C

LINE Bot MCP

Official LINE Bot MCP server for interacting with LINE Official Accounts via the Messaging API

Overall Score67/100

Score Breakdown

Server Info

Package
@line/line-bot-mcp-server
Registry
npm
Maintainer
LINEVendor
Category
Communication
Tags
messaginglinechatbot
Last Scanned
7 Apr 2026

Findings

3 issues

Authentication & Identity

HIGHNo per-request auth - requires instance-per-user

Stdio-only transport via StdioServerTransport. Authentication uses a LINE channel access token from CHANNEL_ACCESS_TOKEN env var. DESTINATION_USER_ID is optional default recipient. No HTTP transport or MCP OAuth support. For multi-tenant deployment, the platform must spawn a separate server instance per user.

Remediation

Add HTTP/SSE transport to accept per-request Authorization headers, or implement the MCP OAuth spec.

Tool Schema Quality

MEDIUM3 of 12 tools have no input schema

Tools use Zod schemas via the MCP SDK registerTool API. get_message_quota, get_rich_menu_list, and cancel_rich_menu_default have no inputSchema (no parameters needed). create_rich_menu has .min(1).max(6) constraint on actions array. Message schemas (textMessageSchema, flexMessageSchema) are shared across push/broadcast tools. All parameter types are explicit. No dangerous surfaces.

Remediation

Define JSON Schema with explicit types for all tool parameters.

Data Exposure

LOWNo field selection on responses

Responses return full records rather than projected fields.

Remediation

Implement field selection to return only relevant fields.

Tools

12 total
NameDescriptionRisk
push_text_messagePush a simple text message to a user via LINE. Use this for sending plain text messages without formatting.write
push_flex_messagePush a highly customizable flex message to a user via LINE. Supports both bubble (single container) and carousel (multiple swipeable bubbles) layouts.write
broadcast_text_messageBroadcast a simple text message via LINE to all users who have followed your LINE Official Account. Use this for sending plain text messages without formatting. Please be aware that this message will be sent to all users.write
broadcast_flex_messageBroadcast a highly customizable flex message via LINE to all users who have added your LINE Official Account. Supports both bubble (single container) and carousel (multiple swipeable bubbles) layouts. Please be aware that this message will be sent to all users.write
get_profileGet detailed profile information of a LINE user including display name, profile picture URL, status message and language.read
get_message_quotaGet the message quota and consumption of the LINE Official Account. This shows the monthly message limit and current usage.read
get_rich_menu_listGet the list of rich menus associated with your LINE Official Account.read
delete_rich_menuDelete a rich menu from your LINE Official Account.write
set_rich_menu_defaultSet a rich menu as the default rich menu.write
cancel_rich_menu_defaultCancel the default rich menu.write
create_rich_menuCreate a rich menu based on the given actions. Generate and upload a rich menu image based on the given action. This rich menu will be registered as the default.write
get_follower_idsGet a list of user IDs of users who have added the LINE Official Account as a friend. This allows you to obtain user IDs for sending messages without manually preparing them.read

Deploy LINE Bot MCP securely

CompleteFlow adds per-user authentication, permission scoping, and audit logging to any MCP server out of the box.

Deploy on CompleteFlow