- Reliability 10/20
- The manifest declares stdio transport launching an OCI image (ghcr.io/us/crw:latest) with a positional 'crw-mcp' argument, and the README claims five operations (scrape, crawl, map, search, extract) with published crates.io/PyPI/npm artifacts and a CI badge, so a reproducible build path is plausible. However, this is a static review: no source was available showing tool implementations, parameter schemas, or error-handling code; the MCP tool input/output contracts, timeouts, retries, and rate-limit behavior are undisclosed. The manifest title/description emphasizes scrape/crawl/map while the README adds extract, so declared-tools-vs-behavior alignment cannot be confirmed. No committed tests covering the server's key paths are visible. Per static calibration, reliability is capped at 12 without such evidence; scoring 10 for a self-consistent capability surface with real package/CI signals, deducting for unverifiable tool semantics and edge-case handling.
- Security and permissions 11/20
- Positive signals: AGPL-3.0 license, crawl/map documented to honor robots.txt by default, the API key stored in ~/.config/crw/config.toml rather than copied into each AI tool's config, and automatic agent registration limited to already-configured tools with a CRW_NO_AGENTS=1 opt-out, which reflects reasonable least-privilege and data-boundary thinking. Deductions: the primary install method is 'curl -fsSL https://fastcrw.com/install | sh', piping a remote script straight into a shell, and it can be invoked with a real-format CRW_API_KEY=crw_live_..., an unauditable high-risk default path; the README repeatedly funnels users to registration/credits links, yet no data-flow disclosure exists for the managed mode (scraped content, keys, telemetry); MCP tools perform outbound fetching/crawling with side effects but no confirmation or scope-limiting is described. No malware, credential theft, fabricated maintainer identity, real leaked secrets, or unconfirmed critical vulnerabilities were found, so no red line is triggered; 11 reflects visible-but-incomplete controls and undisclosed data flows.
- Maintenance 12/20
- Clear AGPL-3.0 licensing for the engine and MCP server and MIT for SDKs; multi-registry releases on crates.io/PyPI/npm; version 0.34.0 indicating sustained iteration; a CI workflow badge; a contributor list with several external contributors; a non-archived repo with 967 stars and only 9 open issues — all consistent with active maintenance. Gaps: no security-response or vulnerability-disclosure channel in the README, no stated release cadence or semantic-versioning policy, no visible dependency-update mechanism, an 'embedding license' pointing to an email rather than a clear license text, and limited governance/ownership transparency (multiple packages under a personal-looking 'us' account). Static evidence supports 12: active, but with governance and versioning gaps.
- Documentation 10/20
- Documentation is reasonably layered: the README covers installation, CLI usage, Python/Node SDKs, MCP installation, managed-vs-self-hosted differences, migration and self-hosting links, plus pointers to /v1/capabilities and response shapes, and it discloses that robots.txt is followed by default. Key gaps remain: the five MCP tools' parameters, return shapes, quotas/cost, rate limits, timeouts, and troubleshooting are not documented in-repo and require external sites; benchmark claims are presented as self-authored SVGs with external links and no reproducible methodology in the supplied material; comparative numbers such as '2.3x faster than Tavily' lack in-repo verification; manual MCP client setup is only a link with no config examples. Usable, but with hidden assumptions and troubleshooting blind spots: 10.
- Setup experience 11/20
- The install path is clear and short: a single curl command, local mode needs no account, and the same command with CRW_API_KEY can configure the key and register the MCP server, with automatic detection of Claude Code, Cursor, Codex, Gemini CLI, OpenCode, and Windsurf; an 'npx -y crw-mcp@latest install' path and interactive 'crw setup' also exist. macOS and Linux on Intel and ARM are supported (Rust 1.85+ only for building from source). Deductions: the headline method pipes a remote script into a shell, which is fragile and unauditable; the manifest offers only an OCI image with stdio and no per-client JSON configuration examples; Windows support is unmentioned; and default auto-registration mutates multiple AI tool configs (opt-out exists, but the default writes). Per static calibration setup cannot exceed 15; scoring 11.