.png)

Confluence Integration Guide
Integrate Confluence with enterprise systems through REST APIs, selected webhooks, attachment endpoints, and scheduled Martini workflows.
Confluence integration options at a glance
Confluence integrations primarily use the Cloud or Data Center REST APIs to read and modify pages, spaces, blog posts, comments, labels, permissions, and related content. Attachment endpoints support listing, uploading, downloading, and inspecting files subject to permissions and endpoint requirements. Confluence Cloud also provides webhooks for selected events, while scheduled workflows can poll paginated APIs when event coverage is incomplete. Cloud authentication can use OAuth 2.0 3LO or API-token-based Basic Authentication; Data Center deployments may support Basic Authentication, personal access tokens, or session-based authentication. Martini can orchestrate these calls, transform Confluence JSON, expose controlled APIs, and implement incremental synchronization.
Common Confluence integration patterns
Common Confluence data objects used in integrations
Authentication and security considerations
Authentication options
Confluence Cloud supports OAuth 2.0 3LO for user-authorized or multi-tenant applications and API-token-based Basic Authentication for suitable controlled server-to-server scenarios. Data Center authentication depends on the deployment and may include Basic Authentication, personal access tokens, or session-based authentication.
Permissions and secrets
Confluence authentication does not bypass content, space, or application permissions. The authenticated identity must have access to the requested resources, and OAuth scopes must match the required operations. Martini should keep credentials and tokens in secure environment configuration rather than workflow definitions.
- Separate Cloud and Data Center credentials and base URLs.
- Request only the scopes and permissions required by the integration.
- Rotate tokens and credentials according to organizational policy.
- Use controlled Martini API endpoints when downstream applications should not receive direct Confluence credentials.
Operational considerations for Confluence integrations
Reliability and API behavior
Confluence list and search operations commonly require pagination. Atlassian Cloud APIs can apply rate limits, so workflows should detect HTTP 429 responses, honor Retry-After when supplied, use backoff, and control concurrency.
Content and version handling
- Track page IDs, space IDs, versions, timestamps, and content hashes to support idempotency.
- Retrieve the current page version before updates and define a policy for concurrent edit conflicts.
- Choose storage-oriented or rendered content representations deliberately.
- Handle attachment size limits, media types, file versions, duplicate names, and replacement rules.
- Validate response schemas and isolate API-version-specific calls behind reusable Martini workflows.
Events and reconciliation
Confluence Cloud webhook coverage is event- and resource-specific. Treat events as triggers rather than the sole system of record, retrieve authoritative resources when needed, and use scheduled reconciliation for unsupported or missed changes. Test Cloud and Data Center integrations separately because their endpoints, authentication, rate limits, permissions, and webhook behavior can differ.
Why use Martini instead of scripts or point-to-point integrations?
Orchestration beyond a script
Martini provides a maintainable workflow layer for authentication, REST API consumption, webhook intake, scheduled polling, pagination, transformation, business rules, and downstream delivery. This keeps Confluence-specific behavior separate from application-specific mappings.
Reliability and reuse
- Centralize retry, throttling, version conflict, validation, and error-routing behavior.
- Use checkpoints and idempotency state for safe incremental synchronization.
- Expose controlled Martini APIs instead of distributing Confluence credentials and implementation details.
- Reuse workflows for pages, attachments, comments, labels, and related content across applications.
- Monitor workflow outcomes and troubleshoot integration behavior without maintaining multiple unmanaged point-to-point scripts.