MCP.Market

Umami MCP server

by Asif2BD·io.github.Asif2BD/umami-mcp·v0.1.3·1 stars
No reviews yet

Query Umami Analytics v3 — stats, funnels, retention, attribution, UTM. Read-only by default.

B83/100grade B
Write a reviewInstall
What users say
No reviews yet
Be the first
Safety scan
B83/100

full report

Adoption
Growing

1 stars64 downloads/wk

Reviews

Write one

Nobody has reviewed Umami yet.

If you have run it, two minutes of your experience saves the next person an afternoon.

Umami tools

No tool declarations could be read from the package source. They show once the server is installed.

Public scan report

scanner v0.1.10 · 2026-10-31 · same rubric, same numbers if you re-run it

no findings
  • Code scan37 source files scanned25/25
  • –Live reliabilityno gateway calls yet and no remote to proben/a
  • –Tool poisoningtools not inspected (local package is not executed); not countedn/a
  • Auth qualitystatic API keys via environment variables6/15
  • Maintenancelast push 5 days ago15/15
  • Maintainer identityregistry namespace matches repository owner; GitHub account older than a year8/10
Overall 83/100. Components that don't apply are left out of the denominator. Any critical finding is an F.RubricAppeal a findingJSON

How Umami compares

Against every graded MCP server, from our own scans and uptime checks. Updated after each scan run.

Safety score
83/100
higher than 65% of 48,255 servers
GitHub stars
1
more than 65% of 28,688 servers
Downloads a week
64
more than 51% of 12,191 servers with a package

Install Umami in Claude Code, Cursor or VS Code

Runs npx -y @asif2bd/umami-mcp on your machine. Read the scan report first; the gateway never runs local packages.

claude mcp add umami-mcp -- npx -y @asif2bd/umami-mcp
Add to Cursor

What the publisher says

From the Umami repository's README, as published. We do not edit it. Read it on GitHub

Umami MCP Server

A Model Context Protocol server for Umami Analytics. Ask Claude, Cursor or any MCP client about your traffic — and let it create and manage websites — while your credentials stay on your own machine.

"Which pages drove the most visitors last month, and where did that traffic come from?"
"Build a funnel from /pricing to /signup to /welcome for the last 30 days."
"Add analytics for my new site blog.example.com and give me the tracking snippet."

<!-- Absolute URL so the image also renders on npmjs.com, which does not resolve repository-relative paths. -->

A throwaway site with generated traffic, on a live Umami 3.3.1 instance, read by a view-only service account — so the counts are small and mean nothing, but every one of them was really collected and really queried. Regenerate with vhs demo/demo.tape.

Why this exists

Umami has no official MCP server. Several community ones exist, and if you just want broad API coverage you should look at 0xtlt/umami-mcp first — it wraps more of the API than this does. Some of the older servers (jakeyShakey, mikusnuz, mittwald, Macawls) were written against the v2 API and break on a modern instance, because v3 renamed things without aliases:

This server exists for two things the others do not do:

1. Complete, verified v3 report coverage. All seven v3 report types — funnel, retention, journey, goal, revenue, attribution and UTM — were exercised against a live Umami 3.3.1 instance. The report envelope is easy to get wrong: dates go in parameters as ISO-8601 strings, not in filters, and not as the epoch milliseconds the rest of the API uses. Attribution takes first-click / last-click, not the camelCase spellings you would guess.

2. A capability model rather than a boolean. See below.

Security model

An analytics MCP server holds a credential that can read every visitor session you have ever recorded — and, if you let it, delete the lot. The design follows from that.

Your credentials never leave your environment. Configuration is read only from the process environment. There is no telemetry, no phone-home, and no hosted relay. The only host this server ever contacts is the UMAMI_URL you set. If you self-host it, nothing about your analytics ever reaches a third party — including the author of this software.

Shortened. The full README is on GitHub.

Nothing above is checked by us. What we check is on the safety report.

Umami: common questions

Is Umami MCP server safe?
Mostly: it is graded B (83/100). Read the Umami safety report
How do I install Umami?
It runs on your machine. Copy the Claude Code, Cursor, VS Code or Claude Desktop config from the install section.
Does Umami need an API key?
Yes. The registry entry asks for UMAMI_PASSWORD, UMAMI_API_KEY.
Is Umami maintained?
The last commit was 9 days ago (2026-10-26). The latest release is v0.1.3.
How does Umami compare with other MCP servers?
safety score 83/100 (higher than 65% of 48,255 servers); github stars 1 (more than 65% of 28,688 servers); downloads a week 64 (more than 51% of 12,191 servers with a package). Full comparison.