Home / Coding agents / Cline

Cline review

Free, open-source coding agent for VS Code, JetBrains, terminal, desktop and browser that runs any model you choose.

Verdict

Cline suits developers and platform teams that want an open-source agent with full model choice and no seat fees, paying only for inference or a $9.99 ClinePass 2,3. The catch is governance and assurance: SSO, RBAC and audit logs need a quote-only Enterprise deal, no SOC 2 report is published, and 2026 brought a tampered npm release and a critical flaw in a local agent server 2,19,21,22.

Good fit if you are

  • Developers who want to bring their own API keys or local models and pay providers directly
  • Budget-conscious developers standardising on open-weight models through ClinePass
  • Enterprises that want to run the agent in their own VPC, on-prem or air-gapped with their own inference

Look elsewhere if you are

  • Buyers who need a published SOC 2 report or ISO certification before procurement
  • Teams that want a flat, predictable price for frontier models such as Claude or GPT
  • Small teams that want SSO and admin controls without talking to sales

Pros and cons

What we like

  • The extension, CLI and desktop app are free and Apache 2.0 open source, with no seat fees 1,2.
  • Works with any major provider or a local model, and inference bought through Cline is sold at cost 1,2.
  • Checkpoints snapshot your files after every tool use, so you can compare or restore any step without touching Git history 11.
  • Cloud Agents run tasks in isolated sandboxes scoped to one repo and return a branch or pull request, up to 10 at once 9.
  • Runs in VS Code-family editors and JetBrains, in Zed, Neovim and Emacs through ACP, and headless in CI 1,15,17.

What to watch

  • SSO, role-based access, team dashboards and authentication logs require the quote-only Enterprise plan 2.
  • The trust center lists SOC 2 but publishes only an auditor engagement letter, not a report 19.
  • A stolen npm token was used to publish a tampered CLI release, and a critical WebSocket flaw let websites hijack the local Kanban server 21,22.
  • Frontier models are billed per token through credits or your own key, so costs track usage with no flat plan 2,8.
  • Cloud Agents do not load rules, skills, MCP servers or connectors yet 9.

Key facts

Made byCline Bot Inc.
PricingFree extension; inference at cost or BYOK; ClinePass $9.99/month
Cost per developer$10 a month (ClinePass, monthly, for open-weight models; frontier models through Cline credits or your own keys are billed per token on top)
Also requiresNeeds a model source: your own API key or local model, Cline credits, or ClinePass
Where it runsIDE, Terminal, Cloud (background), Web app, GitHub, Slack
AI modelsClaude, GPT, Gemini, Grok, DeepSeek, Mistral and open-weight models across 50+ providers, local models through Ollama or LM Studio, or any OpenAI-compatible endpoint 1,18
Works withVS Code, Cursor, Windsurf, JetBrains, Zed, GitHub, GitLab, Slack, Linear
Security reportsSOC 2 (listed; no report published), GDPR
Free trialFree open-source extension, with free models available

What Cline is

Cline is an Apache 2.0 open-source coding agent from Cline Bot Inc., with more than 250 contributors and about 70,000 GitHub stars 1,20. It started as a VS Code extension and now runs in JetBrains, a CLI, a desktop app, an SDK and a browser-based cloud agent 1,4. The agent itself is free; Cline earns from inference credits, the ClinePass subscription and Enterprise contracts 2,3.

Adoption is broad. The VS Code extension alone shows more than 5.5 million installs 24. Samsung Electronics said it would adopt Cline for developers in its Device eXperience division 26, and Salesforce built Agentforce Vibes on a fork of Cline's VS Code extension 27. In 2026 Cline rebuilt its agent harness on the Cline SDK and released an open-source desktop app focused on open-weight models 18.

What it can do

In the editor you describe a task, and Cline reads files, proposes edits and runs terminal commands, reacting to output as it streams 1. Plan mode agrees an approach first; Act mode executes it 1. Auto-approve settings decide which reads, edits, commands, browser actions and MCP tools run without asking, and YOLO mode approves everything 10. Every tool use creates a checkpoint in a shadow Git repository, so you can compare or restore files without touching your own history 11. Rules files, skills, MCP servers and plugins with hooks extend the agent 1.

The CLI runs interactively or headless for scripts and CI, and can auto-approve unattended runs 16. Through the Agent Client Protocol it also works inside Zed, JetBrains, Neovim and Emacs 17. Cloud Agents take a GitHub repo and a task from the browser, work in an isolated sandbox whose GitHub access is limited to that repo, push to a cline/ branch and open a pull request when asked 9.

  • Actions. Cline makes coordinated multi-file edits, runs terminal commands and reacts to their output, and works in separate Plan and Act modes 1. Cloud Agents work in a sandbox, commit to a cline/ branch as they go and open a pull request when asked 9.
  • Setup. Install the extension from the VS Code Marketplace, Open VSX or JetBrains Marketplace, or the CLI with npm, then choose Cline credits, ClinePass or your own provider key 15,16.
  • Reviewing its changes. Cline asks before each edit or command unless auto-approve is on, every step can be diffed or restored from a checkpoint, and Cloud Agents hand back a branch or pull request for GitHub review 9,10,11.
  • Analytics. Enterprise adds a team management dashboard and OpenTelemetry export of usage, cost and performance to tools such as Datadog, Grafana and Splunk 2,13.

Pricing

The extension, CLI and desktop app cost nothing 2. You pay for inference: bring your own key or local model, buy Cline credits charged at provider cost, or subscribe to ClinePass 2,8. ClinePass costs $9.99 a month, plus a possible processing fee, and covers open-weight models such as GLM, Kimi, DeepSeek, MiniMax, MiMo and Qwen with quotas Cline puts at 2-5x standard API rate limits 3. Frontier models such as Claude or GPT are billed per token through credits or your own key, so the bill tracks how much you use them 2,8. Cloud Agents are open to every user, with free models and a cap of 10 concurrent and 50 new sessions a day 4,9. Enterprise, which adds SSO, role-based access, centralized billing, team dashboards and authentication logs, is quote-only 2.

PlanPriceIncludes
Open SourceFree2VS Code extension, CLI, MCP Marketplace, multi-root workspaces, inference at cost or bring your own key, community support
Cline credits (usage-billing)Pay as you go at provider cost2,8One prepaid balance across 100+ models, with some models tagged free
ClinePass$9.99/month (processing fee may apply)3Open-weight models from Z.ai, Moonshot AI, DeepSeek, MiniMax, MiMo and Qwen, with quotas Cline puts at 2-5x standard API rate limits
Cloud AgentsIncluded; model usage billed by provider choice4,9Browser-based agents with free models available, up to 10 concurrent and 50 new sessions a day
EnterpriseQuote only2JetBrains extension, SSO, SLA, dedicated support, centralized billing, role-based access, team dashboard, provider limits, authentication logs

Security and data

Cline runs client-side: the agent works on the developer's machine or a chosen remote host, reads files only when a task needs them, and does not index or embed repositories 13. With your own keys or a VPC deployment, prompts go straight to your provider and Cline does not see them 5. When you use Cline's inference, requests pass through its servers only to reach the model, and Cline says it never uses them for training 5,6. Usage telemetry is on by default, leaves out code and prompts except for Cline and ClinePass provider requests, and can be switched off by users or locked off by Enterprise admins in the extensions 14. The trust center lists SOC 2 and GDPR but publishes only an auditor engagement letter 19. In February 2026 a stolen npm token was used to publish a tampered CLI release, and Cline later disclosed a critical flaw that let websites hijack its local Kanban server 21,22.

  • Zero data retention. No zero-data-retention program published; with your own keys or a VPC deployment, Cline does not see code or prompts 5
  • Data residency. Self-hosted in your VPC, on-prem or air-gapped on Enterprise 5
  • Training on your data. Cline says it never trains on code or prompts sent through its inference; with your own keys the model provider's policy applies 6,7
  • AI models. Your choice: Anthropic, OpenAI, Google, AWS Bedrock, Azure, Vertex, xAI, DeepSeek, Mistral and others, or local models 1

What customers say

Independent ratings are sparse. The VS Code extension holds 4.0 stars from 319 Marketplace ratings, with more than 5.5 million installs 24. Gartner Peer Insights lists Cline in its Enterprise AI Coding Agents market with 3.5 stars from just two ratings 25, and Cline has no entry on the public Terminal-Bench leaderboards 28. Samsung Electronics said it would roll Cline out to developers in its Device eXperience division 26, and Salesforce chose Cline as the base for Agentforce Vibes partly for its MCP support 27.

PlatformRatingReviewsSeen
VS Code Marketplace (Cline)244.0 / 53198 October 2026
Gartner Peer Insights (Cline (Enterprise AI Coding Agents))253.5 / 528 October 2026

What Cline Bot Inc. claims (not independently verified):

  • More than 11 million installs across platforms and 11 million developers 1,18
  • Kimi K3 in Cline CLI scores 82.02% on Terminal-Bench 2.0 (pass@1, run by Cline) 18
  • ClinePass quotas give 2-5x the usage of standard API rate limits 3
  • Inference through Cline is priced at cost, with no markup on your own provider contracts 2,13

Concerns raised by others:

  • On February 17, 2026 a compromised npm token was used to publish cline@2.3.0 with a postinstall script that installed another package; it was deprecated about eight hours later 21.
  • A critical flaw let any website a developer visited hijack the local Kanban server's WebSocket, inject prompts into running agents and leak workspace data 22.
  • A high-severity cross-origin WebSocket flaw in the Cline Hub dashboard let websites read session state and change MCP and provider settings 23.
  • Gartner Peer Insights shows only 3.5 stars from two ratings 25.

How we scored it

CriterionWhyScore
What it can do
30% of the total
Cline plans, edits multiple files and runs commands and tests locally, runs as a sandboxed cloud agent that opens pull requests, and extends through MCP and plugins 1,9,16.5/5
Pricing
20% of the total
The free extension, $9.99 ClinePass and at-cost credits are public, but ClinePass quotas are only described as 'generous' and all team features sit in a quote-only Enterprise plan 2,3.3/5
Control
20% of the total
Per-category auto-approve, step-by-step diffs, checkpoints, and Enterprise controls over YOLO mode and MCP servers with authentication logs are documented, but sandboxing covers only cloud sessions and fine-grained permissions are 'coming soon' 2,9,10,11,12,13.4/5
Security and data
15% of the total
The trust center lists SOC 2 and GDPR but offers only an auditor engagement letter, with no published report or ISO certification 19.2/5
Customer evidence
15% of the total
Cline holds 4.0 from 319 VS Code Marketplace ratings 24 and Samsung adopted it and Salesforce built a product on it 26,27, but it has no public leaderboard result 28 and disclosed serious security flaws in 2026 21,22.3/5
TotalWeighted sum of the 5 levels, out of 10.7.3

Sources

  1. Cline: AI Coding, Open Source and Open Choice — Cline, accessed 8 October 2026
  2. Pricing — Cline, accessed 8 October 2026
  3. ClinePass — Cline, accessed 8 October 2026
  4. Cline Cloud — Cline, accessed 8 October 2026
  5. Cline for Enterprise — Cline, accessed 8 October 2026
  6. FAQ — Cline, accessed 8 October 2026
  7. Privacy Policy — Cline, accessed 8 October 2026
  8. Cline (usage-billing) — Cline Docs, accessed 8 October 2026
  9. Cline Cloud Agents — Cline Docs, accessed 8 October 2026
  10. Auto Approve & YOLO Mode — Cline Docs, accessed 8 October 2026
  11. Checkpoints — Cline Docs, accessed 8 October 2026
  12. YOLO Mode (Enterprise controls) — Cline Docs, accessed 8 October 2026
  13. Cline Enterprise — Cline Docs, accessed 8 October 2026
  14. Cline Telemetry — Cline Docs, accessed 8 October 2026
  15. Installing Cline — Cline Docs, accessed 8 October 2026
  16. CLI Overview — Cline Docs, accessed 8 October 2026
  17. ACP — Cline Docs, accessed 8 October 2026
  18. Cline Desktop: An open-source app for open-weight models — Cline Blog, accessed 8 October 2026
  19. Cline Bot Trust Center — Cline, accessed 8 October 2026
  20. cline/cline repository — GitHub, accessed 8 October 2026
  21. Unauthorized npm publish of Cline CLI cline@2.3.0 with modified postinstall script (GHSA-9ppg-jx86-fqw7) — Cline (GitHub Security Advisory), accessed 8 October 2026
  22. Cross-Origin WebSocket Hijack in Cline Kanban Server (GHSA-5c57-rqjx-35g2) — Cline (GitHub Security Advisory), accessed 8 October 2026
  23. Cross-Origin WebSocket Hijacking in Cline Hub Dashboard (GHSA-3cj3-hqcr-g934) — Cline (GitHub Security Advisory), accessed 8 October 2026
  24. Cline (saoudrizwan.claude-dev) — Visual Studio Marketplace, accessed 8 October 2026
  25. Cline Reviews (Enterprise AI Coding Agents) — Gartner Peer Insights, accessed 8 October 2026
  26. Samsung Electronics to adopt AI coding assistant to boost developer productivity — The Korea Times, accessed 8 October 2026
  27. Salesforce launches enterprise vibe-coding product, Agentforce Vibes — TechCrunch, accessed 8 October 2026
  28. Terminal-Bench Leaderboards (2.0, 2.1, 3.0, 4.0) — Terminal-Bench (tbench.ai), accessed 8 October 2026