- Reliability 10/20
- The README shows a clear release history, 39 unit tests cited in 0.3.0, and multiple fixes for real startup failures, indicating the key paths have been maintained. However, this is a purely static review: no cached manifest was supplied and no CI workflow or committed test files are visible, so the MCP init and tool-list handshake cannot be verified as reproducible. Tool counts are internally inconsistent: the table lists 16 tools while text says 'all 20 tools', and the 0.1.0 changelog claims 19 tools, casting doubt on declared-vs-actual behavior. Pinning mcp<2.0 shows good dependency control. Under static calibration reliability is capped at 12; score 10.
- Security and permissions 10/20
- Real strengths: destructive operations add_site/delete_site/delete_sitemap are disabled by default and require explicit GSC_ALLOW_DESTRUCTIVE=true, matching least-privilege and explicit-confirmation principles; credentials are passed as local file paths via env vars for both OAuth and service accounts, with no hardcoded tokens or secrets visible. Deductions: all data tools return sensitive account-level Search Console performance data, yet disclosure of data flow and whether responses are logged is thin; the HTTP/SSE remote deployment example binds 0.0.0.0 with no authentication or access control described, expanding exposure; token storage is only vaguely described as a platform user config directory, so file permissions cannot be verified. No red-line trigger (no malware, no covert exfiltration, destructive ops not default), hence 10.
- Maintenance 13/20
- Strong signals: version sequence 0.1.0 to 0.3.3 spans multiple releases with specific changelog entries (fixing mcp 2.0 ModuleNotFoundError, OAuth isatty, sitemap TypeError, domain-property 404) and a concrete issue reference (#41), showing the author tracks dependencies and defects. MIT license is clear. 11 open issues and not archived. Deductions: no security-response channel or SECURITY policy, no documented governance or release process, contact only via GitHub issues, and the author concurrently promotes a commercial hosted version (advancedgsc.com), creating an interest overlap in the docs, though not disqualifying. Score 13.
- Documentation 16/20
- Coverage is unusually thorough: step-by-step credential setup for both OAuth and service accounts, two install methods (uvx and clone), multi-client config examples (Claude Desktop, Cursor, Codex CLI), a full environment variable table with defaults and required flags, a destructive-operation switch, remote/Docker deployment, a troubleshooting section (spawn uvx ENOENT, Python version, absolute paths, desktop-app-only limitation), and a changelog. Limitations are disclosed: Python 3.11+ with a note that GUI launches fail silently, plus client restrictions. Deductions: tool-count statements contradict each other (16-row table vs '20 tools' vs 19 tools), tool parameters only give coarse 'what you need to provide' without types or ranges (only row_limit's 500 is noted), quota/cost has no dedicated section, and heavy promotional content for the hosted product and videos dilutes technical material. Score 16.
- Setup experience 14/20
- Install paths are clear and tiered: the recommended uvx route needs three steps to install uv plus a JSON/TOML snippet, with complete config blocks per mainstream client and instructions to resolve the absolute uvx path (which uvx / PowerShell), and the clone route documents venv and dependencies. Cross-platform notes (macOS/Linux/Windows) and common-error fixes are present. Deductions: users must still create a Google Cloud project, enable the Search Console API, configure the OAuth consent screen, and download key files, a multi-step burden for non-technical SEO users; requiring the full absolute uvx path is an easy mistake; first-run OAuth needs a browser, so headless environments fail. Nothing was executed, and setup is capped at 15 under static calibration; score 14.