- Reliability 6/20
- The manifest only declares an npm package (@qwen-code/mobile-mcp) with stdio transport, and the version field is still the unresolved template placeholder {{VERSION}}, indicating this manifest has not passed through an actual release/validation process. There is no evidence in the provided material of any CI workflow, unit/integration tests, tool list, or init/handshake behavior specific to the mobile-mcp subpackage; the parent repository's general activity cannot substitute for reproducibility evidence of this specific server. Per the static calibration rule, without verifiable execution evidence reliability cannot exceed 12, and given the unresolved version placeholder and complete absence of a tool list or error-handling description, a low score is warranted.
- Security and permissions 7/20
- Mobile device automation (iOS/Android control, UI testing) typically involves ADB/simulator access, app install/uninstall, and screen manipulation with real-world side effects, yet the material contains no permission model, least-privilege description, confirmation mechanism for dangerous operations, or data-boundary disclosure. The server is described as a 'fork (with relative coordinate support)' with no stated maintainer identity or relationship to the upstream project, and no disclosure of network or credential usage. No red-line evidence (malware, credential theft, etc.) was found, but given the complete absence of permission/confirmation information for a tool with potentially high-impact device operations, only a mid-low score is justified.
- Maintenance 12/20
- The parent qwen-code repository has high star count (26,728), a large number of open issues (855), and a clear Apache-2.0 license, indicating the overall project is actively maintained with reasonably clear governance. However, mobile-mcp is a subpackage nested within this monorepo (packages/mobile-mcp), and no subpackage-specific release history, versioning cadence, or security-response channel evidence is present in the material — its maintenance activity can only partially borrow credibility from the parent repo and cannot be independently verified.
- Documentation 4/20
- The provided README is the generic top-level introduction to the qwen-code project and makes no mention anywhere of mobile-mcp or mobile automation capabilities; it contains no installation steps, tool parameters, authentication method, limitations, or troubleshooting content for this specific server. The manifest itself is extremely sparse, containing only the package identifier and transport type, with no usage examples. There is almost no correspondence between the documentation and this server's actual capabilities, warranting a very low score.
- Setup experience 5/20
- Beyond the npm package identifier and stdio transport type, the manifest provides no client configuration example (e.g., args, env, client config snippet), and the version field remains an unresolved placeholder, suggesting this configuration may not yet be finalized or validated for actual use. There is no indication that a mainstream MCP client (e.g., Claude Desktop) could connect using this configuration as-is. Per the static calibration rule, setup cannot exceed 15 without verifiable execution evidence, and given the near-total absence of installation information in the actual material, a very low score is warranted.