- Reliability 10/20
- The README enumerates 12 tools with their input schemas, and each tool's stated purpose matches its parameters with no internal contradictions. However, this is a purely static review with nothing executed, and the repository shows no visible CI workflows or committed test files, so it is impossible to verify that the server starts cleanly, completes the MCP initialization and tool-list handshake, or that declared tools match real behavior. Error handling and dependency version control (e.g., @line/bot-sdk and MCP SDK versions) are unsupported by evidence. Per the static calibration rule, reliability cannot exceed 12 without verifiable execution evidence, so it scores 10 — the happy path looks plausible but tests and edge-case coverage are thin.
- Security and permissions 11/20
- Credential handling is reasonably sound: CHANNEL_ACCESS_TOKEN and the optional DESTINATION_USER_ID are passed via environment variables, and the sample config uses a FILL_HERE placeholder with no real tokens or secrets, so no red line is crossed. The tool set (push/broadcast messages, profile and quota lookup, rich menu management) is commensurate with the normal capabilities of the LINE Messaging API. Deductions: delete_rich_menu and set/cancel default rich menu are side-effecting operations with no documented confirmation or approval step; broadcast reaches all followers with potentially wide blast radius and no stated guard; create_rich_menu generates and uploads an image and auto-sets it as default, a heavy side effect with no confirmation. Data flows and external network boundaries are also undisclosed. No red line triggered, so 11.
- Maintenance 13/20
- License is Apache-2.0, which is clear, and the repo is not archived; 775 stars with only 9 open issues suggests some community attention and issue triage. The project declares conformance to semantic versioning and ships a CONTRIBUTING.md, indicating basic governance. But a static review cannot observe commit cadence, release history, dependency update policy, or a security response channel. The README self-describes the project as a preview version that may lack complete functionality and comprehensive support, implying limited maturity. Ownership is reasonably clear given the LINE organization. Score 13 — activity and governance are adequate but version/update path evidence is thin.
- Documentation 14/20
- Coverage is broad: two install paths (npx and Docker), required and optional environment variables, per-tool purpose and input parameters with optionality marked, external links for creating a LINE Official Account and enabling the Messaging API, and a local MCP Inspector debugging walkthrough. Sample configs are complete and steps are clearly numbered. Deductions: no disclosure of API quota costs or billing impact (a get_message_quota tool exists but limits are unexplained), no troubleshooting section, no statement of what the preview version lacks, and no warning about the blast radius of high-impact operations like broadcast. Usable overall but with hidden assumptions and troubleshooting gaps, so 14.
- Setup experience 13/20
- The install path is clear: only Node.js v22+ is needed, and a single-line npx config connects to Claude Desktop or Cline with a complete mcpServers JSON example; a Docker path with build and run commands is also given, and both mainstream client config examples are present. Environment variable setup is explicit and links to official guides for obtaining the token and user ID. Deductions: steps require the user to independently create the LINE account and enable the Messaging API on the LINE side, platform compatibility is undocumented, the Docker path requires cloning and building locally (manual steps), and no committed tests or CI evidence validate that the configuration actually works. Per the static calibration rule, setup cannot exceed 15 without execution evidence, so 13.