- Reliability 9/20
- Static review from the supplied README only: it references CI check-run badges and requires enabling the Admin/Data APIs, implying some automation; however no committed tests, no cached manifest, no tool parameter schemas, and no error-handling description are provided, so whether declared tools match real behavior is unverifiable. The README also labels the server 'Experimental'. Under the static calibration rule (no execution evidence, reliability capped at 12), and treating missing manifest/test evidence as a deduction, the score is 9.
- Security and permissions 13/20
- Credential handling is reasonable: Application Default Credentials injected via the GOOGLE_APPLICATION_CREDENTIALS env var (no real tokens in the examples), with an explicit requirement for the read-only https://www.googleapis.com/auth/analytics.readonly scope, which is aligned with least privilege. All listed tools are read-oriented (account summaries, property details, reports, Google Ads links), with no destructive, write, pay, deploy, or remote-command defaults. Deductions: the sample gcloud commands also request the broad cloud-platform scope; no data-flow, logging, or env-var leakage disclosure; no mention of confirmation or network-boundary details. No red-line condition is triggered, hence 13.
- Maintenance 13/20
- Apache-2.0 license is present, the repo is not archived, 3229 stars and 25 open issues indicate real usage and a feedback channel (Discord, contributing guide, YouTube tutorials), and PyPI publication shows versioned artifacts. Deductions: the README alone cannot verify commit cadence, release discipline, dependency update policy, or a security-response process; ownership/governance details are absent. Score 13.
- Documentation 13/20
- Reasonably layered docs: install steps covering Python/pipx, enabling Google Cloud APIs, ADC credential setup with gcloud examples, and client configuration samples for Gemini CLI and Claude Code, plus runnable sample prompts and a YouTube walkthrough. Deductions: no per-tool parameter documentation, quota/cost limits, error codes, or troubleshooting section, and with no cached manifest the tool signatures cannot be cross-checked against the docs. Score 13.
- Setup experience 14/20
- The install path is clear and short: run analytics-mcp via pipx, pass two environment variables, and it plugs into mainstream clients (Gemini CLI, Gemini Code Assist, Claude Code) with copy-pasteable snippets. Deductions: it depends on a Google Cloud project, API enablement, and ADC/OAuth client configuration, which are error-prone manual prerequisites, with no version pinning or alternative path without gcloud. Under the static calibration cap (setup cannot exceed 15 without CI plus committed tests), the score is 14.