{"id":"macawls-umami-mcp-server","name":"umami-mcp-server","homepage":"https://umami-mcp.macawls.dev","repo_url":"https://github.com/Macawls/umami-mcp-server","category":"analytics","subcategories":[],"tags":["mcp","umami","analytics","claude","cursor","developer-tools","data-access","stdio","http"],"what_it_does":"Provides an MCP server that exposes Umami Analytics data (websites, stats, pageviews, metrics, and active visitors) as MCP tools for MCP clients like Claude Desktop, VS Code/Copilot, Cursor, and others. Supports local stdio transport or an HTTP Streamable endpoint (/mcp) with session handling.","use_cases":["Generate analytics reports for a website over a date range","Answer traffic questions (top pages, visit patterns)","Break down user metrics by country/city, browser, device","Monitor active visitors and near-real-time traffic","Inspect page traffic over time and investigate traffic drops"],"not_for":["Enterprise-grade compliance/security auditing without additional hardening and verification","Use cases requiring OAuth/OIDC identity federation","Environments needing documented rate-limit guarantees or pagination semantics"],"best_when":"You want to query Umami Analytics from an MCP-capable assistant tool, either locally (stdio) or via an HTTP deployment for remote clients.","avoid_when":"You cannot securely manage UMAMI credentials (env vars/headers/query-string fallback) or require strict, documented API-level throttling and error contract details.","alternatives":["Build a custom MCP server/client wrapper around the Umami API","Use Umami’s own UI and export/reporting features directly","Use a BI tool connected to Umami data (if available in your Umami setup)"],"af_score":55.8,"security_score":48.2,"reliability_score":27.5,"package_type":"mcp_server","discovery_source":["github"],"priority":"high","status":"evaluated","version_evaluated":null,"last_evaluated":"2026-03-30T15:39:30.856737+00:00","interface":{"has_rest_api":true,"has_graphql":false,"has_grpc":false,"has_mcp_server":true,"mcp_server_url":"https://umami-mcp.macawls.dev/mcp","has_sdk":false,"sdk_languages":[],"openapi_spec_url":null,"webhooks":false},"auth":{"methods":["HTTP headers on MCP initialize (X-Umami-Host, X-Umami-Username, X-Umami-Password)","Environment variables for local stdio mode (UMAMI_URL, UMAMI_USERNAME, UMAMI_PASSWORD)","Query parameters fallback for clients that cannot send headers (deprecated)"],"oauth":false,"scopes":false,"notes":"Authentication is based on Umami host/username/password provided to the MCP server. For the hosted HTTP usage, the README indicates credentials are passed via headers on initialize; for Claude Desktop, it falls back to query parameters, which is weaker from a logging/URL-leak perspective."},"pricing":{"model":null,"free_tier_exists":false,"free_tier_limits":null,"paid_tiers":[],"requires_credit_card":false,"estimated_workload_costs":null,"notes":"No pricing details are provided; availability of a hosted instance is mentioned."},"requirements":{"requires_signup":false,"requires_credit_card":false,"domain_verification":false,"data_residency":[],"compliance":[],"min_contract":null},"agent_readiness":{"af_score":55.8,"security_score":48.2,"reliability_score":27.5,"mcp_server_quality":78.0,"documentation_accuracy":72.0,"error_message_quality":0.0,"error_message_notes":null,"auth_complexity":55.0,"rate_limit_clarity":20.0,"tls_enforcement":80.0,"auth_strength":50.0,"scope_granularity":20.0,"dependency_hygiene":45.0,"secret_handling":45.0,"security_notes":"Strengths: HTTPS is used for the hosted MCP URL in documentation, and HTTP-mode credentials are intended to be sent in headers on initialize. Weaknesses: query-parameter credential fallback is explicitly used for Claude Desktop (deprecated), which can leak secrets via logs/history/referrers. No evidence of fine-grained scopes, token-based auth, or secret redaction practices is provided in the README. Rate limiting and detailed security headers/CORS defaults are not described beyond ALLOWED_ORIGINS default '*'.","uptime_documented":0.0,"version_stability":45.0,"breaking_changes_history":40.0,"error_recovery":25.0,"idempotency_support":"false","idempotency_notes":"Read-only analytics queries are likely non-mutating, but the README does not explicitly describe idempotency guarantees for tool calls.","pagination_style":"none","retry_guidance_documented":false,"known_agent_gotchas":["Claude Desktop may force credentials into query parameters because custom headers are not supported (deprecated approach noted).","Remote HTTP usage requires MCP initialize credentials; mismatched/invalid Umami credentials will prevent tool availability.","If the binary path is not absolute or the transport mode/env vars are misconfigured, tools may not show up."]}}