Skip to content
Linear Security
Linear

Secure Linear for AI

Linear's GraphQL API gives any API key holder access to every team, project, issue, and comment in the workspace. PortEden sits between AI and Linear, enforcing team-level access rules so AI only sees the work you explicitly allow.

Connect PortEden to Linear

Cloud MCP connector URL

https://mcp.porteden.com/tasks

Add as a connector in

Read full MCP connector setup docs

How PortEden Protects You

Six layers of security between AI and your data.

Team-Level Access Rules

Permit AI in Engineering and Design teams; block Founders, People Ops, and Finance teams entirely. Rules apply to issue queries, search, and project listings.

Read-Only Mode

Enforce read-only access so AI can view issues and projects but cannot create, update, comment on, or close issues. Prevent accidental workflow disruption.

Comment and Document Visibility

Hide issue comments and Linear Docs on sensitive teams. AI sees titles, statuses, and assignees without accessing discussion threads or strategy docs.

Label and Priority Filters

Exclude issues by label (e.g. 'confidential', 'security') or priority. AI never surfaces issues your team has marked as sensitive.

Time Windows

Limit AI to issues created or updated within the last 30 days. Stale roadmap items and archived projects stay out of context.

Full Audit Trail

Every query, mutation, and blocked request is logged with the agent identity, timestamp, and rule that fired.

Get Started in 3 Steps

1

Install — CLI or MCP

Install the PortEden CLI or add the cloud MCP connector to your AI client, then connect a Linear API key (or OAuth app) scoped to your workspace.

2

Set Team Access Rules

Allowlist teams for AI access, enable read-only mode, and configure label and comment visibility rules.

3

Connect Your Agent

Point your AI agent at PortEden instead of Linear's GraphQL endpoint. Every query is filtered through your rules with full audit logging.

Without vs. With PortEden

Without PortEden

  • Linear API key grants access to every team, project, issue, and comment
  • Founders, People, and Finance teams fully visible alongside engineering work
  • AI can create, update, comment on, and close issues across all teams
  • Sensitive labels and confidential issues fully exposed to AI search
  • No audit trail of which teams or issues AI accessed

With PortEden

  • Team allowlist limits AI to the teams you explicitly permit
  • Sensitive teams completely hidden from AI queries and search
  • Read-only mode prevents AI from mutating any Linear data
  • Label and priority filters hide confidential issues
  • Full audit trail of every GraphQL query and mutation

Frequently Asked Questions

Can a Linear API key access every team by default?
Yes. A Linear personal API key grants access to every team, project, issue, comment, and document the connecting user can see. PortEden enforces a team allowlist on top so AI only sees the teams you explicitly permit.
Can AI create or modify Linear issues through PortEden?
Only if you allow it. PortEden supports read-only mode that blocks all GraphQL mutations including issue creation, updates, comments, and state transitions.
How does PortEden handle Linear Docs?
Linear Docs follow the same team rules as issues. If a team is blocked, its docs are also blocked. You can additionally disable doc visibility within allowed teams if strategy documents shouldn't reach AI.
Does PortEden support Linear OAuth apps?
Yes. PortEden works with both personal API keys and Linear OAuth applications. OAuth is recommended for production deployments because it scopes the connection to your workspace cleanly.

Ready to secure your data?

Set up PortEden in under 5 minutes. Free tier available.

Read the Docs