- Reliability 4/20
- No manifest is cached, and the README provides no MCP tool list, no initialization/handshake description, and no test or CI evidence specific to the MCP server. The repository is PostHog's large monolithic codebase; 'server path: repository root' does not pinpoint the MCP server's actual location, so there is no way to verify a clean start or that declared tools match real behavior. Per the static calibration rule, reliability is capped at 12 without verifiable execution evidence (real CI workflows plus tests covering key paths), and here that evidence is essentially absent, so it is scored 4.
- Security and permissions 8/20
- The README contains no discussion of credential handling, permission scoping, confirmation for dangerous operations, or data boundaries, and the missing manifest means the MCP's access scope to PostHog cloud accounts/API keys cannot be verified. No red-line issue (malware, hardcoded secrets, unconfirmed destructive defaults) is evident, but absent evidence must be treated as a deduction rather than assumed best-case least-privilege design, so it is scored 8.
- Maintenance 17/20
- PostHog is a highly active open-source project with 37,510 stars and 5,612 open issues; the README shows commit-activity badges, closed-issue counts, clear contribution guidelines, a roadmap link, and an explicit MIT license (except the ee directory, which links its own license), plus a separate FOSS-only repository. Governance and update paths are clear, though the repo metadata's NOASSERTION license field is a minor inconsistency with the README's MIT claim, so it is not given full marks and scored 17.
- Documentation 7/20
- The README is largely product marketing, listing feature areas and links to an external docs site, but it contains no installation steps, authentication method, tool parameters, rate limits, or troubleshooting guidance specific to the MCP server itself — only a single 'connect the MCP' pointer to an external page. This is insufficient on-page evidence for a user to configure and debug the MCP independently, so it is scored 7.
- Setup experience 5/20
- The README only offers a one-line Docker hobby self-host command for the entire PostHog platform, with no MCP-specific installation steps or client configuration examples (e.g., Claude Desktop/Cursor config snippets). Per the static calibration rule, setup cannot exceed 15 without real CI and test evidence, and here there isn't even an MCP-specific setup path, so evidence is severely lacking and it is scored 5.