Index live · v1.7.0 · OCT 13 2026

Google Analytics (GA4)

Official

The official Google Analytics MCP server (from the googleanalytics GitHub org) exposes 9 read-only tools over the GA4 Data and Admin APIs: account summaries, property details, custom dimensions/metrics, Google Ads links, property annotations, and run_report / run_realtime_report / run_funnel_report / run_conversions_report. The read-only design is enforced in code — the credential is scoped to analytics.readonly only, so an agent cannot mutate your GA configuration. Runs locally as a stdio server (pipx run analytics-mcp) and authenticates via Google Application Default Credentials.

stdioPythonAPI Key Required
2.2Kstars
Official Google, read-only

Configuration

{
  "mcpServers": {
    "analytics-mcp": {
      "command": "pipx",
      "args": ["run", "analytics-mcp"],
      "env": {
        "GOOGLE_APPLICATION_CREDENTIALS": "PATH_TO_CREDENTIALS_JSON",
        "GOOGLE_PROJECT_ID": "YOUR_PROJECT_ID"
      }
    }
  }
}

Add this to your ~/.gemini/settings.json file. Copied verbatim from the upstream README.

AgenticSkills Audit

Automated framework checks. Deep code review tracked separately. Read the methodology →

4/7
4 of 7 automated checks passed
Audited Aug 7, 2026
SECURITY.md published
Mitigates: Coordinated disclosure pathNo SECURITY.md in repo root, .github/, or docs/
Commit in last 90 days
Mitigates: Maintainer abandonmentLast push 0 day(s) ago
≥2 active contributors
Mitigates: Bus-factor of one3 contributors with ≥2 commits
Evidence
CI pipeline configured
Mitigates: Code health regression
Evidence
Dependency lockfile committed
Mitigates: Dependency confusionNo lockfile committed
Software Bill of Materials (SBOM)
Mitigates: Audit trailNo SBOM file present
License declared
Mitigates: Legal ambiguityApache-2.0

Deep framework checks (OAuth 2.1 / PKCE implementation, input validation, sandboxing) require human source review and are tracked separately. This scorecard covers programmatically verifiable signals only.

Quick Stats

Trust LevelOfficial
Stars2,238
Transportstdio
API KeyRequired
LanguagePython
CategoryAnalytics & Monitoring

Tags

analyticsga4reportinggoogleread-only

Get new MCP servers in your inbox. What we added, what failed the security audit, and why. See a past issue.