Linear connector
Linear is generally available (wave1 — Free may install). Index issues per team (projects and cycles stay live tools, not RAG sources). Two flavours: Linear OAuth (recommended for workspaces) and Workspace API key (fastest for solo / small teams). Test connection fails when the key can see 0 teams — a valid token is not enough.
Option A — Linear OAuth (recommended)
- In the OrgMCP admin console, open Connectors → Add → Linear.
- Click Connect to Linear. You will be bounced to Linear's OAuth consent screen. Approve the read-only
readscope. - Linear returns you to
/api/oauth/linear/callback; the credential is stored KMS-encrypted in the per-tenantconnector_credentialsrow. - The connector status flips to Active once the first sync finishes (~1-5 min depending on workspace size).
Rotation: the OAuth refresh-token flow keeps the access token fresh automatically. Revoking the install in Linear (workspace settings → API → applications) invalidates the credential immediately.
Option B — Workspace API key
- On Linear: Workspace settings → API → Personal API keys → New key. Copy the
lin_api_…token. - In the OrgMCP admin console, paste the token under Connectors → Add → Linear → workspace API key.
- Click Test connection. We list teams via
linear_diagnose— a key that authenticates but can see 0 teams fails the test (not a green Connected). The API key needs a workspace with at least one team; an OAuth user must be a member of at least one team.
Team allowlist
The optional allowlist constrains which Linear teams the connector exposes to MCP tools and the RAG crawler. Empty = every team visible to the credential. Format accepts either team keys (the short prefix used in issue identifiers, e.g. ENG for ENG-123) or full team UUIDs.
What gets indexed
- Issue titles, descriptions, comments, labels, assignees, state transitions.
- Project descriptions + content blocks via live tools (projects are not a RAG source).
- Cycle metadata (start / end dates, completion progress).
- Issue → project / cycle relationships, so RAG can join queries across them.
What does not get indexed
- Files / attachments uploaded to issues.
- Teams the credential cannot read (Linear teams have per-team membership; the connector inherits the credential's view).
- Issues older than the per-team cap (default 2000 most-recent issues per team). A hit cap writes a Partial sync warning. An empty team or a lookback/state filter that matches nothing writes an exact reason on the source, not a silent empty index.
Audience visibility
Each team is configured as a separate knowledge source with its own audience. Common patterns:
ENGteam → audience Group: EngineeringOPSteam → audience Whole tenant- Personal scratch team → audience Just me (use the Personal connectors flow)