- Reliability 5/20
- Only the manifest, README, and metadata were supplied; no source, CI, or tests are available, so the MCP startup, init handshake, and declared tool behavior cannot be verified. The manifest repository points to SimplyLiz/CodeMCP instead of ckb, the manifest version 8.0.3 conflicts with README's v9.3.0, and tool counts (80+ vs 110) are inconsistent, so the score is conservatively low.
- Security and permissions 8/20
- No red-line issues such as malware, credential theft, or real secrets in install examples were found. The documentation claims token scopes, secret scanning, and allowlists, but the source is unavailable to verify credential storage, least privilege, or confirmation of dangerous operations. The HTTP service and optional LIP daemon enlarge the attack surface, and missing implementation evidence prevents a higher score.
- Maintenance 6/20
- The repository is not archived and has open issues; the README mentions an npm package and changelog, but the license is NOASSERTION, leaving licensing unclear. Commits, release cadence, dependency updates, and security-response channels cannot be verified from the supplied material, and the repository/version inconsistencies further reduce confidence.
- Documentation 12/20
- The README broadly covers installation, CLI, HTTP API, MCP client setup, presets, limitations, and wiki links, forming a layered documentation base. However, tool parameters, troubleshooting, and cost details rely on external wiki pages without reviewable evidence, and conflicting version/tool-count statements reduce credibility.
- Setup experience 12/20
- The install path looks clear: one npm/npx command, client configuration examples for multiple assistants, Windows wrapping, and environment variable notes. However, no CI or test evidence in the static material proves this path executes successfully, and the manifest repository URL differs from the README clone URL, creating traceability confusion. Given the static calibration cap of 15, a conservative score of 12 is given.