- Reliability 4/20
- Only server.json and the README were available; there is no source, tool schema, tests, or CI to compare against. The manifest's repository field points to browseros/browseros-server while the real repo is browseros-ai/BrowserOS, so the metadata is self-contradictory. Whether the npm package [email protected] exists or whether the stdio handshake and tool behaviors align cannot be verified. A plausible happy path is shown only by README claims, with no execution evidence and a static cap of 12; score 4.
- Security and permissions 5/20
- No red-line issue such as malware, credential theft, or covert exfiltration appears in the supplied material. However, this MCP server is designed to drive a browser with real logged-in sessions, a high-privilege, high-data-exposure surface. No tool-level least privilege, confirmation for dangerous operations, or session/credential isolation is shown. README claims of local-only storage and content-free telemetry are self-reported and unverifiable from source; score 5.
- Maintenance 10/20
- The repo is not archived, has an AGPL-3.0 license, an identifiable team, and community support channels, showing ongoing maintenance. But the evidence gives no commit frequency, release/tag history, dependency-update record, or security-response channel, and the server package is still 0.0.1. Star count is only a discovery signal and was not scored. Active but with governance gaps: 10.
- Documentation 8/20
- The README offers substantial product-level content, downloads, MCP connection paths, FAQ, privacy notes, and links to official docs. But server-specific documentation lacks a tool list, parameter reference, limits/cost disclosure, troubleshooting, and verifiable evidence; users must work under hidden assumptions. Score 8.
- Setup experience 7/20
- Per the README, setup is download the BrowserOS neo desktop app, then connect via one-click or URL; server.json declares an npm/stdio package. But no concrete client config example, npm install command, or runtime prerequisite (e.g., app must be running first) is provided, and there is no execution evidence under static calibration, so the steps are not confirmed reproducible. Score 7.