- Reliability 6/20
- The manifest declares a coherent PyPI package, runtime arguments, and stdio transport, and the README describes conversion/generation tools and launch commands. However, no source code, CI workflows, or committed tests were supplied, so the MCP init/tool-list handshake and actual tool behavior cannot be verified. Also, the default conversion mode is remote while the required service URL is not marked required in the manifest, making a zero-config startup likely to fail. Score is lowered for missing execution evidence and error-path coverage.
- Security and permissions 10/20
- No malware, credential theft, destructive defaults, or real tokens/secrets appear in the supplied material; the API key is explicitly flagged as secret and provided via environment variables. Remote mode and external network use are disclosed in the README. However, only the manifest and README were reviewed, not the source code, so least-privilege implementation, data-flow boundaries, and confirmation of network operations cannot be confirmed. No red-line issue was triggered.
- Maintenance 10/20
- The repository is not archived, is MIT licensed, and the README shows a compatibility matrix and migration guide, indicating ongoing maintenance and versioning. But the supplied evidence lacks commit history, issue response metrics, dependency update policy, and a security-response channel. Stars and badges are discovery signals only and do not add points, so the score reflects missing governance evidence.
- Documentation 12/20
- The README is well structured with install modes, environment variable tables, client config JSON examples, and usage prompts. It lacks a troubleshooting section, explicit limits/cost disclosure, and a complete tool parameter reference. There is also an inconsistency: remote is the default mode and needs a service URL, but the manifest marks that variable as optional. These gaps and contradictions prevent a higher score.
- Setup experience 12/20
- Setup is presented as a short pip/uvx command with several ready-to-paste client configs, and remote, local, and hybrid modes are explained clearly. It remains a manual setup: remote mode requires an external Docling Serve instance, the default remote mode fails without a service URL, and no CI or committed test evidence verifies the steps. Under the static calibration cap, a mid-range score is appropriate.