Docs.

Quickstart

Three steps. Five minutes if your hosting is fast.

What is MCP?

MCP (Model Context Protocol) is the open spec Anthropic introduced for letting AI assistants talk to external services. Think USB for LLMs: one cable, every tool. Claude, Cursor, ChatGPT, and Windsurf all speak it.

mcp-analytics is an MCP server. We expose your web analytics as tools that your AI assistant can call. Instead of opening a dashboard, you ask a question in chat and the assistant fetches the answer over JSON-RPC. No UI between you and your data. No tab to keep open. No "Configure" menu to hunt through.

Installation

The signup itself is the hardest part, and it's still pretty easy. Once your MCP URL is in your client, you stop doing things and your agent takes over.

Tell Claude (or whoever): "Add mcp-analytics to this project." That single sentence is the whole install. Claude will:

• Call add_site with your domain to get a site_id
• Call get_tracking_snippet to get the exact <script> tag
• Find the right place in your codebase (layout file, base template, root component)
• Drop the snippet in, commit it, push it

Total work for you: typing one sentence and clicking "approve" on the diff. After deploy, the first pageview lands in our database within seconds.

For every new project after that: same one-liner. "Add mcp-analytics." No new account, no new URL, no new dashboard. Claude already has your connector, knows the snippet, knows your repo conventions. Three minutes for Claude. Zero minutes for you. Custom events take another "track signups, purchases, and video plays as events" sentence.

Privacy modes

Pick a privacy posture per site. Cannot be changed after creation, historical data integrity matters.

	strict (recommended)	balanced	all
Cookies	none	none	1st-party persistent
visitor_id	always 0	daily-rotating hash (IP + UA + site salt)	persistent UUID
Session salt	rotates every day	fixed per site	fixed per site
Same-day visitor dedup	no	yes	yes
Cross-day visitor tracking	no	no	yes
LTV / cohort analysis	no	no	yes
Referrer path stored	no	yes	yes
DNT respected	yes	yes	no (opt-in)
Cookie banner needed	no	no	yes (your call)

Strict is the right call for almost every public-facing site: aggregate answers, no banner, sleep at night. You lose "how many unique people came today" as a number, but session counts plus the rich client signals (timezone, viewport, engagement) usually answer the same question better.

Balanced trades a tiny bit of identifiability (a daily-rotating hash of IP + UA, gone at midnight) for proper same-day visitor counts and full referrer paths. Still no cookies, still no banner, still wipes itself daily. Pick this if you genuinely need "X unique visitors today" as a metric.

All is for when you've already decided your business needs cross-session attribution, LTV cohorts, repeat-visit analysis. Persistent cookies, consent banner becomes your responsibility. Typical for SaaS dashboards behind a login.

Asking questions

Once installed, you ask Claude (or your client of choice) anything you'd normally hunt through a dashboard for. Plain English. No tool names. No SQL. No Configure menus.

That last bit is the actual unlock. Claude doesn't just read your analytics. Once it knows what's wrong, it can edit your code, run your tests, commit, push. Analytics-to-ship loop on autopilot. You stay in chat. You approve or reject. The diff lands. The next pageview tells you if it worked.

You don't have to use it that way. Asking questions and getting answers is fine on its own. But if you're already living in Claude, your analytics are now part of the same loop as everything else you ship.

The tools

What your agent can call once your MCP URL is wired in.

Custom events

Pageviews are auto-tracked. Anything else you want, call mcpa('track', ...) in your code:

// somewhere in your app
window.mcpa('track', 'signup', { plan: 'pro' });
window.mcpa('track', 'video_played', { duration_seconds: 42 });

Up to 20 properties per event. Strings, numbers, booleans only. Then ask Claude: "How many signups last week, broken down by plan?" and it'll call event_details with group_by_property: "plan".

Self-exclude (for builders)

Don't poison your own analytics with your own visits. Once on each browser/device:

https://your-site.com/?mcpa_exclude=1

The tracker stores a flag in localStorage and stops sending events from that browser. Undo with ?mcpa_exclude=0. Survives navigation, not browser-data clears.

FAQ

Why no dashboard?

Because dashboards are where data goes to die. You open it, scan the same five widgets, close it. mcp-analytics turns the workflow inside out: ask a question, get an answer. The agent does the chart-reading for you.

Will my agent figure this out without docs?

Yes. We expose get_started_guide as an MCP tool. Once your connector URL is wired in, your agent will call it automatically when it doesn't know what to do next. These human docs are just trust signal.

How does the free tier work?

Free up to 100,000 hits per month, unlimited sites. No card. After that we'll have paid tiers, but the free tier covers the vast majority of indie / side-project sites and we don't plan to take that away.

Can I export my raw data?

Yes. Completely. Every row, every column, every event you've sent us. No paywall, no API rate-limit, no "Enterprise tier" gate. Free users and paid users get the same export. You can leave whenever you want and take everything with you.

We don't lock you in. You'll stay because the product is good, not because leaving is painful.

What's the bot classification?

Every event is tagged user or bot based on the User-Agent. Default analytics queries hide bots. Use top_user_agents and traffic_class_breakdown to see which AI agents (ChatGPT-User, Claude-User, GPTBot, ...) fetched your content. More refined buckets are on the roadmap.

OAuth?

Coming. Right now you paste a token-bearing MCP URL into your client. We'll replace this with proper OAuth 2.1 + PKCE. Existing tokens stay valid after the switch.

Where is my data stored?

In Germany, EU jurisdiction, GDPR scope. Visitor IPs are hashed in-memory for the session identifier and then dropped, so they don't land in the analytics database. We never share or sell your data. See the privacy policy for the full data-controller breakdown and sub-processor list.