LinearSAFE
A Model Context Protocol server for Linear.
Overview
From the repository's own README, as read at the audited commit. Badges and raw HTML are left out.
A Model Context Protocol (MCP) server implementation that provides access to Linear's issue tracking system through a standardized interface.
Features
- Create new issues and subissues with label support
- Retrieve the list of linear projects
- Retrieve the project updates
- Create a new project update with health status
- Update existing issues with full field modification
- Delete issue with validation
- Self-assign issues using 'me' keyword
- Advanced search with Linear's powerful filtering capabilities
- Filter issues by cycle (current, next, previous, or specific cycle by UUID or number)
- Add comments to issues with markdown support
- Query Linear issues by ID or key with optional relationships
- Search issues using custom queries with enhanced metadata
- Type-safe operations using Linear's official SDK
- Comprehensive error handling
- Rate limit handling
- Clean data transformation
- Parent/child relationship tracking with team inheritance
- Label management and synchronization
Prerequisites
- Bun runtime (v1.0.0 or higher)
- Linear account with API access
Environment Variables
LINEAR_API_KEY=your_api_key # Your Linear API token
Installation & Setup
1. Clone the repository:
git clone [repository-url] cd linear-mcp
2. Install dependencies and build:
bun install bun run build
3. Configure the MCP server:
Edit the appropriate configuration file:
macOS:
- Cline:
~/Library/Application Support/Code/User/globalStorage/saoudrizwan.claude-dev/settings/cline_mcp_settings.json - Claude Desktop:
~/Library/Application Support/Claude/claude_desktop_config.json
Windows:
- Cline:
%APPDATA%\Code\User\globalStorage\saoudrizwan.claude-dev\settings\cline_mcp_settings.json - Claude Desktop:
%APPDATA%\Claude Desktop\claude_desktop_config.json
Linux:
- Cline: `~/.config/Code/User/globalStorage/saoudrizwan.claude-dev/settings/clinemcpsettings.json
b2c91cae2030OBSERVED · 2026-10-08Connect
Built from this server's own package name, version and transport as found in its source — not copied from anyone's documentation, so it cannot drift against a page we do not control. Replace the environment placeholders with a token scoped to the least it needs.
claude mcp add linear-mcp --env LINEAR_API_KEY=${LINEAR_API_KEY} -- npx -y [email protected]{
"mcpServers": {
"linear-mcp": {
"command": "npx",
"args": [
"-y",
"[email protected]"
],
"env": {
"LINEAR_API_KEY": "${LINEAR_API_KEY}"
}
}
}
}Exposed tools (10)
5 read · 4 write · 1 destructive. Blast radius: 1 tool can delete or overwrite — an agent that can be talked into calling a tool can be talked into calling this one.
| Tool | Risk | Description |
|---|---|---|
create_comment | write | Create a new comment on a Linear issue |
create_issue | write | Create a new Linear issue with optional parent linking. Supports self-assignment using |
create_project_update | write | Create a new update for a Linear project |
delete_issue | destructive | Delete an existing Linear issue |
get_issue | read | Get detailed information about a specific Linear issue including optional relationships and cleaned content |
get_project_updates | read | Get project updates for a given project ID with optional filtering parameters |
get_projects | read | Get a list of Linear projects with optional name filtering and pagination |
get_teams | read | Get a list of Linear teams with optional name/key filtering |
search_issues | read | Search for Linear issues using a query string and advanced filters. Supports Linear\ |
update_issue | write | Update an existing Linear issue. Supports self-assignment using |
Trust audit
SAFEgrade B · trust 89/100 Nothing in the source contradicts what it says it does. Grade A is reserved for packages that have also passed the behavioural sandbox.
| Layer | What it checks | Result |
|---|---|---|
| L0 | Provenance & inventory | PASS |
| L1 | Static analysis of the code | PASS |
| L2 | Instruction surface (what it tells the agent) | PASS |
| L3 | Class-specific surface | WARN |
| L4 | Behavioural (sandbox) | SKIPPED |
What the source does
- Filesystem
- declared (5 observation(s))
- Network
- none-observed
- Shell
- none-observed
- Dependencies
- not all pinned
- Secrets in source
- none-found
Findings (7)
delete_issue
import { ProjectUpdateHealthType } from '../../types/linear/project';import { LinearUser } from '../../types/linear/base';import { CreateCommentArgs } from '../../types/linear/comment';import { LinearComment } from '../../types/linear/issue';import { CycleFilter } from '../../types/linear/cycle';@modelcontextprotocol/sdk, @types/node, @linear/sdk, typescript, vite, @types/bun
Gates applied: no_behavioural_pass.
b2c91cae2030full audit observations/trust-audit/mcp-server/cosmix__linear-1.json · Report an issue / request a re-scanAudit history
Every audit this server has had. A grade with a past is a grade somebody is still checking.
| Date | Source | Verdict | Grade | Score | Change |
|---|---|---|---|---|---|
| 2026-10-08 | b2c91cae2030 | SAFE | B | 89 | first audit |
Questions
What is the Linear MCP server?
A Model Context Protocol server for Linear.
What tools does Linear expose?
10 in total: 5 read-only, 4 that write, and 1 that can delete or overwrite (delete_issue). Every one is listed on this page with its risk.
Is Linear safe to connect to an agent?
The audit found nothing in the source that contradicts what it says it does, and graded it B (89/100). Grade A is held back for packages that have also passed a sandboxed behavioural run, which is why a clean server reads B. Separately from the audit: 1 of its tools can destroy data, so scope the token you give it to what you actually need.
What credentials does Linear need?
It reads LINEAR_API_KEY from the environment. Give it a token scoped to the least it needs — an agent that can be talked into calling a tool can be talked into calling it with your credentials.
How does Linear run?
It speaks stdio, so it runs as a local process your client starts. It is published on npm as linear-mcp at 0.1.0.
How current is this page?
The grade is for one exact copy of the source (b2c91cae2030), read on 2026-10-08. The repository is watched and re-audited when it changes.