Official LINE MCP server that connects Claude and other AI agents to the LINE Messaging API for push messages, broadcasts, profile lookup, quotas, follower IDs, and rich-menu management.
LINE Bot MCP Server can push text and flex messages to users, broadcast messages to all followers, retrieve follower IDs, inspect profiles, check message quotas, create rich menus, set default rich menus, cancel defaults, and delete rich menus., Broadcast and rich-menu tools can affect every user following the connected LINE Official Account, so require human approval before running them in production., Push-message tools can contact individual users directly; confirm the target `userId`, message body, and account context before sending., Rich-menu tools can upload generated menu images and change user-facing navigation for the account., Use least-privilege channel tokens where possible, keep test and production LINE accounts separate, and monitor quota consumption., The upstream README marks the project as a preview version for experimental use with potentially incomplete functionality or support.
Privacy notes
Channel access tokens, destination user IDs, follower IDs, profile display names, profile picture URLs, status messages, language, message contents, flex-message JSON, and rich-menu IDs can be exposed to the MCP client., Broadcast prompts, generated messages, user IDs, and profile results may be retained in MCP client logs, terminal history, model context, or chat transcripts., Treat LINE Official Account credentials and recipient identifiers as secrets, and avoid pasting real tokens or user IDs into shared logs., Review LINE platform policies and internal consent requirements before retrieving follower IDs or using AI-generated outbound messages.
Author
LINE
Submitted by
oktofeesh1
Claim status
unclaimed
Last verified
2026-06-06
Decision playbook
Review trust signals before you adopt
Signals are present but mixed. Use the checklist below to confirm the source and operational safety for your environment.
Compare context
Selected
0
Current score
63
Baseline
—
Delta
No baseline selected
No major trust-signal divergence detected in the current selection.
Source and provenance checks
Needs review
Confirm ownership and provenance before trusting install instructions.
Source link availableRequired
Open the canonical repository and verify ownership.
Done
Source provenance statusRequired
Marked as source-backed.
Done
Metadata reviewed
No reviewed flag detected in metadata.
Pending
Safety and privacy checks
Complete
Validate risk disclosures before installation or API wiring.
Safety notes presentRequired
Review the listed safety guidance before running commands.
Done
Privacy notes presentRequired
Review data handling notes before connecting accounts or secrets.
Done
Trust level risk gateRequired
Trust level does not block evaluation.
Done
Package and install checks
Needs review
Check package metadata and artifact integrity signals.
Install payload available
Install or copy payload is available for review.
Done
Package verification flag
No package verification flag provided.
Pending
Checksum metadata
No checksum provided for downloaded artifact.
Pending
Compare-driven decision checks
Needs review
Use compare context to validate trade-offs before adoption.
Compare tray has multiple entries
Add at least one more entry to compare trust differences.
6 safety and 4 privacy notes across 5 risk areas. Review closely: credentials & tokens, network access.
5 areas
SafetyLocal filesLINE Bot MCP Server can push text and flex messages to users, broadcast messages to all followers, retrieve follower IDs, inspect profiles, check message quotas, create rich menus, set default rich menus, cancel defaults, and delete rich menus.
SafetyExecution & processesBroadcast and rich-menu tools can affect every user following the connected LINE Official Account, so require human approval before running them in production.
SafetyGeneralPush-message tools can contact individual users directly; confirm the target `userId`, message body, and account context before sending.
SafetyNetwork accessRich-menu tools can upload generated menu images and change user-facing navigation for the account.
SafetyCredentials & tokensUse least-privilege channel tokens where possible, keep test and production LINE accounts separate, and monitor quota consumption.
SafetyGeneralThe upstream README marks the project as a preview version for experimental use with potentially incomplete functionality or support.
PrivacyCredentials & tokensChannel access tokens, destination user IDs, follower IDs, profile display names, profile picture URLs, status messages, language, message contents, flex-message JSON, and rich-menu IDs can be exposed to the MCP client.
PrivacyLocal filesBroadcast prompts, generated messages, user IDs, and profile results may be retained in MCP client logs, terminal history, model context, or chat transcripts.
PrivacyCredentials & tokensTreat LINE Official Account credentials and recipient identifiers as secrets, and avoid pasting real tokens or user IDs into shared logs.
PrivacyNetwork accessReview LINE platform policies and internal consent requirements before retrieving follower IDs or using AI-generated outbound messages.
Disclosure: Official preview MCP server from LINE, published as the `@line/line-bot-mcp-server` npm package under Apache-2.0.
Safety notes
LINE Bot MCP Server can push text and flex messages to users, broadcast messages to all followers, retrieve follower IDs, inspect profiles, check message quotas, create rich menus, set default rich menus, cancel defaults, and delete rich menus.
Broadcast and rich-menu tools can affect every user following the connected LINE Official Account, so require human approval before running them in production.
Push-message tools can contact individual users directly; confirm the target `userId`, message body, and account context before sending.
Rich-menu tools can upload generated menu images and change user-facing navigation for the account.
Use least-privilege channel tokens where possible, keep test and production LINE accounts separate, and monitor quota consumption.
The upstream README marks the project as a preview version for experimental use with potentially incomplete functionality or support.
Privacy notes
Channel access tokens, destination user IDs, follower IDs, profile display names, profile picture URLs, status messages, language, message contents, flex-message JSON, and rich-menu IDs can be exposed to the MCP client.
Broadcast prompts, generated messages, user IDs, and profile results may be retained in MCP client logs, terminal history, model context, or chat transcripts.
Treat LINE Official Account credentials and recipient identifiers as secrets, and avoid pasting real tokens or user IDs into shared logs.
Review LINE platform policies and internal consent requirements before retrieving follower IDs or using AI-generated outbound messages.
Prerequisites
Node.js 22 or newer for the published npm package.
A LINE Official Account with the Messaging API enabled.
A LINE channel access token with the permissions needed for the intended tools.
A destination user ID when using the default recipient flow for push-message tools.
Review of broadcast recipients, rich-menu changes, quota limits, and account policies before enabling autonomous use.
Schema details
Install type
cli
Troubleshooting
No
Source repository stats
Scope
Source repo
Collection metadata
Estimated setup
15 minutes
Difficulty
intermediate
Tool listing metadata
Disclosure
Official preview MCP server from LINE, published as the `@line/line-bot-mcp-server` npm package under Apache-2.0.
LINE Bot MCP Server is LINE's MCP server for connecting AI agents to a LINE
Official Account through the LINE Messaging API. It exposes tools for sending
messages, broadcasting to followers, reading profile and quota information,
listing follower IDs, and managing rich menus.
Use it when Claude needs to assist with supervised LINE Official Account
operations such as drafting test messages, checking quotas, preparing rich menu
updates, or retrieving account context during support and marketing workflows.
These sources were reviewed on 2026-06-06. Prefer the live repository,
README, npm registry metadata, license, package manifest, MCP manifest, Docker
setup, server entrypoint, and push and broadcast tool implementations for
current setup and behavior details.
Features
Push text messages to a LINE user.
Push flex messages with custom layout JSON.
Broadcast text or flex messages to users who follow the LINE Official
Account.
Retrieve LINE user profile details.
Check monthly message quota and consumption.
List rich menus associated with the account.
Create, set, cancel, and delete default rich menus.
Retrieve follower user IDs with pagination.
Run through the published npm package or a locally built Docker image.
Installation
Create or configure a LINE Official Account, enable the Messaging API, and
create a channel access token. Then configure an MCP client with the npm
package:
claude mcp add line-bot --env CHANNEL_ACCESS_TOKEN=YOUR_CHANNEL_ACCESS_TOKEN -- npx -y @line/line-bot-mcp-server
Add DESTINATION_USER_ID when you want push-message tools to default to a
specific test user.
Use Cases
Draft and send a supervised test message to a LINE user.
Prepare a flex message payload for a campaign or support workflow.
Check message quota before a broadcast.
Retrieve profile context for a known LINE user ID.
List follower IDs for an approved operational workflow.
Create and test a rich menu before making it the default.
Inspect existing rich menus and remove obsolete ones.
Safety and Privacy
LINE Bot MCP Server can send real messages and update real account surfaces.
Keep production tokens out of test clients, require review before broadcasts or
rich-menu changes, and verify the target account and recipient IDs before any
send operation.
Follower IDs, profile data, message contents, flex-message JSON, rich-menu
configuration, and channel tokens are sensitive. Treat MCP transcripts and logs
as account records, and avoid using real users for prompt experiments unless the
workflow has explicit approval.
The upstream README identifies the project as a preview release, so test against
a non-production LINE Official Account before connecting it to customer-facing
operations.
Duplicate Check
Existing MCP entries cover customer support, communications, and automation
tools, but no LINE Bot MCP Server, line/line-bot-mcp-server,
@line/line-bot-mcp-server, or LINE Messaging API MCP entry was found in
content/mcp.
Show that LINE Bot MCP Server is listed on HeyClaude. Paste this Markdown into your README — it renders the badge and links back to this page.
[](https://heyclau.de/entry/mcp/line-bot-mcp-server)
How it compares
LINE Bot MCP Server side by side with 3 alternatives on trust, install, platform support, and disclosed safety notes — all from reviewed registry metadata.
Official LINE MCP server that connects Claude and other AI agents to the LINE Messaging API for push messages, broadcasts, profile lookup, quotas, follower IDs, and rich-menu management.
Apache-licensed TypeScript MCP server for Obsidian vaults with stdio and Streamable HTTP transports, Local REST API access, note search, section-aware edits, tag/frontmatter management, path policies, and read-only controls.
MCP server for Todoist task and project management, with tools for tasks, subtasks, projects, sections, labels, comments, reminders, filters, activity, backups, collaboration, bulk operations, and dry-run testing.
Official Agentset MCP server that lets Claude retrieve cited knowledge-base results from an Agentset namespace through the `knowledge-base-retrieve` tool, with optional tenant scoping and custom tool descriptions.
✓LINE Bot MCP Server can push text and flex messages to users, broadcast messages to all followers, retrieve follower IDs, inspect profiles, check message quotas, create rich menus, set default rich menus, cancel defaults, and delete rich menus.
Broadcast and rich-menu tools can affect every user following the connected LINE Official Account, so require human approval before running them in production.
Push-message tools can contact individual users directly; confirm the target `userId`, message body, and account context before sending.
Rich-menu tools can upload generated menu images and change user-facing navigation for the account.
Use least-privilege channel tokens where possible, keep test and production LINE accounts separate, and monitor quota consumption.
The upstream README marks the project as a preview version for experimental use with potentially incomplete functionality or support.
✓Cyanheads Obsidian MCP can read, list, search, create, append, patch, replace, delete, tag, and edit frontmatter in the configured vault through the Local REST API plugin.
The server defaults to full-vault access unless read paths, write paths, or read-only mode are configured.
Set `OBSIDIAN_READ_ONLY=true` for research-only workflows, then narrow writes with `OBSIDIAN_WRITE_PATHS` before allowing note edits.
Delete operations are permanent in the vault and should require human review even when the MCP host supports destructive-tool prompts.
Command-palette tools are disabled unless `OBSIDIAN_ENABLE_COMMANDS=true`; command execution can trigger opaque or destructive Obsidian plugin behavior.
Streamable HTTP deployments should use JWT or OAuth auth before being exposed beyond a trusted local machine.
✓Todoist MCP Server can create, update, delete, complete, reopen, reorder, archive, and bulk-modify tasks, subtasks, projects, sections, labels, comments, reminders, filters, shared labels, and collaboration state.
Bulk create, bulk update, bulk delete, bulk complete, project deletion, section deletion, label deletion, reminder changes, and duplicate merge operations can alter many Todoist records at once.
Dry-run mode simulates mutation operations but still queries real Todoist data for validation.
Pro and Business features such as reminders, filters, shared labels, collaboration, backups, and workspace operations may expose or modify team data.
Require confirmation before deleting tasks or projects, changing due dates in bulk, completing groups of tasks, modifying shared projects, creating reminders, downloading backups, or changing collaboration state.
✓The MCP server sends Claude's retrieval queries to the Agentset API using the configured API key and namespace.
The `knowledge-base-retrieve` tool can return up to 100 results per call and can rerank results by relevance.
Namespace and tenant selection control which indexed documents are searchable; review them before connecting a shared agent.
API keys should be scoped, rotated, and stored only in the MCP server environment or a secret manager.
Custom tool descriptions can influence when the model calls the retrieval tool, so review them before use in production workflows.
Privacy notes
✓Channel access tokens, destination user IDs, follower IDs, profile display names, profile picture URLs, status messages, language, message contents, flex-message JSON, and rich-menu IDs can be exposed to the MCP client.
Broadcast prompts, generated messages, user IDs, and profile results may be retained in MCP client logs, terminal history, model context, or chat transcripts.
Treat LINE Official Account credentials and recipient identifiers as secrets, and avoid pasting real tokens or user IDs into shared logs.
Review LINE platform policies and internal consent requirements before retrieving follower IDs or using AI-generated outbound messages.
✓Vault notes, headings, block references, frontmatter, tags, file metadata, outgoing links, search queries, command names, plugin status, and edit history may be exposed to the MCP client and model provider.
API keys, local plugin endpoints, HTTP auth settings, path allowlists, logs, OpenTelemetry traces, and Docker environment variables can reveal private vault structure or credentials.
Tag listing is vault-wide in upstream behavior and can reveal tag names outside narrowed read paths.
Notes may contain personal journals, client work, credentials, meeting notes, research plans, health data, or other sensitive knowledge-base content.
✓Todoist API tokens, task IDs, project IDs, section IDs, label IDs, reminder IDs, comment IDs, user IDs, collaborator details, activity logs, completed tasks, backups, and productivity statistics can be exposed to the MCP client.
Task names, descriptions, comments, due dates, deadlines, labels, reminders, attachments, project notes, and completed-task history can contain private work or personal planning data.
Bulk and filter tools may reveal larger slices of a Todoist workspace than a single-task request.
Backup download tools can expose a broad historical snapshot of Todoist data.
Keep Todoist tokens in local MCP configuration only, and avoid sharing MCP logs, dry-run traces, or transcripts that include private task or project data.
✓Retrieved chunks can include private documents, product specs, policies, support content, internal procedures, historical project information, or customer-specific data.
Retrieval queries, namespace IDs, tenant IDs, document chunks, citations, and tool outputs may be visible to the MCP client, model provider, Agentset logs, and application telemetry.
Tenant IDs are useful for data segregation, but incorrect tenant or namespace configuration can expose the wrong knowledge base.
Do not paste API keys, namespace IDs, tenant IDs, or retrieved private chunks into shared issue reports, screenshots, or repository files.
Prerequisites
Node.js 22 or newer for the published npm package.
A LINE Official Account with the Messaging API enabled.
A LINE channel access token with the permissions needed for the intended tools.
A destination user ID when using the default recipient flow for push-message tools.
Node.js 24 or newer, or Bun 1.3.11 or newer.
Obsidian vault with the Obsidian Local REST API community plugin enabled.
Local REST API key stored in the MCP client environment.
Stdio MCP client, or reviewed Streamable HTTP deployment with authentication.
Todoist API token from Todoist integrations developer settings.
Node.js 18 or newer for the npm stdio server.
Review of whether the token has access to personal, shared, Pro, Business, or workspace features.
Optional `DRYRUN=true` for simulating mutation tools while still validating against real Todoist data.
Agentset account or self-hosted Agentset deployment with a populated namespace.
Agentset API key with access to the namespace Claude should query.
Node.js 18.17 or newer for running the `@agentset/mcp` package.
Namespace ID selected with `--ns` or `AGENTSET_NAMESPACE_ID`.
Install
npx -y @line/line-bot-mcp-server
npx -y obsidian-mcp-server@latest
npx @greirson/mcp-todoist
Run `npx @agentset/mcp --ns <namespace-id>` with `AGENTSET_API_KEY` set in the MCP server environment.