Plan and Act, and why the split matters
Cline operates in two modes, and the separation is its most important design decision.
Plan mode explores the codebase and proposes an approach without changing anything. It reads files, asks questions, and produces a strategy you can argue with.
Act mode carries it out — creating and editing files, running commands, reading their output, and correcting course when something fails.
The reason to separate them is economic as much as safe. The expensive mistake in agentic coding is not a bad edit; it is an agent confidently implementing the wrong approach across fifteen files, quickly, while consuming tokens. Reviewing a plan costs a minute. Reviewing and reverting an implementation costs an hour and the tokens are already spent.
Developers who skip Plan mode are the ones who report agentic coding as expensive and unpredictable.
The approval model, and its honest weakness
Every file change is shown as a diff before it is written. Every terminal command is shown before it executes. Nothing touches your machine without an explicit approval.
That is a genuinely good safety model with one failure mode, and it is human rather than technical: approval fatigue. By the fortieth diff in a session, people stop reading and start clicking. The protection is only as strong as the attention behind it, and attention degrades exactly as a session gets long and complex — which is when errors are most likely.
Auto-approval settings exist for command patterns you trust. They are useful and they are also the mechanism by which the safety model gets switched off gradually. Configure them deliberately, and keep destructive operations out of the list.
Bring your own model, and what that changes
Cline ships no model. You supply an API key — Anthropic, OpenAI, Google, or others — or point it at a local endpoint such as Ollama.
Three consequences follow.
You can match model to task. A cheaper model for mechanical refactoring, a stronger one for design work. Over a month that is a material cost difference, and no subscription tool offers it.
You see the true cost. Token spend is visible per request rather than hidden inside a subscription, which is uncomfortable and useful.
Local models are possible but disappointing for agentic work. Agents need long context and reliable instruction-following; smaller local models struggle with both and produce loops rather than results. It is technically supported and rarely satisfying — worth knowing before choosing Cline specifically to avoid a hosted API.
Token cost, which is the real risk
Agentic loops re-read context repeatedly. Each step may include the file being edited, the surrounding code, the conversation so far and the output of the last command. A long session on a large codebase can consume far more than people expect from a tool that is itself free.
Practical mitigations, in order of effectiveness: use Plan mode first; keep tasks narrow rather than open-ended; start a new task rather than continuing an enormous conversation; and set a hard spending limit at the provider, which is the only control that cannot be undone by enthusiasm at 2am.
The extension is free. The bill comes from your model provider, and nothing in Cline caps it.
MCP, and reaching outside the repository
Cline supports the Model Context Protocol, which lets an agent connect to systems beyond the filesystem — a database, an issue tracker, a documentation server, an internal API.
This is what separates “an agent that edits files” from “an agent that can do a task end to end”. Fixing a bug described in a ticket, checking a schema before writing a migration, or reading current API documentation rather than recalling it are all MCP-shaped problems.
It also widens the blast radius. An agent with database access can do more damage than one with file access, and the approval model is the only thing between it and your data. Grant narrowly.
What you have to supply
- VS Code, or a compatible fork such as Windsurf or Cursor.
- An API key with credit. The extension is free; the model usage is not.
- An existing project. It is built around a workspace, not a blank slate.
- Judgement to review diffs and commands — the safety model assumes it.
- Optionally, a `.clinerules` file to encode project conventions so they persist across sessions.
Where it fits, and where it does not
Cline suits multi-step tasks that are tedious rather than difficult: wiring an endpoint through several layers, adding a test suite, migrating a pattern across files, updating a dependency and its call sites. Work where the shape is known and the typing is the cost.
It suits developers who want an agent without leaving VS Code, and who prefer choosing their own model to accepting a subscription’s fixed offering.
It does not do inline completion — most users run Copilot or Codeium alongside it, and that pairing is the common configuration rather than an exception.
It is a poor fit for teams whose policy forbids code reaching a hosted API, since bringing your own key does not change where the code goes; for developers outside VS Code; and for anyone who will not read the diffs.
What the design gets right
- Plan before act — the cheapest place to catch a wrong approach.
- Approval on every side effect, with nothing written or executed unseen.
- Model choice per task, including local endpoints, with visible costs.
- MCP support, so the agent can act on systems outside the repository.
- Open source, and it keeps the editor you already have configured.
- Project rules that persist conventions across sessions.
What it will cost you
- Token spend is the headline risk and is not capped by the tool.
- Approval fatigue erodes the safety model over a long session.
- No inline completion, so most users run a second tool.
- Large-codebase judgement is imperfect — it may miss the relevant file or duplicate existing code.
- VS Code only. No JetBrains, no Vim, no standalone mode.
- Local models underperform for agentic work despite being supported.
Exit cost is effectively zero
Uninstall the extension. Your repository is a repository; every change it made is already committed or on disk, and there is no proprietary state.
The only thing that does not travel is your accumulated conversation history, and the `.clinerules` file is plain text you can keep or adapt. Exit cost is effectively zero, which is a fair argument for trying it before a subscription tool.
Agents to compare it against
- Claude Code — the same agentic pattern in a terminal, tied to one provider.
- Aider — terminal-based and git-centric, with every change committed.
- Cursor IDE — an editor with the agent built in, plus completion and indexing.
- Windsurf — agent-first editor, if you would rather not assemble the pieces.
Compiled from the Cline project documentation and public sources. We have not hands-on tested this tool. Last reviewed 16 August 2026.