Linear MCP Server

Linear project data access via the GraphQL API to manage issues and workflows.

Data last scanned today · Reviewed today

555 dangerous tools116 tools144TypeScriptMIT

Overview

Linear MCP Server acts as an interface between your AI assistant and the Linear project management platform. Built on the Model Context Protocol, it allows users to perform CRUD operations on issues, manage roadmaps, milestones, and cycles, and interact with complex project documentation directly through natural language prompts. Beyond basic issue tracking, the server supports advanced features including webhook management, custom field handling, and administrative tasks like OAuth app manifestation and rate-limit inspection. It exposes specific MCP resources and pre-configured prompts, such as issue triage and project update drafting, to facilitate project management workflows.

Our verdict

This server receives a security score of 55/100, which is considered high risk. The primary security concern is that it lacks a read-only mode, meaning every installation is granted full write access to your Linear workspace by default. Because this is a community-maintained project rather than an official vendor tool, users should exercise caution before granting write-level permissions. It is best suited for experienced developers comfortable with the associated risks who need deep integration with Linear project data.

  • Comprehensive coverage of Linear API entities and project lifecycles
  • Twelve direct dependencies minimize the overall supply-chain surface
  • Includes helpful pre-configured prompts for issue triage and summarization
  • Recent maintenance activity with commits as of three days ago
  • Lacks a read-only mode, providing full write access by default
  • Community-maintained project without official endorsement from Linear
  • Missing a homepage link in the repository documentation

Setup

Claude Desktop
{
  "mcpServers": {
    "mcp-linear": {
      "args": [
        "-y",
        "@tacticlaunch/mcp-linear"
      ],
      "command": "npx"
    }
  }
}

Paste into ~/Library/Application Support/Claude/claude_desktop_config.json (macOS) or %APPDATA%\Claude\claude_desktop_config.json (Windows), then restart Claude Desktop. Some servers require API keys or tokens as environment variables — check the project's README and add an "env" object if needed.

  • No read-only mode — running this grants full read/write access.
  • No built-in authentication — anyone with access to this config can invoke every tool it exposes.

Tools

ToolDescriptionRisk
linear_getViewerGet information about the currently authenticated userlow
linear_getOrganizationGet information about the current Linear organizationlow
linear_getUsersGet a list of users in the Linear organizationlow
linear_getLabelsGet a list of issue labels from Linearlow
linear_getTeamsGet a list of teams from Linearlow
linear_updateTeamUpdate team settingsmedium
linear_getTeamMembershipsGet team membershipslow
linear_createTeamCreate a new teammedium
linear_archiveTeamArchive a teamhigh
linear_addUserToTeamAdd a user to a teammedium

Compatibility

ClientLocalDockerRemoteRead-only
Claude Desktop
Cursor
VS Code
Windsurf
ChatGPT

Frequently asked questions

What is the primary method for authentication?

The server defaults to using a Personal API Key generated from your Linear account settings under Security & access.

Can I manage child OAuth applications using a Personal API Key?

No, managing child OAuth applications requires an OAuth access token from an eligible Linear OAuth application.

How do I provide credentials if I use an OAuth token?

You can provide the token via the LINEAR_OAUTH_ACCESS_TOKEN environment variable or by using the --oauth-token command-line argument.

Can I use both Personal API Keys and OAuth tokens simultaneously?

Yes, you can configure two separate MCP server entries if you need to combine specific permissions, such as using an OAuth token for child-app operations and a Personal API Key for workspace-webhook management.

What happens if I provide both an OAuth token and a Personal API Key?

When both credential types are present, the server gives precedence to the OAuth authentication.

Are there built-in prompts included with this server?

Yes, the server includes prompts for tasks such as summarizing project status, drafting project updates, triaging issues, and summarizing documents.

Badge

Linear MCP Server security score, rated on RepoAI

Maintain this server? Add the live badge to your README.