MCP.Market

XPmetric MCP server

by xpmetric.com·com.xpmetric/mcp·v0.1.4

Ask your AI about your site's traffic, channels, revenue, goals and funnels (XPmetric analytics).

C58/100grade C
What users say
No reviews yet
Be the first
Safety scan
C58/100

full report

Adoption
New

200 downloads/wk

Reviews

Write one

Nobody has reviewed XPmetric yet.

If you have run it, two minutes of your experience saves the next person an afternoon.

XPmetric tools (24, 8 write)

write = sends, deletes, buys or posts

Read from the package source without running it. The installed server may list more.

  • create_chart_markerwrite action

    Create an annotation visible on dashboard charts. Required externalId is a stable experiment/deployment key unique within site: retries return the same original marker without changing it. Use update_chart_marker for corrections. date is UTC chart day; optional occurredAt records actual event time. Keep label public and URL free of queries, credentials and fragments.

  • create_funnelwrite action

    Create a funnel (2\u20138 steps: pageview {path, match?, hostname?, label?} or event {eventName, label?}). At most … funnels per site. … Duplicate names are allowed.

  • create_goalwrite action

    Create a goal for a custom event. eventName is immutable after creation and must match window.xpmetric('eventName') exactly (case-sensitive). (siteId, eventName) is unique \u2014 a duplicate returns 409. At most … goals can be active per site. A goal for an event that never fires sits at 0 completions indefinitely and reads as broken \u2014 add the track call first (get_tracking_snippet) unless di

  • delete_funnelwrite action

    Delete a funnel by id from list_funnels. ClickHouse events are kept.

  • delete_goalwrite action

    Delete a goal by id. Custom events already stored are kept. Takes siteId and goalId from list_goals.

  • discover_goal_candidates

    Intended first call when a user asks what to track. Returns custom events already firing on the site in the last 30 days that have no goal attached ({ eventName, count }). Read-only.

  • get_bot_traffic

    Read site-scoped server crawler hits by provider/category/path/status and period, including 404s. path supports * wildcards and must be a sanitized path without query strings. Agent labels are classifications, never verified identity from user agent alone. UTC server hit timestamps; unavailable returns an error, not zero traffic.

  • get_breakdown

    Ranked breakdown for one dimension: pages, sources, countries, regions, cities, devices, browsers, goals, etc. dim must be one of the schema enum values. … Source dimensions use session entry; visitors can overlap across source rows and must not be summed as a period total. viewsMetric labels views as sessions, pageviews, or events. Rows are sorted by primaryMetric from the response: views for pat

  • get_experiment_landings

    Export private XPmetric measured-landing evidence for a server milestone producer. Defaults to v1; opt into v2 for a SHA-256 proof of the currently stored eligible measured population at the requested cutoff. The proof does not establish total browser delivery or an ingestion watermark. Owned cookie-tracked site only. Returns each browser's exact first eligible measured landing since experiment la

  • get_funnel_data

    Step counts, conversionRate, totalEntered, setupSuspect, and identityWindowExceeded for a funnel id. period is today | yesterday | 7d | 30d | all | custom (also now, 24h, 12m, wtd, mtd, ytd); custom requires start and end as YYYY-MM-DD. … Acquisition filters select entry-session cohorts; downstream events need no UTMs. Read-only.

  • get_growth_evidence

    Read/export separate search metrics, crawl/index observations, fixed prompt observations and Bing AI citation totals. Filters provider, inclusive measured date, canonical page and experiment. Includes collection method, coverage, lag, source and retrieval time; unavailable/stale never means zero. Google Web includes Google AI surfaces; citation visibility is not traffic. Never sum different export

  • get_growth_experiment

    Read an owned experiment plus separate leading evidence, human arrivals, server-confirmed activation and mature paid outcomes. Reviews require full 30/60/90 day sampling plus outcome maturation. Unknown/partial/zero activation yields null cost per activation; no causal claim. Same-browser consented attribution only. Revenue uses existing PaymentEvent billing windows and net refunds, separate curre

  • get_stats

    Period totals for a site: pageviews, visitors, bounce rate, avg session time, optional revenue, optional compare window. … Revenue is absent (not zero) when no payment provider is connected. compare is previous | yoy | custom; custom needs compareStart and compareEnd (YYYY-MM-DD). Read-only.

  • get_timeseries

    Bucketed traffic series (visitors, pageviews, bounce, session time per bucket). … granularity is hourly | daily | weekly | monthly (coerced to what the period allows). On cookieless sites newVisitors and returningVisitors are null \u2014 the API notes field says: "…" Read-only.

  • get_tracking_snippet

    Return the exact client snippet for a custom event. The MCP server never writes files \u2014 paste this with your editor tools after the action succeeds (signup, checkout, CTA). Requires p.js on the page. eventName must match the goal exactly (case-sensitive).

  • list_chart_markers

    List chart annotations visible in the dashboard. Filter by period or stable external experiment id. date is UTC chart day; occurredAt is optional exact event time (null means unavailable); source distinguishes API/dashboard creation.

  • list_funnels

    List funnels for a site. Funnels have no natural key and allow duplicate names, so this is a required first call before update or delete \u2014 those take a funnel id. Read-only.

  • list_goals

    List goals for a site with completion counts and cvr for the chosen period. period is today | yesterday | 7d | 30d | all | custom (also now, 24h, 12m, wtd, mtd, ytd). custom requires start and end as YYYY-MM-DD. On cookieless sites a multi-day cvr is a conservative floor because visitor identity rotates every UTC day. … Acquisition filters select entry-session cohorts; downstream events need no UT

  • list_growth_experiments

    List owned acquisition experiments and persisted cohort/report definitions. Filter stable externalId. Server milestone integration is pending until the application supplies confirmed account/task milestones; browser goals cannot establish activation.

  • list_sites

    List every site on the authenticated account (id, name, domain, trackingMode). trackingMode is cookieless (default, visitor identity rotates every UTC day) or cookie. Read-only.

  • update_chart_markerwrite action

    Update an existing chart marker id from list_chart_markers. Stable externalId and creation source are preserved. URLs must be public HTTP paths without query strings/credentials/fragments.

  • update_funnelwrite action

    Update a funnel by id from list_funnels. … Changing steps recomputes from existing events; history is not deleted.

  • update_goalwrite action

    Update a goal's name, emoji, or isActive. eventName cannot be changed. At most … goals can be active per site. Read-modify via list_goals first.

  • upsert_growth_experiment

    Save a public experiment definition with stable site-scoped externalId. Retries preserve id. Tie annotationId to an owned existing chart marker. Record public hypothesis, primary/guardrails, URLs/cohort, rollout/control, launch/change, windows, spend/time, evidence/decision/rollback and ACO roadmap/task references only. Do not include private task/user text or credentials.

Public scan report

scanner v0.1.10 · 2026-10-24 · same rubric, same numbers if you re-run it

1 low
  • Code scan2 source files scanned25/25
  • –Live reliabilityno gateway calls yet and no remote to proben/a
  • –Tool poisoningtools not inspected (local package is not executed); not countedn/a
  • Auth qualitystatic API keys via environment variables6/15
  • Maintenanceno repository listed3/15
  • Maintainer identityverified namespace with website, no repo4/10

Findings (1)

  • lowNo source repository listedmaint.no-repo
Overall 58/100. Components that don't apply are left out of the denominator. Any critical finding is an F.RubricAppeal a findingJSON

How XPmetric compares

Against every graded MCP server, from our own scans and uptime checks. Updated after each scan run.

Safety score
58/100
higher than 13% of 48,255 servers
Tools
24
the typical server has 7
Tools that change things
33%
typical: 0%. Fewer write tools means less an agent can break
Downloads a week
200
more than 75% of 12,191 servers with a package

What its tools let an agent do: 16 read · 3 create · 3 change · 2 delete

Install XPmetric in Claude Code, Cursor or VS Code

Runs npx -y @xpmetric/mcp on your machine. Read the scan report first; the gateway never runs local packages.

claude mcp add mcp -- npx -y @xpmetric/mcp
Add to Cursor

XPmetric: common questions

Is XPmetric MCP server safe?
With care: it is graded C, so read the findings first (58/100). Read the XPmetric safety report
How do I install XPmetric?
It runs on your machine. Copy the Claude Code, Cursor, VS Code or Claude Desktop config from the install section.
Does XPmetric need an API key?
Yes. The registry entry asks for XPMETRIC_API_KEY.
Is XPmetric maintained?
The latest release is v0.1.4.
How does XPmetric compare with other MCP servers?
safety score 58/100 (higher than 13% of 48,255 servers); tools 24 (the typical server has 7); tools that change things 33% (typical: 0%. Fewer write tools means less an agent can break). Full comparison.