cline — Watchlist | MCP100 Index

MCP100 Assessment

Watchlist / Tracking

Why we’re tracking it

Recheck a specific changing behavior of npm/cline: Have MCP server credential forwarding and coding-agent approval boundaries changed, especially for external commands?

Reviewed Oct 9, 2026 · Documentation review; complete setup workflow not independently tested

Best fit

Operate a coding agent with MCP connectivity

What we know

Cline is an autonomous coding-agent CLI/host that can connect to MCP services.

Maintenance / activity evidence

Cline CLI v3.0.70 released 2026-10-08, including MCP header preservation fixes.

Tracking evidence observed Oct 9, 2026. These dated signals do not establish current maintenance. Reviewed enrichment confidence: high.

Activity source · releases ↗

Verification gaps / watch-outs

Installation and comprehensive security have not been independently audited.
MCP host/agent environment. Do not present as a standalone server unless separately verified. Reported action classes: Edit workspace files; Execute commands and developer-agent actions with user authorization. Complete write authority is not verified.
Authentication not yet verified.
MCP host/client, not standalone MCP server; local workspace and permitted tool execution can change files or execute commands.

MCP host/client, not standalone MCP server; local workspace and permitted tool execution can change files or execute commands.
Advisory/security review not completed; no safety badge.
Write action classes summarize access risk; tool-level completeness and exact operation names are not independently verified. Do not mark them as confirmed documented write inventory.
Unknown vulnerabilities and provider data handling are not certified by this public tracking review.

Full authority, access and evidence limits are available in Review context and Access & risk.

Popularity

70,079 shared-repository stars · 330.1k package downloads / 30 days

Stars observed Oct 9, 2026. Downloads observed Oct 9, 2026.

Repository total for cline/cline; not package-specific.

Exact npm package cline; provider interval 2026-09-08–2026-10-07 (inclusive); observed 2026-10-09.

All limitations / Review context

Have MCP server credential forwarding and coding-agent approval boundaries changed, especially for external commands?

No identified material blocker to an accurately qualified public tracking entry in the limited cited evidence. This is not an installation safety certification; product-specific cautions must remain visible.

MCP host/client, not standalone MCP server; local workspace and permitted tool execution can change files or execute commands.
Advisory/security review not completed; no safety badge.
Write action classes summarize access risk; tool-level completeness and exact operation names are not independently verified. Do not mark them as confirmed documented write inventory.
MCP host/agent environment. Do not present as a standalone server unless separately verified.
Reviewed write actions: Edit workspace files; Execute commands and developer-agent actions with user authorization
Complete write authority is not verified.
Installation, client compatibility and comprehensive security have not been independently audited. Authentication and access depend on the configured services.
Agent host can edit files, execute commands and use MCP tools; a third-party security index reports a high-severity dependency alert on this version, requiring separate installation scrutiny.
Unknown vulnerabilities and provider data handling are not certified by this public tracking review.
Release evidence proves attributable activity, not entire installation or tool-level safety.
Current Discovery source binding and atomic apply must be generated using MCP100 existing pipeline.
exact authentication contract
first-party data processing and retention
data retention and permission scope
Write actions/tool inventory not confirmed against exact tool documentation; listed action classes remain illustrative or context-dependent. Empty inventory does not establish read-only.
Do not write a Cline MCP Server detail page; classify as host only if standalone resource policy admits it.
This is not a standalone general-purpose MCP server; use the resource-type-specific setup and expectations.
Radar public tracking editorial review completed in limited scope; not a security or installation certification. Verify setup according to deployment mode and do not invent unresolved facts.

Original activity observations

Cline CLI v3.0.70 released 2026-10-08, including MCP header preservation fixes.

Technical identity

npm/cline

Exact implementation source: https://www.npmjs.com/package/cline ↗
Reviewed resource type: Host
Repository identity: cline/cline
Package identity: npm:cline

Evidence & Sources

Evidence basis: Recorded source evidence
Setup runtime verification: Not independently runtime-tested by MCP100 for this setup workflow.

Reviewed Oct 9, 2026 · Latest source observation Oct 9, 2026

GitHub repository ↗
cline/cline
Recorded repository material and project history.
Includes references whose attribution is not established.
Package registry ↗
cline
Recorded package identity, distribution or download evidence.
Includes references whose attribution is not established.

Setup · Watchlist

Host / Desktop app setup

Publisher instructions.

Source evidence observed Oct 14, 2026.

Additional setup details required — see the specific gaps below.

Warning

Not runtime tested, no third-party installation, network authorization, paid calls, or mutation executed.
Do not claim production service is available based on README alone.
MCP HOST/agent CLI, not server; `cline mcp install` manages third-party servers
Targeted 2026-10-13 re-research: Agent host CLI that can install and connect MCP servers; not a server itself.
Agent host CLI that can install and connect MCP servers; not a server itself.
Official npm publisher package page README inspected for this exact npm identity; static research only. Some setup statements are conservatively summarized; no source code or live client execution checked. V2 review did not run any live client.
Avoid write, payment, token transfer, publishing, sending, booking and remote account changes as tests.
Cline is an MCP host/client; `cline mcp install` manages other servers and must not appear as an installer for a Cline MCP server.
Replace credential, action and registration placeholders; follow the matching publisher/client prerequisites. No execution performed.
Use the matching host, actual registration name and original installation environment; this does not revoke credentials.

Install / launch application
Publisher instructions
MCP HOST/agent CLI, not server; `cline mcp install` manages third-party servers | Publisher npm README revisited on 2026-10-14; exact identity retained.
Reviewed setup example · Publisher instructions
npm install -g cline
Configure application / integrations
MCP100 setup guide
Cline is an MCP host/agent CLI. `cline mcp install <server> -- <command>` installs a separately selected server, not Cline itself as server.
Check connection
Suggested check
`cline doctor` checks host CLI; inspect chosen third-party MCP registration separately.
Disconnect / uninstall / revoke
MCP100 setup guide
Uninstall Cline host CLI if installed globally; remove individual third-party MCP registrations via Cline MCP management separately.
Remove installed package / application · MCP100 composed guide
npm uninstall -g cline

Official Documentation & Sources

What it does

Cline is an autonomous coding-agent CLI/host that can connect to MCP services.

Capability: Developer Tools
Resource type: Host
Best fit: Operate a coding agent with MCP connectivity

Representative uses

Coding agent
MCP host
file and shell operations

Limitations

Do not write a Cline MCP Server detail page; classify as host only if standalone resource policy admits it.
This is not a standalone general-purpose MCP server; use the resource-type-specific setup and expectations.
Radar public tracking editorial review completed in limited scope; not a security or installation certification. Verify setup according to deployment mode and do not invent unresolved facts.

Reviewed access

Access & risk

Review the exact access boundary before connecting this MCP to accounts, credentials, or sensitive data.

Authentication: Not documented in the reviewed sources
Permissions: MCP host/agent environment. Do not present as a standalone server unless separately verified.
Data handling: Not documented in the reviewed sources
Cost: unknown
Risk and cautions: MCP host/client, not standalone MCP server; local workspace and permitted tool execution can change files or execute commands.

Access scope and cautions

Write actions: Not verified Edit workspace files Execute commands and developer-agent actions with user authorization
Risk level: high
Security notes: Advisory/security review not completed; no safety badge. Write action classes summarize access risk; tool-level completeness and exact operation names are not independently verified. Do not mark them as confirmed documented write inventory.

The reviewed evidence does not establish the complete write authority of this MCP. Consult the unresolved evidence before granting write access.

FAQ

Based on reviewed evidence as of 2026-10-09. Watchlist tracking is not a recommendation or a security certification.

Which tasks are documented for this implementation?

The reviewed tasks include: Coding agent; MCP host; file and shell operations.

What setup and authentication are documented?

A complete connection procedure is not verified. Client notes: Connect an existing MCP server through Cline MCP settings and inspect available tools. These facts do not supply missing installation commands, credentials or a verified authentication procedure. Authentication: Host-side account/model credentials and the permissions of each connected MCP server; not installable as a standalone server.

Can it modify data or perform write operations?

Not verified. The available evidence does not establish the complete write authority. The partial inventory lists: Edit workspace files; Execute commands and developer-agent actions with user authorization. Recorded permission context: MCP host/agent environment. Do not present as a standalone server unless separately verified.

What limitations and risks should I check before use?

MCP host/client, not standalone MCP server; local workspace and permitted tool execution can change files or execute commands. This is not a standalone general-purpose MCP server; use the resource-type-specific setup and expectations. Radar public tracking editorial review completed in limited scope; not a security or installation certification. Verify setup according to deployment mode. Advisory/security review not completed; no safety badge. Write action classes summarize access risk; tool-level completeness and exact operation names are not independently verified. Agent host can edit files, execute commands and use MCP tools; a third-party security index reports a high-severity dependency alert on this version, requiring separate installation scrutiny. Unknown vulnerabilities and provider data handling are not certified by this public tracking review.