← Back to search

mcp-google-analytics-oauth2

ifidea Scanned 6d ago

MCP server for Google Analytics Data API using OAuth2 authentication

npm
B
77.2 / 100

Versions

1.0.10latest
Feb 9, 2026
1.0.9
Jan 21, 2026
1.0.8
Jan 18, 2026
PermissionsTool SafetyAuthAnnotationsCode QualityStabilitySpecVuln HistoryAuthorTransparencyCommunity

Tools 5

analytics_report
annotations: none low

Get comprehensive Google Analytics data with custom dimensions and metrics. Can create any type of report.

desc boolean limit number metric string endDate string metrics array orderBy object dimension string startDate string dimensions array propertyId string metricFilter record dimensionFilter record
realtime_data
annotations: none low

Get real-time analytics data for current active users and activity

limit number metrics array dimensions array propertyId string
quick_insights
annotations: none low

Get predefined analytics insights for common use cases

limit number endDate string startDate string propertyId string reportType enum
get_metadata
annotations: none low

Get available dimensions and metrics for Google Analytics property

type enum propertyId string
search_metadata
annotations: none low

Search for specific dimensions or metrics by name or category

type enum query string category string propertyId string

Permissions 2

filesystem low
Server uses filesystem capabilities via: fs sync ops
env_vars low
Server uses env_vars capabilities via: process.env

Scan Findings 24

low
Tool 'analytics_report' has no annotations annotation_checker · 100%
low
Tool 'realtime_data' has no annotations annotation_checker · 100%
low
Tool 'quick_insights' has no annotations annotation_checker · 100%
low
Tool 'get_metadata' has no annotations annotation_checker · 100%
low
Tool 'search_metadata' has no annotations annotation_checker · 100%
medium
OAuth implementation without PKCE auth_checker · 75%
info
Sandbox failed to start for behavioral verification behavioral_verifier · 100%
medium
Vulnerable dependency: @modelcontextprotocol/sdk@1.16.0 (GHSA-345p-7cg4-v4c7) dependency_analyzer · 95%
medium
Vulnerable dependency: @modelcontextprotocol/sdk@1.16.0 (GHSA-6qxp-vccf-f47h) dependency_analyzer · 95%
medium
Vulnerable dependency: @modelcontextprotocol/sdk@1.16.0 (GHSA-8r9q-7v3j-jr4g) dependency_analyzer · 95%
medium
Vulnerable dependency: @modelcontextprotocol/sdk@1.16.0 (GHSA-w48q-cv73-mx4w) dependency_analyzer · 95%
info
package.json metadata manifest_parser · 100%
info
Tool: analytics_report manifest_parser · 85%
info
Tool: realtime_data manifest_parser · 85%
info
Tool: quick_insights manifest_parser · 85%
info
Tool: get_metadata manifest_parser · 85%
info
Tool: search_metadata manifest_parser · 85%
info
Transport: stdio manifest_parser · 90%
info
Required env vars (7) manifest_parser · 80%
info
Sandbox failed to start for output poisoning scan output_poisoning · 100%
low
Permission: filesystem access detected permission_analyzer · 90%
low
Permission: env_vars access detected permission_analyzer · 90%
info
SBOM generated: 194 components sbom_generator · 100%
medium
No build provenance detected (SLSA L0) slsa_assessor · 90%