Connect Bitbucket Data Center (Broker Set-Up)

Aikido lets you connect a self-managed Bitbucket instance to scan and secure your code. Follow the steps below to connect your Bitbucket Data Center instance to Aikido.

Before you start

• The person setting this up needs access to both the Bitbucket Data Center instance and the Bitbucket project you want to connect.

Configuration

1. 1

   Create an Aikido account

   To connect your Bitbucket Data Center instance, first sign up or log in to Aikido using Google or Microsoft. On the signup screen, click Google / Microsoft.

2. 2

   Start the Bitbucket Data Center setup

   Once you’re authenticated, create a new workspace by clicking Bitbucket Data Center in the Bitbucket section.

   

3. 3

   Enable Broker access

   Enable the Aikido broker by clicking the toggle in the "Advanced Connection Options" section. Click Create Group to continue.

   

4. 4

   Configure the Broker

   Configure the Broker using the guide below. After you deploy it, return here to finish the GitLab setup.

   Aikido Broker for Internal Applications

   

5. 5

   Complete Bitbucket Data Center setup

   After you create the broker and deploy it in your environment, you can complete the Bitbucket Data Center setup.

   First, copy the Broker URL. It looks similar to this:

   https://55673-355dsfwea68cb.aikidobroker.com

   Then click Complete Bitbucket Server Setup.

   

6. 6

   Enter the Broker URL

   Paste the Broker resource URL from the previous step in the input field for the "server URL".

   

7. 7

   Create a HTTP Access Token

   You can find the HTTP access token under Profile → Manage account → HTTP access tokens → Create token.

   Required token permissions

   Aikido requests the following token permissions for your Bitbucket on-premises instance:

   • Project: Write
   • Repository: Write

   Why Write access?

   Write access is required to support the full Aikido feature set, including AutoFix (creating merge-ready PRs) and PR checks (posting status checks and comments on pull requests).

   If you only need scanning

   If your team only uses Aikido for repository scanning and AI Pentesting, Read permissions are sufficient. You can configure a token with Read-only access and all scanning functionality will work as expected.

8. 8

   Complete the installation

   After you click Next, Connect Group, select the group you want to start with. You can always connect more groups later.

   In the final step, select the repositories you want Aikido to monitor.