- Reliability 8/20
- The README shows CI and codecov badges and claims the architecture is 'now stable', but this static review only has the README and server.json — no actual CI workflow file or test code was available to verify those claims. The Status section itself admits a history of 'multi-process races, browser tab spam, and inconsistent setup UX', indicating past instability rather than a consistently reliable track record. Per the static calibration rule (no score above 12 without verifiable CI/test evidence), a low-to-mid score is given.
- Security and permissions 12/20
- NOTION_TOKEN is marked required/secret; stdio mode stores it AES-GCM encrypted with a machine-bound key in a local config dir, and HTTP mode uses OAuth 2.1 + PKCE, rate limiting, and session-owner binding — the credential boundaries are reasonably well described, with no sign of plaintext secrets or malicious code, so no red line is triggered. Deductions: the tool surface includes irreversible-leaning operations (archive/restore, delete_page, block delete) with no documented confirmation step; the README's 'Install with AI agent' instruction encourages an agent to fetch and follow install steps from an external URL, an unreviewed remote-instruction pattern that is a soft risk; the Cloudflare self-host path also manages several secrets with limited audit detail. A mid-range score reflects visible-but-incomplete risk mitigation.
- Maintenance 15/20
- The project uses semantic-release and Renovate for automated dependency updates, is at version 2.40.1 suggesting a fast release cadence, ships both an npm package and a Docker image, and carries a clear MIT license; the repo is not archived. 35 stars and 16 open issues show some user engagement but also a backlog. Deductions: no dedicated SECURITY.md or explicit security-response channel is evidenced, and the same author appears to maintain roughly 19 'sister projects', raising concern about maintainer bandwidth and long-term governance for any single one of them.
- Documentation 15/20
- Documentation is extensive: table of contents, install, CLI, remote HTTP mode, Smithery, a tools/resources table, a configuration variable table, self-hosting and Cloudflare deployment, a competitor comparison, a security section, and a tiered trust model. Deductions: much operational detail (per-client setup, multi-user configuration) is deferred to an external docs site (mcp.n24q02m.com) that cannot be verified for accuracy in a static review; the 'paste this to your AI agent' install flow directs an agent to fetch and act on instructions from an external page, which is not a reviewable documentation practice.
- Setup experience 13/20
- Basic stdio setup is simple — one JSON config block, an npx command, and a single env var; the Docker run example is equally clear. However, per the static calibration rule the score is capped without verifiable execution evidence. The remote HTTP/multi-user/Cloudflare self-host path is considerably more involved (OAuth app creation, KV namespace provisioning, multiple secrets, wrangler deploy steps), and the stated Node.js >= 24 requirement adds a compatibility bar for a runtime that may not yet be broadly adopted.