- Reliability 7/20
- Only the README was supplied; no source tree, tests, CI config, or MCP manifest is available, so the ability of dembrandt-mcp to complete init and tool-list handshake cannot be verified. The README documents many extraction tools, exit codes, and multi-page crawling, indicating planned error handling, but those claims are untrusted evidence. Dependencies (Playwright/browser) are described as controllable, yet no reproducible tests or CI evidence exists, so the score is lowered by uncertainty to 7.
- Security and permissions 13/20
- No red-line issues: install examples use placeholder API keys, no real secrets; no destructive/payment/remote-command defaults. Data flow is disclosed: extraction hits the target site, snapshot upload only occurs with --key, and DEMBRANDT_API_URL overrides the endpoint; stealth/anti-detection is opt-in and flagged as requiring authorization. Deductions: without source, least-privilege/confirmation behavior and handling of cookies/browser sessions cannot be verified; authenticated data could leak if the tool is misused, though there is no evidence of covert collection. Score: 13.
- Maintenance 14/20
- The repo is not archived, has an MIT license, and the README references a versioned release (v0.26.1) and an official GitHub Action; the feature surface appears actively evolved. However, supplied material lacks commit history, release cadence, dependency update policy, issue response, or security-response channel; star count is only a discovery signal and adds no points. Sustained maintenance cannot be fully confirmed, so 14.
- Documentation 18/20
- Documentation is layered and comprehensive: install, MCP client examples (Claude Code one-liner and .mcp.json), CLI flag compatibility tables, DTCG/DESIGN.md/WCAG, CI drift gate, exit codes, browser-mismatch troubleshooting, limitations, and intended use are all covered. Deductions: no MCP manifest, no tool-by-tool parameter reference, and no MCP-specific init troubleshooting evidence, so 18 rather than 20.
- Setup experience 14/20
- Setup path is concrete: Node.js 18+, npm global/npx, Claude Code claude mcp add one-liner and .mcp.json snippet, on-demand browser install matched to playwright-core, and Linux/CI system-library command. Static calibration caps setup at 15 because no CI/test artifacts prove the flow executes; the browser prerequisite remains an extra manual step, so 14.