- Authentication — how we securely connect (OAuth 2.0).
- Scoping access — how to share only the spaces you want.
- Connecting in Pavo — completing the setup.
1. Authentication: OAuth 2.0
We connect to Confluence Cloud using OAuth 2.0 (3LO). You authorize the connection once through Atlassian’s standard consent screen — no passwords or long-lived secrets are shared with us. What to expect:- You’ll be redirected to Atlassian to approve the connection.
- We request read-only scopes (e.g. reading pages and spaces) plus offline_access.
- After approval, the connection stays active and renews automatically — you won’t need to re-approve on a recurring basis.
- You or an admin revokes our app’s access in Atlassian.
- The connection sits completely unused for 90+ days.
- An account security event (e.g. password reset) invalidates the session.
2. Limiting access to select documents
OAuth permissions follow the authorizing user’s access — the connection can see exactly what that account can see. To share only specific content, we recommend a dedicated service account.Recommended: dedicated service account
- Create a new Confluence user (e.g. integration@yourcompany.com).
- Grant it access to only the spaces you want to share.
3. Connecting in Pavo
- Make sure you have access to Pavo (https://
<your_company>.pavoai.dev). - Go to https://
<your_company>.pavoai.dev/settings/workspace-connectors. - Scroll to Browse Connectors → Confluence and click Confluence.
- Enter your Confluence site URL, e.g. yourcompany.atlassian.net.
- Click Connect while signed in as the service account created in Step 2.
<your_company>.pavoai.dev.