- Reliability 7/20
- Only the README text is available — no manifest, source code, or tool-implementation files were provided, so the claimed '98 tools' cannot be checked against actual behavior, and the MCP init/tool-list handshake cannot be confirmed as reproducible. The README shows a 'Run Tests' badge, but no actual CI workflow file or committed test content was supplied, which falls short of the static-calibration bar requiring verifiable execution evidence. Reliability is therefore capped low, at 7, reflecting the uncertainty penalty for missing evidence.
- Security and permissions 9/20
- The README only broadly states 'never share API tokens' and 'keep .env files secure,' without describing scope/least-privilege controls (e.g., read-only mode, per-project/space restriction), without mentioning confirmation or safeguards for destructive operations (write/status-change tools such as jira_update_issue, jira_transition_issue, confluence_update_page), and without disclosing data-flow or external network boundaries in detail. No real tokens or secrets appear in the examples (placeholders like your_api_token are used), so this is not a red-line violation, but the unaddressed risk areas warrant a clear deduction, hence 9.
- Maintenance 14/20
- The repo shows PyPI version/download badges, an automated test-workflow badge, a dedicated documentation site, 5742 stars and 185 open issues, indicating meaningful adoption and attention; the MIT license is explicit and the project is not archived. However, no direct evidence of commit history, release cadence, or dependency-update frequency was provided in this review — judgment relies on indirect signals (badges/description), so it falls short of full marks, scoring 14.
- Documentation 14/20
- Documentation is well-layered: installation (uvx/Docker/pip/source), authentication (API token/PAT/OAuth 2.0), configuration, HTTP transport, tools reference, and troubleshooting each have dedicated linked pages, plus llms.txt/llms-full.txt for LLM consumption — showing strong documentation intent. However, the actual content lives on an external site not included in this review, so the depth of parameter-level detail and disclosed limitations could not be directly verified, only inferred from the table of contents, hence 14 rather than full marks.
- Setup experience 12/20
- A clear JSON config example and a one-line uvx command are provided, with a concise flow (get API token → configure IDE → use). Per the static-calibration rule, setup cannot score above 15 without verifiable execution evidence (real CI plus committed tests covering key paths); no evidence confirms the install actually succeeds, cross-platform compatibility, or diagnosable failure behavior, and the process still requires manual editing of client config files, making it a manual/fragile setup — scoring 12.