[setup] Introduce --auto-approve=[tool-list | "allow-read-only"]

Tool: gitpod/catfood.gitpod.cloud

Author: geropl

README.md

@@ -78,6 +78,15 @@ export LINEAR_API_KEY=your_linear_api_key
 # Set up with write access enabled
 ./linear-mcp-go setup --write-access
 
+# Set up with auto-approval for read-only tools
+./linear-mcp-go setup --auto-approve=allow-read-only
+
+# Set up with specific tools auto-approved
+./linear-mcp-go setup --auto-approve=linear_get_issue,linear_search_issues
+
+# Set up with write access and auto-approval for read-only tools
+./linear-mcp-go setup --write-access --auto-approve=allow-read-only
+
 # Set up for a different tool (only "cline" supported for now)
 ./linear-mcp-go setup --tool=cline
 ```
@@ -86,6 +95,11 @@ This command:
 1. Checks if the Linear MCP binary is already installed
 2. Copies the current binary to the installation directory if needed
 3. Configures the AI assistant to use the Linear MCP server
+4. Sets up auto-approval for specified tools if requested
+
+The `--auto-approve` flag can be used to specify which tools should be auto-approved in the Cline configuration:
+- `--auto-approve=allow-read-only`: Auto-approves all read-only tools (`linear_search_issues`, `linear_get_user_issues`, `linear_get_issue`, `linear_get_teams`)
+- `--auto-approve=tool1,tool2,...`: Auto-approves the specified comma-separated list of tools
 
 Currently supported AI assistants:
 - Cline (VSCode extension)

cmd/setup.go

@@ -10,6 +10,7 @@ import (
 	"runtime"
 	"strings"
 
+	"github.com/geropl/linear-mcp-go/pkg/server"
 	"github.com/spf13/cobra"
 )
 
@@ -23,6 +24,7 @@ Currently supported tools: cline`,
 	Run: func(cmd *cobra.Command, args []string) {
 		tool, _ := cmd.Flags().GetString("tool")
 		writeAccess, _ := cmd.Flags().GetBool("write-access")
+		autoApprove, _ := cmd.Flags().GetString("auto-approve")
 
 		// Check if the Linear API key is provided in the environment
 		apiKey := os.Getenv("LINEAR_API_KEY")
@@ -60,7 +62,7 @@ Currently supported tools: cline`,
 		// Set up the tool-specific configuration
 		switch strings.ToLower(tool) {
 		case "cline":
-			if err := setupCline(binaryPath, apiKey, writeAccess); err != nil {
+			if err := setupCline(binaryPath, apiKey, writeAccess, autoApprove); err != nil {
 				fmt.Printf("Error setting up Cline: %v\n", err)
 				os.Exit(1)
 			}
@@ -80,6 +82,7 @@ func init() {
 	// Add flags to the setup command
 	setupCmd.Flags().String("tool", "cline", "The AI assistant tool to set up for (default: cline)")
 	setupCmd.Flags().Bool("write-access", false, "Enable write operations (default: false)")
+	setupCmd.Flags().String("auto-approve", "", "Comma-separated list of tool names to auto-approve, or 'allow-read-only' to auto-approve all read-only tools")
 }
 
 // checkBinary checks if the Linear MCP binary is already on the path
@@ -154,7 +157,7 @@ func copySelfToBinaryPath(binaryPath string) error {
 }
 
 // setupCline sets up the Linear MCP server for Cline
-func setupCline(binaryPath, apiKey string, writeAccess bool) error {
+func setupCline(binaryPath, apiKey string, writeAccess bool, autoApprove string) error {
 	// Determine the Cline config directory
 	homeDir, err := os.UserHomeDir()
 	if err != nil {
@@ -183,6 +186,25 @@ func setupCline(binaryPath, apiKey string, writeAccess bool) error {
 		serverArgs = append(serverArgs, "--write-access=true")
 	}
 
+	// Process auto-approve flag
+	autoApproveTools := []string{}
+	if autoApprove != "" {
+		if autoApprove == "allow-read-only" {
+			// Get the list of read-only tools
+			for k := range server.GetReadOnlyToolNames() {
+				autoApproveTools = append(autoApproveTools, k)
+			}
+		} else {
+			// Split comma-separated list
+			for _, tool := range strings.Split(autoApprove, ",") {
+				trimmedTool := strings.TrimSpace(tool)
+				if trimmedTool != "" {
+					autoApproveTools = append(autoApproveTools, trimmedTool)
+				}
+			}
+		}
+	}
+
 	// Create the MCP settings file
 	settingsPath := filepath.Join(configDir, "cline_mcp_settings.json")
 	newSettings := map[string]interface{}{
@@ -192,7 +214,7 @@ func setupCline(binaryPath, apiKey string, writeAccess bool) error {
 				"args":        serverArgs,
 				"env":         map[string]string{"LINEAR_API_KEY": apiKey},
 				"disabled":    false,
-				"autoApprove": []string{},
+				"autoApprove": autoApproveTools,
 			},
 		},
 	}

pkg/server/tools.go

@@ -478,9 +478,28 @@ func GetTeamsHandler(linearClient *linear.LinearClient) func(ctx context.Context
 	}
 }
 
+// GetReadOnlyToolNames returns the names of all read-only tools
+func GetReadOnlyToolNames() map[string]bool {
+	return map[string]bool{
+		"linear_search_issues":   true,
+		"linear_get_user_issues": true,
+		"linear_get_issue":       true,
+		"linear_get_teams":       true,
+	}
+}
+
 // RegisterTools registers all Linear tools with the MCP server
 func RegisterTools(s *server.MCPServer, linearClient *linear.LinearClient, writeAccess bool) {
-	// Register read-only tools (always available)
+	// Register tools, based on writeAccess
+	addTool := func(tool mcp.Tool, handler server.ToolHandlerFunc) {
+		if !writeAccess {
+			if readOnly := GetReadOnlyToolNames()[tool.Name]; !readOnly {
+				// Skip registering write tools if write access is disabled
+				return
+			}
+		}
+		s.AddTool(tool, handler)
+	}
 
 	// Search Issues Tool (read-only)
 	searchIssuesTool := mcp.NewTool("linear_search_issues",
@@ -495,7 +514,7 @@ func RegisterTools(s *server.MCPServer, linearClient *linear.LinearClient, write
 		mcp.WithBoolean("includeArchived", mcp.Description("Include archived issues in results (default: false)")),
 		mcp.WithNumber("limit", mcp.Description("Max results to return (default: 10)")),
 	)
-	s.AddTool(searchIssuesTool, SearchIssuesHandler(linearClient))
+	addTool(searchIssuesTool, SearchIssuesHandler(linearClient))
 
 	// Get User Issues Tool (read-only)
 	getUserIssuesTool := mcp.NewTool("linear_get_user_issues",
@@ -504,54 +523,51 @@ func RegisterTools(s *server.MCPServer, linearClient *linear.LinearClient, write
 		mcp.WithBoolean("includeArchived", mcp.Description("Include archived issues in results")),
 		mcp.WithNumber("limit", mcp.Description("Maximum number of issues to return (default: 50)")),
 	)
-	s.AddTool(getUserIssuesTool, GetUserIssuesHandler(linearClient))
+	addTool(getUserIssuesTool, GetUserIssuesHandler(linearClient))
 
 	// Get Issue Tool (read-only)
 	getIssueTool := mcp.NewTool("linear_get_issue",
 		mcp.WithDescription("Retrieves a single Linear issue by its ID. Returns detailed information about the issue including title, description, priority, status, assignee, team, full comment history (including nested comments), related issues, and all attachments (pull requests, design files, documents, etc.)."),
 		mcp.WithString("issueId", mcp.Required(), mcp.Description("ID of the issue to retrieve")),
 	)
-	s.AddTool(getIssueTool, GetIssueHandler(linearClient))
+	addTool(getIssueTool, GetIssueHandler(linearClient))
 
 	// Get Teams Tool (read-only)
 	getTeamsTool := mcp.NewTool("linear_get_teams",
 		mcp.WithDescription("Retrieves Linear teams with an optional name filter. If no name is provided, returns all teams. Returns team details including ID, name, and key."),
 		mcp.WithString("name", mcp.Description("Optional team name filter. Returns teams whose names contain this string.")),
 	)
-	s.AddTool(getTeamsTool, GetTeamsHandler(linearClient))
-
-	// Register write tools (only if writeAccess is true)
-	if writeAccess {
-		// Create Issue Tool
-		createIssueTool := mcp.NewTool("linear_create_issue",
-			mcp.WithDescription("Creates a new Linear issue with specified details. Use this to create tickets for tasks, bugs, or feature requests. Returns the created issue's identifier and URL. Required fields are title and teamId, with optional description, priority (0-4, where 0 is no priority and 1 is urgent), and status."),
-			mcp.WithString("title", mcp.Required(), mcp.Description("Issue title")),
-			mcp.WithString("teamId", mcp.Required(), mcp.Description("Team ID")),
-			mcp.WithString("description", mcp.Description("Issue description")),
-			mcp.WithNumber("priority", mcp.Description("Priority (0-4)")),
-			mcp.WithString("status", mcp.Description("Issue status")),
-		)
-		s.AddTool(createIssueTool, CreateIssueHandler(linearClient))
-
-		// Update Issue Tool
-		updateIssueTool := mcp.NewTool("linear_update_issue",
-			mcp.WithDescription("Updates an existing Linear issue's properties. Use this to modify issue details like title, description, priority, or status. Requires the issue ID and accepts any combination of updatable fields. Returns the updated issue's identifier and URL."),
-			mcp.WithString("id", mcp.Required(), mcp.Description("Issue ID")),
-			mcp.WithString("title", mcp.Description("New title")),
-			mcp.WithString("description", mcp.Description("New description")),
-			mcp.WithNumber("priority", mcp.Description("New priority (0-4)")),
-			mcp.WithString("status", mcp.Description("New status")),
-		)
-		s.AddTool(updateIssueTool, UpdateIssueHandler(linearClient))
-
-		// Add Comment Tool
-		addCommentTool := mcp.NewTool("linear_add_comment",
-			mcp.WithDescription("Adds a comment to an existing Linear issue. Supports markdown formatting in the comment body. Can optionally specify a custom user name and avatar for the comment. Returns the created comment's details including its URL."),
-			mcp.WithString("issueId", mcp.Required(), mcp.Description("ID of the issue to comment on")),
-			mcp.WithString("body", mcp.Required(), mcp.Description("Comment text in markdown format")),
-			mcp.WithString("createAsUser", mcp.Description("Optional custom username to show for the comment")),
-			mcp.WithString("displayIconUrl", mcp.Description("Optional avatar URL for the comment")),
-		)
-		s.AddTool(addCommentTool, AddCommentHandler(linearClient))
-	}
+	addTool(getTeamsTool, GetTeamsHandler(linearClient))
+
+	// Create Issue Tool
+	createIssueTool := mcp.NewTool("linear_create_issue",
+		mcp.WithDescription("Creates a new Linear issue with specified details. Use this to create tickets for tasks, bugs, or feature requests. Returns the created issue's identifier and URL. Required fields are title and teamId, with optional description, priority (0-4, where 0 is no priority and 1 is urgent), and status."),
+		mcp.WithString("title", mcp.Required(), mcp.Description("Issue title")),
+		mcp.WithString("teamId", mcp.Required(), mcp.Description("Team ID")),
+		mcp.WithString("description", mcp.Description("Issue description")),
+		mcp.WithNumber("priority", mcp.Description("Priority (0-4)")),
+		mcp.WithString("status", mcp.Description("Issue status")),
+	)
+	addTool(createIssueTool, CreateIssueHandler(linearClient))
+
+	// Update Issue Tool
+	updateIssueTool := mcp.NewTool("linear_update_issue",
+		mcp.WithDescription("Updates an existing Linear issue's properties. Use this to modify issue details like title, description, priority, or status. Requires the issue ID and accepts any combination of updatable fields. Returns the updated issue's identifier and URL."),
+		mcp.WithString("id", mcp.Required(), mcp.Description("Issue ID")),
+		mcp.WithString("title", mcp.Description("New title")),
+		mcp.WithString("description", mcp.Description("New description")),
+		mcp.WithNumber("priority", mcp.Description("New priority (0-4)")),
+		mcp.WithString("status", mcp.Description("New status")),
+	)
+	addTool(updateIssueTool, UpdateIssueHandler(linearClient))
+
+	// Add Comment Tool
+	addCommentTool := mcp.NewTool("linear_add_comment",
+		mcp.WithDescription("Adds a comment to an existing Linear issue. Supports markdown formatting in the comment body. Can optionally specify a custom user name and avatar for the comment. Returns the created comment's details including its URL."),
+		mcp.WithString("issueId", mcp.Required(), mcp.Description("ID of the issue to comment on")),
+		mcp.WithString("body", mcp.Required(), mcp.Description("Comment text in markdown format")),
+		mcp.WithString("createAsUser", mcp.Description("Optional custom username to show for the comment")),
+		mcp.WithString("displayIconUrl", mcp.Description("Optional avatar URL for the comment")),
+	)
+	addTool(addCommentTool, AddCommentHandler(linearClient))
 }