Benefits with Ory + Linear MCP Server
Use Cases
— 01 use caseAgent IAM
Summarizers read at Read, triage agents file and comment at Write, merges and deletions are Admin only, and Block keeps other agents out of Linear.
Core Functionality
— 04 capabilitiesRead, write, admin, or no access
Ory Agent Security classifies every tool on the Linear MCP server as read, write, or admin, so you can give each user, team, or agent type only the level it needs: read for planning agents, write for triage agents, admin for the few agents trusted to remove or share work, and no access for agents with no role in product work.
Enforced before execution
Ory Agent Security checks each tool call against the user, the agent acting for them, and any sub-agent inside the agent harness, so a denied issue deletion stops before it reaches Linear, with nothing to roll back and no gateway to deploy.
Observe, then enforce
Observe mode shows which agents create or change issues and for whom without blocking anything, so you can apply Ory's pre-built policy for the Linear MCP server and enforce it on your own schedule.
Complete audit trail
Every allow and deny decision on the Linear MCP server streams to your SIEM through OpenTelemetry with the user, agent, and action attached, so you can show which agent closed or edited an issue and on whose behalf.