- Reliability 5/20
- The manifest is well-formed and its entry point (python -m beever_atlas.api.mcp_server) matches the stdio module named in the README, which is a small positive; however, the README explicitly states this stdio mode has no HTTP server and no backing stores, meaning the packaged OCI/stdio entry can only serve tool-list introspection, not real knowledge-base queries. The primary documented client path is streamable-http, contradicting the manifest's stdio transport; the claimed 28-tool catalog, the init/tool-list handshake, and whether declared tools match real behavior are unverifiable from the supplied source, with no CI or committed tests provided, so the static-review cap keeps this score low.
- Security and permissions 10/20
- No red-line triggers: no malware, no credential theft or covert exfiltration patterns, and install examples use placeholders rather than real tokens. The README discloses MCP auth via BEEVER_MCP_API_KEYS, principal-keyed rate limits, AES-256-GCM encrypted storage of platform credentials under CREDENTIAL_MASTER_KEY, a no-telemetry claim, and fail-fast startup against dev defaults in production — all positive signals; however, the tool catalog includes long-running operations whose side effects (e.g., triggering syncs or paid LLM calls) and least-privilege scoping cannot be confirmed from source, so the score rests at the 10 anchor rather than higher.
- Maintenance 10/20
- Apache-2.0 license, SECURITY.md, CODE_OF_CONDUCT, NOTICE, a documentation site, and a versioned release (0.3.0) are all present and the repository is not archived, giving a solid ownership baseline; but this review can only inspect the manifest and README, so commit cadence, issue responsiveness, and dependency-update practices are unverifiable. With 51 open issues and an API-stability section still describing a 0.1.0/0.2.0 roadmap while the manifest is 0.3.0, there is visible governance/versioning lag, which matches the 10-point anchor exactly.
- Documentation 14/20
- The README is layered and thorough: three install options, a key-purpose table, a production-hardening checklist with reasons, architecture explanation, demo mode, common commands, and a dedicated docs/mcp-server.md covering the tool catalog, auth setup, .mcp.json templates for Claude Code/Cursor, and rate limits; privacy and API-stability caveats are also disclosed. Deductions apply for the self-contradictory description of the packaged stdio mode (it claims to expose the same tool catalog yet has no backing stores, misleading registry users into expecting real queries), stale API-stability text citing 0.1.0/0.2.0 against a 0.3.0 manifest, and thin cost/troubleshooting detail.
- Setup experience 8/20
- The full deployment path is well documented: docker compose with seven services, a guided ./atlas installer with non-interactive mode, secret-generation commands, and client .mcp.json examples for Claude Code. However, the reviewed server.json packages a docker/stdio entry that the README describes as having no backing stores — suitable only for registry introspection, not a working connection to a real knowledge base. Functional MCP use requires standing up the entire stack first, including two mandatory API keys and generated secrets, which is heavy and manual; with no CI/test evidence in the supplied material, the score sits conservatively below the static cap of 15.