- Reliability 7/20
- This review is based solely on the README; no server manifest, source code, or test files were provided, so the actual implementation of the 22 tools cannot be verified against the documentation, and there is no verifiable CI or unit-test evidence. The README's 'search_web vs search_web_deep' comparison table includes real sample outputs, suggesting some behaviors are reproducible, but this is self-reported documentation rather than independently verifiable execution evidence. Per the static calibration rule, reliability is capped at 12 absent CI/test evidence, and since almost all evidence here is unverified self-description, a low score is warranted.
- Security and permissions 13/20
- Authentication uses a Bearer API key, and many tools remain usable without one (subject to rate limits); no obvious credential leakage or hard-coded real secrets were found (install examples use placeholders like `${JINA_API_KEY}` or `jina_YOUR_API_KEY_HERE`). However, this is a fully remote, third-party-hosted service (mcp.jina.ai); tools like read_url/capture_screenshot_url send arbitrary user-specified URL content to Jina's servers for processing, and the README discloses no data retention, logging, or privacy policy, nor any additional confirmation or domain restriction for potentially risky operations (arbitrary URL fetching). No red-line issues were found (no malware, no irreversible destructive defaults), but disclosure of data boundaries and least-privilege scoping is incomplete, so a full score is not warranted.
- Maintenance 12/20
- The repository is Apache-2.0 licensed, maintained under the official Jina AI organization, not archived, and shows 810 stars with 19 open issues, indicating some activity and user base. However, the provided material contains no direct evidence of commit history, release notes, changelog, or a security response channel, so version governance and dependency update cadence cannot be confirmed. A middling score reflects 'active but with incomplete governance information.'
- Documentation 18/20
- The README is high quality: it includes a full tool list with API-key requirements, concrete configuration examples for multiple clients (Cursor, LM Studio, Claude Code, Codex, mcp-remote), detailed documentation of tool-filtering query parameters and tags, and an extensive troubleshooting/FAQ section covering context-window overflow, client-side caching, a Windows escaping bug, the truncation mechanism, and differences in parallel-tool behavior across models. It even provides live comparative sample data for search modes. The documentation is well-layered with sufficient examples and proactively discloses known limitations (e.g., the truncation guardrail, cl100k vs. client tokenizer mismatch), warranting a high score; it stops short of full marks due to the absence of governance-type docs like a changelog or contribution guide.
- Setup experience 14/20
- As a remotely hosted MCP server, most modern clients need only a URL and Authorization header to connect, which is simple; for clients lacking remote MCP support, an mcp-remote proxy path is provided with concrete config snippets for multiple platforms (Cursor, Claude Code, Codex, LM Studio). The README also documents known platform-specific issues (e.g., a Windows escaping bug in Cursor/Claude Desktop) and their workarounds, indicating a polished setup path. Since the static review rules cap setup at 15 absent verifiable execution evidence, the score is set within that ceiling despite the clear, low-step setup process shown in the docs.