lineMCP

Personal, single-account LINE MCP server for Cloudflare Workers. It uses linejs and is intentionally restricted to an allowlisted GitHub user.

Included tools

• line_account_status

• line_list_chats

• line_get_recent_messages

• line_prepare_text_message

• line_send_prepared_message

Messages are text-only. Sending is always a two-step operation: prepare a draft, then consume its five-minute, one-time confirmation token.

Related MCP server: @zients/line-mcp-server

First deployment

1. The required dedicated KV namespaces are already configured in wrangler.jsonc; do not reuse them for another application.

2. Create a GitHub OAuth App. Its callback URL is https://<worker-domain>/oauth/github/callback; the same app also secures /admin/login.

3. Copy .dev.vars.example to .dev.vars for local development. For each Cloudflare environment, set GITHUB_CLIENT_ID, GITHUB_CLIENT_SECRET, LINE_STATE_ENCRYPTION_KEY, LINE_EMAIL, and LINE_PASSWORD using wrangler secret put. The LINE email and password are Cloudflare secrets and are never accepted through the admin page or stored in Durable Object storage.

4. Run npm install and npm run check. Cloudflare deployment is performed through the Cloudflare MCP, not GitHub Actions.

5. Open https://<worker-domain>/admin/login, authenticate with the allowlisted GitHub user, and begin LINE email/password login. If LINE asks for it, confirm the displayed PIN in the LINE app. Do not expose this URL to untrusted users.

Connect an MCP client to https://<worker-domain>/mcp. The server publishes OAuth discovery endpoints automatically; authorize with the configured GitHub account.

Operations and security

• LINE authentication tokens, certificates, and E2EE state are encrypted with LINE_STATE_ENCRYPTION_KEY inside the single Durable Object. The initial LINE email and password remain Cloudflare secrets.

• Only audit metadata is stored: action, actor, time, hashed chat ID, text length, and outcome. Message bodies and credentials are not logged.

• The send limit is 20 messages per 10 minutes. Confirmation tokens are bound to the GitHub user and cannot be reused.

• linejs is a SelfBot library. Use only an account you control and review LINE's current terms and account-risk implications before deploying.