Verdict
Cline suits developers and platform teams that want an open-source agent with full model choice and no seat fees, paying only for inference or a $9.99 ClinePass 2,3. The catch is governance and assurance: SSO, RBAC and audit logs need a quote-only Enterprise deal, no SOC 2 report is published, and 2026 brought a tampered npm release and a critical flaw in a local agent server 2,19,21,22.
Good fit if you are
- Developers who want to bring their own API keys or local models and pay providers directly
- Budget-conscious developers standardising on open-weight models through ClinePass
- Enterprises that want to run the agent in their own VPC, on-prem or air-gapped with their own inference
Look elsewhere if you are
- Buyers who need a published SOC 2 report or ISO certification before procurement
- Teams that want a flat, predictable price for frontier models such as Claude or GPT
- Small teams that want SSO and admin controls without talking to sales
Pros and cons
What we like
- The extension, CLI and desktop app are free and Apache 2.0 open source, with no seat fees 1,2.
- Works with any major provider or a local model, and inference bought through Cline is sold at cost 1,2.
- Checkpoints snapshot your files after every tool use, so you can compare or restore any step without touching Git history 11.
- Cloud Agents run tasks in isolated sandboxes scoped to one repo and return a branch or pull request, up to 10 at once 9.
- Runs in VS Code-family editors and JetBrains, in Zed, Neovim and Emacs through ACP, and headless in CI 1,15,17.
What to watch
- SSO, role-based access, team dashboards and authentication logs require the quote-only Enterprise plan 2.
- The trust center lists SOC 2 but publishes only an auditor engagement letter, not a report 19.
- A stolen npm token was used to publish a tampered CLI release, and a critical WebSocket flaw let websites hijack the local Kanban server 21,22.
- Frontier models are billed per token through credits or your own key, so costs track usage with no flat plan 2,8.
- Cloud Agents do not load rules, skills, MCP servers or connectors yet 9.
Key facts
| Made by | Cline Bot Inc. |
|---|---|
| Pricing | Free extension; inference at cost or BYOK; ClinePass $9.99/month |
| Cost per developer | $10 a month (ClinePass, monthly, for open-weight models; frontier models through Cline credits or your own keys are billed per token on top) |
| Also requires | Needs a model source: your own API key or local model, Cline credits, or ClinePass |
| Where it runs | IDE, Terminal, Cloud (background), Web app, GitHub, Slack |
| AI models | Claude, GPT, Gemini, Grok, DeepSeek, Mistral and open-weight models across 50+ providers, local models through Ollama or LM Studio, or any OpenAI-compatible endpoint 1,18 |
| Works with | VS Code, Cursor, Windsurf, JetBrains, Zed, GitHub, GitLab, Slack, Linear |
| Security reports | SOC 2 (listed; no report published), GDPR |
| Free trial | Free open-source extension, with free models available |
What Cline is
Cline is an Apache 2.0 open-source coding agent from Cline Bot Inc., with more than 250 contributors and about 70,000 GitHub stars 1,20. It started as a VS Code extension and now runs in JetBrains, a CLI, a desktop app, an SDK and a browser-based cloud agent 1,4. The agent itself is free; Cline earns from inference credits, the ClinePass subscription and Enterprise contracts 2,3.
Adoption is broad. The VS Code extension alone shows more than 5.5 million installs 24. Samsung Electronics said it would adopt Cline for developers in its Device eXperience division 26, and Salesforce built Agentforce Vibes on a fork of Cline's VS Code extension 27. In 2026 Cline rebuilt its agent harness on the Cline SDK and released an open-source desktop app focused on open-weight models 18.
What it can do
In the editor you describe a task, and Cline reads files, proposes edits and runs terminal commands, reacting to output as it streams 1. Plan mode agrees an approach first; Act mode executes it 1. Auto-approve settings decide which reads, edits, commands, browser actions and MCP tools run without asking, and YOLO mode approves everything 10. Every tool use creates a checkpoint in a shadow Git repository, so you can compare or restore files without touching your own history 11. Rules files, skills, MCP servers and plugins with hooks extend the agent 1.
The CLI runs interactively or headless for scripts and CI, and can auto-approve unattended runs 16. Through the Agent Client Protocol it also works inside Zed, JetBrains, Neovim and Emacs 17. Cloud Agents take a GitHub repo and a task from the browser, work in an isolated sandbox whose GitHub access is limited to that repo, push to a cline/ branch and open a pull request when asked 9.
- Actions. Cline makes coordinated multi-file edits, runs terminal commands and reacts to their output, and works in separate Plan and Act modes 1. Cloud Agents work in a sandbox, commit to a cline/ branch as they go and open a pull request when asked 9.
- Setup. Install the extension from the VS Code Marketplace, Open VSX or JetBrains Marketplace, or the CLI with npm, then choose Cline credits, ClinePass or your own provider key 15,16.
- Reviewing its changes. Cline asks before each edit or command unless auto-approve is on, every step can be diffed or restored from a checkpoint, and Cloud Agents hand back a branch or pull request for GitHub review 9,10,11.
- Analytics. Enterprise adds a team management dashboard and OpenTelemetry export of usage, cost and performance to tools such as Datadog, Grafana and Splunk 2,13.
Pricing
The extension, CLI and desktop app cost nothing 2. You pay for inference: bring your own key or local model, buy Cline credits charged at provider cost, or subscribe to ClinePass 2,8. ClinePass costs $9.99 a month, plus a possible processing fee, and covers open-weight models such as GLM, Kimi, DeepSeek, MiniMax, MiMo and Qwen with quotas Cline puts at 2-5x standard API rate limits 3. Frontier models such as Claude or GPT are billed per token through credits or your own key, so the bill tracks how much you use them 2,8. Cloud Agents are open to every user, with free models and a cap of 10 concurrent and 50 new sessions a day 4,9. Enterprise, which adds SSO, role-based access, centralized billing, team dashboards and authentication logs, is quote-only 2.
| Plan | Price | Includes |
|---|---|---|
| Open Source | Free2 | VS Code extension, CLI, MCP Marketplace, multi-root workspaces, inference at cost or bring your own key, community support |
| Cline credits (usage-billing) | Pay as you go at provider cost2,8 | One prepaid balance across 100+ models, with some models tagged free |
| ClinePass | $9.99/month (processing fee may apply)3 | Open-weight models from Z.ai, Moonshot AI, DeepSeek, MiniMax, MiMo and Qwen, with quotas Cline puts at 2-5x standard API rate limits |
| Cloud Agents | Included; model usage billed by provider choice4,9 | Browser-based agents with free models available, up to 10 concurrent and 50 new sessions a day |
| Enterprise | Quote only2 | JetBrains extension, SSO, SLA, dedicated support, centralized billing, role-based access, team dashboard, provider limits, authentication logs |
Security and data
Cline runs client-side: the agent works on the developer's machine or a chosen remote host, reads files only when a task needs them, and does not index or embed repositories 13. With your own keys or a VPC deployment, prompts go straight to your provider and Cline does not see them 5. When you use Cline's inference, requests pass through its servers only to reach the model, and Cline says it never uses them for training 5,6. Usage telemetry is on by default, leaves out code and prompts except for Cline and ClinePass provider requests, and can be switched off by users or locked off by Enterprise admins in the extensions 14. The trust center lists SOC 2 and GDPR but publishes only an auditor engagement letter 19. In February 2026 a stolen npm token was used to publish a tampered CLI release, and Cline later disclosed a critical flaw that let websites hijack its local Kanban server 21,22.
- Zero data retention. No zero-data-retention program published; with your own keys or a VPC deployment, Cline does not see code or prompts 5
- Data residency. Self-hosted in your VPC, on-prem or air-gapped on Enterprise 5
- Training on your data. Cline says it never trains on code or prompts sent through its inference; with your own keys the model provider's policy applies 6,7
- AI models. Your choice: Anthropic, OpenAI, Google, AWS Bedrock, Azure, Vertex, xAI, DeepSeek, Mistral and others, or local models 1
What customers say
Independent ratings are sparse. The VS Code extension holds 4.0 stars from 319 Marketplace ratings, with more than 5.5 million installs 24. Gartner Peer Insights lists Cline in its Enterprise AI Coding Agents market with 3.5 stars from just two ratings 25, and Cline has no entry on the public Terminal-Bench leaderboards 28. Samsung Electronics said it would roll Cline out to developers in its Device eXperience division 26, and Salesforce chose Cline as the base for Agentforce Vibes partly for its MCP support 27.
| Platform | Rating | Reviews | Seen |
|---|---|---|---|
| VS Code Marketplace (Cline)24 | 4.0 / 5 | 319 | 8 October 2026 |
| Gartner Peer Insights (Cline (Enterprise AI Coding Agents))25 | 3.5 / 5 | 2 | 8 October 2026 |
What Cline Bot Inc. claims (not independently verified):
- More than 11 million installs across platforms and 11 million developers 1,18
- Kimi K3 in Cline CLI scores 82.02% on Terminal-Bench 2.0 (pass@1, run by Cline) 18
- ClinePass quotas give 2-5x the usage of standard API rate limits 3
- Inference through Cline is priced at cost, with no markup on your own provider contracts 2,13
Concerns raised by others:
- On February 17, 2026 a compromised npm token was used to publish cline@2.3.0 with a postinstall script that installed another package; it was deprecated about eight hours later 21.
- A critical flaw let any website a developer visited hijack the local Kanban server's WebSocket, inject prompts into running agents and leak workspace data 22.
- A high-severity cross-origin WebSocket flaw in the Cline Hub dashboard let websites read session state and change MCP and provider settings 23.
- Gartner Peer Insights shows only 3.5 stars from two ratings 25.
How we scored it
| Criterion | Why | Score |
|---|---|---|
| What it can do 30% of the total | Cline plans, edits multiple files and runs commands and tests locally, runs as a sandboxed cloud agent that opens pull requests, and extends through MCP and plugins 1,9,16. | 5/5 |
| Pricing 20% of the total | The free extension, $9.99 ClinePass and at-cost credits are public, but ClinePass quotas are only described as 'generous' and all team features sit in a quote-only Enterprise plan 2,3. | 3/5 |
| Control 20% of the total | Per-category auto-approve, step-by-step diffs, checkpoints, and Enterprise controls over YOLO mode and MCP servers with authentication logs are documented, but sandboxing covers only cloud sessions and fine-grained permissions are 'coming soon' 2,9,10,11,12,13. | 4/5 |
| Security and data 15% of the total | The trust center lists SOC 2 and GDPR but offers only an auditor engagement letter, with no published report or ISO certification 19. | 2/5 |
| Customer evidence 15% of the total | Cline holds 4.0 from 319 VS Code Marketplace ratings 24 and Samsung adopted it and Salesforce built a product on it 26,27, but it has no public leaderboard result 28 and disclosed serious security flaws in 2026 21,22. | 3/5 |
| Total | Weighted sum of the 5 levels, out of 10. | 7.3 |
Sources
- Cline: AI Coding, Open Source and Open Choice
- Pricing
- ClinePass
- Cline Cloud
- Cline for Enterprise
- FAQ
- Privacy Policy
- Cline (usage-billing)
- Cline Cloud Agents
- Auto Approve & YOLO Mode
- Checkpoints
- YOLO Mode (Enterprise controls)
- Cline Enterprise
- Cline Telemetry
- Installing Cline
- CLI Overview
- ACP
- Cline Desktop: An open-source app for open-weight models
- Cline Bot Trust Center
- cline/cline repository
- Unauthorized npm publish of Cline CLI cline@2.3.0 with modified postinstall script (GHSA-9ppg-jx86-fqw7)
- Cross-Origin WebSocket Hijack in Cline Kanban Server (GHSA-5c57-rqjx-35g2)
- Cross-Origin WebSocket Hijacking in Cline Hub Dashboard (GHSA-3cj3-hqcr-g934)
- Cline (saoudrizwan.claude-dev)
- Cline Reviews (Enterprise AI Coding Agents)
- Samsung Electronics to adopt AI coding assistant to boost developer productivity
- Salesforce launches enterprise vibe-coding product, Agentforce Vibes
- Terminal-Bench Leaderboards (2.0, 2.1, 3.0, 4.0)
