line-mcp-serverCAUTION
MCP server for a personal LINE account: local archive, search and messaging for coding agents
Overview
From the repository's own README, as read at the audited commit. Badges and raw HTML are left out.
Local MCP server that mirrors a personal LINE account into SQLite, so coding agents (Claude Code, Codex, T3 Code) can read, search and answer messages.
A Node 24 daemon, started by launchd or systemd, logs in to LINE as a secondary Android device, keeps a local copy of every chat, and serves MCP tools on 127.0.0.1. The line-mcp CLI runs the same tools from a shell, and an agent skill teaches agents to use it.
Status: in development. See docs/architecture.md for the architecture.
[!WARNING] line-mcp is an unofficial client, not affiliated with or endorsed by LINE. It speaks LINE's private protocol through LINEJS. Using it may break LINE's terms of use, and LINE may restrict or ban an account that uses it. Use it at your own risk.
Requirements
- macOS, where the daemon runs as a per-user LaunchAgent, or Linux with systemd (see Linux)
- Node 24.18 or later
- The LINE app on your phone, logged in to the account
Install
npm i -g line-mcp-server line-mcp login line-mcp install line-mcp doctor
login shows a QR code. Scan it with LINE on your phone and enter the PIN it prints. line-mcp joins the account as a secondary device; the phone stays the primary one. install writes the background service and starts the daemon, which syncs from then on and starts again after a reboot. doctor checks the setup without contacting LINE.
If LINE ends the session, the daemon keeps serving the local archive, shows a desktop notification, and waits for another login.
State
On macOS; Linux keeps it in the XDG directories.
15ab8c5d8bbdOBSERVED · 2026-10-14Connect
Built from this server's own package name, version and transport as found in its source — not copied from anyone's documentation, so it cannot drift against a page we do not control.
claude mcp add line-mcp-server -- npx -y [email protected]
{
"mcpServers": {
"line-mcp-server": {
"command": "npx",
"args": [
"-y",
"[email protected]"
]
}
}
}Exposed tools (8)
6 read · 2 write · 0 destructive.
| Tool | Risk | Description |
|---|---|---|
get_announcements | read | Pinned announcements of a group, room or OpenChat chat, asked from LINE. One-to-one chats have none. |
get_attachment | read | Attachment of an image, video, audio or file message: metadata, or with download true the file saved to a private cache and its local path. Refused for unsent messages. |
get_profile | read | Profile from LINE: without id the connected LINE account; a Talk user MID; or with service square an OpenChat member ID (starting with p). |
list_changes | write | Every message inserted or changed (edit, unsend, late decryption) after after_seq, in seq order. Continue with next_after_seq. A message changed again reappears with its new seq; nothing is skipped. |
react | read | Reacts to a message as the connected LINE account. An OpenChat thread message is reacted to in its thread. Needs an idempotency_key: a retry with the same key never reacts twice. A result with state unknown means LINE may have applied it. |
search_messages | read | Search message text, newest first. Give up to 10 words or |
status | write | Session health, last sync times, unreconciled coverage gaps, backfill progress, archive size and time_zone, the zone whose offset every time carries. Check stale before treating other results as current. |
unsend | read | Unsends a message the connected LINE account sent, for everyone. An OpenChat thread message is unsent in its thread. Needs an idempotency_key: a retry with the same key never acts twice. A result with state unknown means LINE may have unsent it. |
Trust audit
CAUTIONgrade B · trust 81/100 Install with care. The audit found things worth knowing before you trust its output.
| Layer | What it checks | Result |
|---|---|---|
| L0 | Provenance & inventory | PASS |
| L1 | Static analysis of the code | WARN |
| L2 | Instruction surface (what it tells the agent) | PASS |
| L3 | Class-specific surface | PASS |
| L4 | Behavioural (sandbox) | SKIPPED |
What the source does
- Filesystem
- declared (5 observation(s))
- Network
- declared (4 observation(s))
- Shell
- declared (5 observation(s))
- Dependencies
- not all pinned
- Secrets in source
- found
Findings (19)
url: `http://127.0.0.1:${bound}${mcpPath}`,const token = 'SECRET-NEXT-ACCESS-TOKEN';
const token = 'SECRET-NEXT-ACCESS-TOKEN';
.oxlintrc.json
.prettierignore
CLAUDE.md
import { listGaps } from '../../archive.ts';import { readAccount } from '../../db.ts';} from '../../queries.ts';
import { findMessage, type Service } from '../../archive.ts';import { LineMcpError } from '../../errors.ts';The daemon serves Streamable HTTP at `http://127.0.0.1:47822/mcp`, stateless, for as long as it runs. `LINE_MCP_PORT` changes the port (set it before `install`, which passes it on to the service); it
url = "http://127.0.0.1:47822/mcp"
claude mcp add --transport http --scope user line http://127.0.0.1:47822/mcp
|- MCP: http://127.0.0.1:47822/mcp (Streamable HTTP, stateless, no CORS)
husky, oxlint, prettier, typescript, vitest
`line-mcp` mirrors one personal LINE account into local SQLite and serves it to coding agents as an MCP server. A Node 24 daemon, run by launchd on macOS and by a systemd user unit on Linux, owns the
- The daemon shows notifications through `notify-send` with a 3 s timeout, and none without it, a session bus or a notification server. The unit carries no display variables.
The daemon serves the tools with Prefect FastMCP TS over Streamable HTTP on `127.0.0.1:47822/mcp` (`LINE_MCP_PORT`), in stateless mode, so no legacy session is retained without bound. The daemon owns
Gates applied: no_behavioural_pass.
15ab8c5d8bbdfull audit observations/trust-audit/mcp-server/stickerdaniel__line-mcp-server.json · Report an issue / request a re-scanAudit history
Every audit this server has had. A grade with a past is a grade somebody is still checking.
| Date | Source | Verdict | Grade | Score | Change |
|---|---|---|---|---|---|
| 2026-10-14 | 15ab8c5d8bbd | CAUTION | B | 81 | first audit |
Questions
What is the line-mcp-server MCP server?
MCP server for a personal LINE account: local archive, search and messaging for coding agents
What tools does line-mcp-server expose?
8 in total: 6 read-only, 2 that write, and 0 that can delete or overwrite. Every one is listed on this page with its risk.
Is line-mcp-server safe to connect to an agent?
With care. The audit graded it B (81/100) and found 19 things worth knowing before you trust this server, listed below with the exact line each was found on.
What credentials does line-mcp-server need?
No credential environment variables were found in its source, so it appears to need none.
How current is this page?
The grade is for one exact copy of the source (15ab8c5d8bbd), read on 2026-10-14. The repository is watched and re-audited when it changes.