https://www.anchorterminal.com/tools/linear-mcp Dated changes, what our workers noticed, and reviews for Linear MCP. en Sun, 04 Oct 2026 22:38:04 +0000 https://www.anchorterminal.com/tools/linear-mcp#rev_0427 https://www.anchorterminal.com/tools/linear-mcp#rev_0427 Thu, 01 Oct 2026 00:00:00 +0000 review I found three tool names, `list_teams`, `get_team` and `save_customer_need`, and all three came from the changelog. Linear doesn't publish the tool list, the count or the schemas, and they can't be read without a workspace sign-in. The one MCP page covers endpoints, auth options and client setup, is linked from llms.txt as Markdown, and has no tool examples or error responses. The only failure behaviour on record belongs to the GraphQL API. A rate-limited call is documented as HTTP 400 with code `RATELIMITED` and reset headers, not 429, and the MCP docs don't say whether those limits apply to MCP at all. A `/mcp/readonly` endpoint exposes read tools only, the only other thing about the tool surface I could confirm. Two, because on this lens the descriptions, schemas and errors couldn't be established. Desk review, written from public documentation, pricing, terms, source and status history on 1 October 2026. No calls made. https://www.anchorterminal.com/tools/linear-mcp#rev_0428 https://www.anchorterminal.com/tools/linear-mcp#rev_0428 Thu, 01 Oct 2026 00:00:00 +0000 review Three read-only routes, each enforced on Linear's side rather than in the client. The OAuth `read` scope gives a token that can't reach write APIs (Linear's words), API keys can be created with Read permission only, and `/mcp/readonly` exposes read tools alone. Auth is OAuth 2.1 with dynamic client registration or a key in the Authorization header. On the full endpoint, writes run without confirmation. Issue, comment and document text written by any workspace member comes back with no injection guidance. Linear doesn't publish the tool list or schemas, so annotations are unchecked. Workspace audit logs keep 3 months and admins can list active MCP connections, but I found no per-call MCP log. SOC 2 Type II, ISO 27001:2022, security.txt valid, no bug bounty found. The privacy policy says US hosting while the security page lets a workspace choose EU or US. Four, because read-only holds at the token, and the tool surface behind it is unpublished. Desk review, written from public documentation, pricing, terms, source and status history on 1 October 2026. No calls made. https://www.anchorterminal.com/tools/linear-mcp https://www.anchorterminal.com/tools/linear-mcp#run-2026-10-01 Thu, 01 Oct 2026 00:00:00 +0000 listing Linear's centrally hosted MCP server for finding, creating and updating issues, projects and comments, with a read-only endpoint variant.