- Reliability 9/20
- Static review only: no server manifest cached, so the MCP init handshake, tool listing, and declared-vs-actual tool behavior cannot be verified. The README describes plausible happy paths (constraint checking, functional testing, LLM evaluation, report generation) and flags LLM evaluation as experimental requiring manual inspection, but there is no evidence of committed tests or CI covering key paths, so with the static cap of 12 this scores 9. The --test flag actually invokes server tools, and error handling/diagnostics detail is undisclosed, a further deduction.
- Security and permissions 8/20
- No red-line findings: no malware, credential theft, covert exfiltration, or fabricated maintainer/test results, so the 0-4 floor does not apply. The README explicitly warns that mcp-interviewer executes the supplied MCP server command in a child process, recommends Docker isolation, and notes the MCP Python SDK runs arbitrary commands and that server tool metadata may be malicious or misleading. However, default behavior still executes user-supplied commands with no enforced confirmation or sandbox, and --test triggers real tool side effects; API-key-style config (base_url/api_key) is shown without leakage. Permission boundaries and confirmation are incomplete, hence 8.
- Maintenance 10/20
- Official Microsoft repository, MIT license, not archived, 155 stars, 17 open issues, and a published PyPI package indicate some activity and clear ownership. But no visible release cadence, commit history, issue response time, dependency-update policy, or explicit security-response channel (only references to CONTRIBUTING.md and TRANSPARENCY.md whose contents were not provided). Governance and versioning gaps remain, hence 10.
- Documentation 14/20
- Layered documentation: table of contents, how-it-works sections (constraint checking/functional testing/LLM evaluation/report generation), constraint and report code tables, installation, quick start, CLI and Python usage, Bring Your Own Models, Limitations, and Trademarks, plus a sample report and blog link. Limitations and experimental status are disclosed (manual review of LLM output, container isolation, possibly malicious metadata). Deductions for missing concrete tool-parameter detail, cost guidance, and a troubleshooting section, and the absent server manifest prevents cross-verifying documented behavior, hence 14.
- Setup experience 11/20
- Install path is clear: pip install mcp-interviewer or uv add, with both CLI and Python integration examples, and flexible LLM config via an OpenAI-compatible client with --client-kwargs/--client. Yet a complete working run requires containerizing the target server via Docker, and the quick start/examples all require constructing container commands first, making it multi-step and manual; no config-file examples for mainstream MCP clients (e.g., Claude Desktop). No CI or test files provide verifiable execution evidence, so under the static cap of 15 this scores 11.