- Reliability 5/20
- The manifest and README do not verify that the server starts, completes the MCP initialization and tool-list handshake, or implements the declared behavior. No committed tests or CI evidence for the MCP key paths is provided. The README makes a plausible stdio installation path, but tool behavior, dependency control, error handling, and edge cases are unverified, so the score is heavily reduced.
- Security and permissions 8/20
- Local storage, optional local models, and privacy filters are positive evidence. However, the README also discloses default PostHog/Sentry telemetry, optional cloud transcription and sync, a raw SQL API, and pipes that can call APIs, write files, and take actions. There is no source evidence of tool-level authorization, authentication, dangerous-operation confirmation, or complete data-flow controls. No explicit evidence meets a red-line condition.
- Maintenance 11/20
- The repository is not archived and provides version 0.19.0, maintainer information, and contribution guidance, indicating ongoing activity. However, no commit history, release cadence, dependency-update evidence, vulnerability-response channel, or demonstrated issue response is supplied. The license metadata is NOASSERTION while the README claims a commercial license, creating governance and license-audit gaps.
- Documentation 14/20
- The README covers installation, client examples, platforms, resource usage, privacy, telemetry, cloud processing, configuration, and several limitations, making it relatively usable. Deductions apply because the README is untrusted evidence and does not provide MCP tool names, parameter schemas, return formats, error codes, compatibility guarantees, or systematic troubleshooting. Its license statement also conflicts with the supplied metadata.
- Setup experience 12/20
- A short npx installation path, a Claude MCP configuration example, stdio transport, and desktop/CLI options are documented for mainstream use. The score is limited because prerequisites, background-service requirements, platform differences, version pinning, startup diagnostics, and configuration for other clients are not verified from source files, and the connection was not executed.