`              | string   | Unique identifier                |
| `values.user.account_id`        | string   | Unique identifier                |
| `values.user.account_status`    | string   | Status value                     |
| `values.user.kind`              | string   | Value for the parameter          |
| `values.downloads`              | number   | Value for the parameter          |
| `values.links`                  | object   | Value for the parameter          |
| `values.links.self`             | object   | Value for the parameter          |
| `values.links.self.href`        | string   | Value for the parameter          |
| `values.type`                   | string   | Type of the resource             |
| `pagelen`                       | number   | Output field: pagelen            |
| `size`                          | number   | Output field: size               |
| `page`                          | number   | Output field: page               |

### Output Example

`{"status_code":200,"response_headers":{"server":"envoy","vary":"Authorization, Origin, cookie, user-context","cache-control":"private","Content-Type":"application/json; charset=utf-8","x-oauth-scopes":"webhook, repository:delete, pullrequest:write, runner:write, pipeline:variable, ...","x-b3-traceid":"0a9bec6af5498666","x-usage-output-ops":"0","Content-Encoding":"gzip","x-used-mesh":"False","x-dc-location":"Micros-3","Strict-Transport-Security":"max-age=31536000; includeSubDomains; preload","Dat...`

## Upload Download Artifact

Upload new download artifacts to Atlassian BitBucket Cloud using specified workspace and repository slug.

### Endpoint

- **URL:** `/2.0/repositories/{{workspace}}/{{repo_slug}}/downloads`
- **Method:** `POST`

### Input

| **Argument Name**           | **Type** | **Required** | **Description**                                                                                   |
| --------------------------- | -------- | ------------ | ------------------------------------------------------------------------------------------------- |
| `path_parameters.workspace` | string   | Required     | This can either be the workspace ID (slug) or the workspace UUID surrounded by curly-braces.      |
| `path_parameters.repo_slug` | string   | Required     | This can either be the repository slug or the UUID of the repository, surrounded by curly-braces. |
| `form_body`                 | object   | Required     | Request body data                                                                                 |
| `form_body.file`            | array    | Required     | Request body data                                                                                 |
| `form_body.file.file_name`  | string   | Required     | Request body data                                                                                 |
| `form_body.file.file`       | string   | Required     | Request body data                                                                                 |

### Input Example

`{"path_parameters":{"workspace":"{23bad0dd-8e8c-4990-8679-0914c76e8edb}","repo_slug":"{bc6ba91b-ba02-4abb-9a15-5e5634f82c22}"}}`

### Output

| **Parameter** | **Type** | **Description**                  |
| ------------- | -------- | -------------------------------- |
| `status_code` | number   | HTTP status code of the response |
| `reason`      | string   | Response reason phrase           |

### Output Example

`{"status_code":201,"response_headers":{"server":"envoy","vary":"Authorization, Origin","cache-control":"max-age=0, no-cache, no-store, must-revalidate","Content-Type":"application/json; charset=utf-8","x-oauth-scopes":"repository:admin, runner:write, repository:delete, pipeline:variable, pullreques...","x-b3-traceid":"2b6c9e7bd5f5e48d","x-usage-output-ops":"0","x-used-mesh":"False","x-dc-location":"Micros-3","Strict-Transport-Security":"max-age=31536000; includeSubDomains; preload","Date":"Mon, ...`

# Response Headers

| **Header**                    | **Description**                                                                      | **Example**                                                                                 |
| ----------------------------- | ------------------------------------------------------------------------------------ | ------------------------------------------------------------------------------------------- |
| Accept-Ranges                 | HTTP response header: Accept-Ranges                                                  | bytes                                                                                       |
| cache-control                 | Directives for caching mechanisms                                                    | private                                                                                     |
| Connection                    | HTTP response header: Connection                                                     | keep-alive                                                                                  |
| Content-Disposition           | HTTP response header: Content-Disposition                                            | attachment; filename="auto-mitigation.txt"                                                  |
| Content-Encoding              | HTTP response header: Content-Encoding                                               | gzip                                                                                        |
| Content-Length                | The length of the response body in bytes                                             | 16003176                                                                                    |
| Content-Type                  | The media type of the resource                                                       | application/json; charset=utf-8                                                             |
| Date                          | The date and time at which the message was originated                                | Wed, 25 Oct 2023 12:01:23 GMT                                                               |
| ETag                          | An identifier for a specific version of a resource                                   | "1f27ed2ab4e972fd047c71ae9bc22edd-2"                                                        |
| expires                       | The date/time after which the response is considered stale                           | Wed, 25 Oct 2023 12:16:18 GMT                                                               |
| Last-Modified                 | The date and time at which the origin server believes the resource was last modified | Wed, 25 Oct 2023 08:19:49 GMT                                                               |
| server                        | Information about the software used by the origin server                             | envoy                                                                                       |
| Strict-Transport-Security     | HTTP response header: Strict-Transport-Security                                      | max-age=31536000; includeSubDomains; preload                                                |
| Transfer-Encoding             | HTTP response header: Transfer-Encoding                                              | chunked                                                                                     |
| vary                          | HTTP response header: vary                                                           | Authorization, Origin, cookie, user-context                                                 |
| x-accepted-oauth-scopes       | HTTP response header: x-accepted-oauth-scopes                                        | repository\:write                                                                           |
| x-amz-id-2                    | HTTP response header: x-amz-id-2                                                     | c1vjV+TTsSIQ9bwE8NKoPmVHFZy/e/ugf3HbxKOcuDzNB307R5GlyEa0M1JO2Si90J24kL/EkJ0=                |
| x-amz-request-id              | HTTP response header: x-amz-request-id                                               | QYACE4XM1HQZ845N                                                                            |
| x-amz-server-side-encryption  | HTTP response header: x-amz-server-side-encryption                                   | AES256                                                                                      |
| x-amz-version-id              | HTTP response header: x-amz-version-id                                               | XhhJ68Um8awo\_h6pOCJxc3XAJElDxSDG                                                           |
| x-asap-succeeded              | HTTP response header: x-asap-succeeded                                               | True                                                                                        |
| x-b3-spanid                   | HTTP response header: x-b3-spanid                                                    | 26f607835a76f8cf                                                                            |
| x-b3-traceid                  | HTTP response header: x-b3-traceid                                                   | d20373631c06d3c3                                                                            |
| X-Content-Type-Options        | HTTP response header: X-Content-Type-Options                                         | nosniff                                                                                     |
| x-credential-type             | HTTP response header: x-credential-type                                              | repo\_access\_token                                                                         |
| x-dc-location                 | HTTP response header: x-dc-location                                                  | Micros-3                                                                                    |
| x-envoy-upstream-service-time | HTTP response header: x-envoy-upstream-service-time                                  | 61                                                                                          |
| x-frame-options               | HTTP response header: x-frame-options                                                | SAMEORIGIN                                                                                  |
| x-oauth-scopes                | HTTP response header: x-oauth-scopes                                                 | repository\:delete, runner\:write, pullrequest\:write, webhook, pipeline, repository\:admin |
| x-render-time                 | HTTP response header: x-render-time                                                  | 0.1073920726776123                                                                          |
| x-request-count               | HTTP response header: x-request-count                                                | 2079                                                                                        |
| x-request-id                  | A unique identifier for the request                                                  | d20373631c06d3c3                                                                            |
| x-served-by                   | HTTP response header: x-served-by                                                    | 369c9c1360a2                                                                                |
| x-static-version              | HTTP response header: x-static-version                                               | 064769cf7355                                                                                |
| X-Trace-Id                    | HTTP response header: X-Trace-Id                                                     | 0a9bec6af5498666                                                                            |
| x-usage-input-ops             | HTTP response header: x-usage-input-ops                                              | 0                                                                                           |
| x-usage-output-ops            | HTTP response header: x-usage-output-ops                                             | 0                                                                                           |
| x-usage-system-time           | HTTP response header: x-usage-system-time                                            | 0.004899                                                                                    |
| x-usage-user-time             | HTTP response header: x-usage-user-time                                              | 0.074324                                                                                    |
| x-used-mesh                   | HTTP response header: x-used-mesh                                                    | False                                                                                       |
| x-version                     | HTTP response header: x-version                                                      | f0f0c49e2345                                                                                |
| x-view-name                   | HTTP response header: x-view-name                                                    | bitbucket.apps.downloads.api.v20.handlers.DownloadsHandler                                  |
| X-XSS-Protection              | HTTP response header: X-XSS-Protection                                               | 1; mode=block                                                                               |
