Our Verification Methodology

Last Verified: September 2026

Every tool, MCP server, or CLI we cover on Quick Prompt Co. goes through the same four checks before it earns a spot in a guide. We don’t rank by star count alone — a popular repo can still be abandoned, and a small official one can be the safer pick.

1. Star count (context, not a verdict)

We record the current GitHub star count as a popularity signal, but stars only tell you what was true when people found the project — not whether it’s still maintained today.

2. Most recent commit / release

We check the actual commit history and release tags, not just the “updated” timestamp. A repo with a commit last week is treated differently from one whose last real change was over a year ago, even if both still show up in search results.

3. Issue handling

We look at whether open issues are actually being triaged and closed, or piling up unanswered. A growing backlog of unaddressed bug reports is a maintenance red flag even on an active-looking repo.

4. Does the practical claim still hold?

If a tool advertises something specific — “free,” “read-only by default,” “no API key required” — we verify that claim against the current version before repeating it in a guide.

Here’s what that looks like in practice, pulled directly from our own research notes:

$ checking obsidian-mcp (most-starred community server)
last commit >1 year ago — excluded
$ checking mem0 official mcp server
repository archived — excluded
$ checking modelcontextprotocol/server-postgres (Anthropic reference)
archived + known read-only bypass vulnerability — excluded
$ checking redis/mcp-redis (official)
active, vendor-maintained — included
$ checking supabase-community/supabase-mcp (official)
~2.6k stars, active development — included

When a popular project fails these checks, we say so in the guide instead of quietly leaving it out — that’s the point of publishing this page.

Recent exclusions: Obsidian MCP (most-starred fork, stale >1 year), Mem0’s official MCP server (archived, vendor moved to a plugin model), the archived Anthropic reference SQLite and Postgres servers (unmaintained, and the Postgres one has a documented read-only bypass), and Firecrawl MCP (excluded from our roundup pending primary-source confirmation of an unverified CVE claim found during research).

Guides also carry a “Last Verified” badge showing when we last re-checked the install commands and maintenance status against live sources. If a project’s status changes materially after publication, we update the guide rather than leave stale information live.