# @getmcpads/google-analytics-mcp-server Open-source MCP server for Google Analytics 4. 27 read-only tools across the Data API and Admin API, with personal identifiers redacted before they reach the model. Self-hosted, bring your own credentials. - **Type:** MCP server - **Trust:** 60/100 (B), scored on the package rubric - **Verification:** community-indexed — nobody has claimed this listing - **Version:** 1.0.2 - **Author:** GetMCPAds - **License:** Apache-2.0 - **npm:** @getmcpads/google-analytics-mcp-server - **Source:** https://github.com/getmcpads-com/google-analytics-mcp-server - **Compatible clients:** claude-code, cursor, copilot, gemini (basis: transport) ## Trust 60/100 (B), scored on the package rubric - Publisher verified: no - Install scripts: nothing suspicious found - Prompt-injection scan: not run - Obfuscation scan: not run - Evidence age: 2 days ## Security scan - **Status:** clean - **Scanned:** 2026-08-31T13:41:03.727Z - **Version scanned:** 1.0.2 - **CVEs:** none found by OSV at scan time ## Tools 27 declared. Statically extracted from the shipped source — a floor on the surface, not a census. - `ga4_run_pivot_report` — Run a read-only GA4 Data API pivot report with native filters, ordering, quota state, multiple date ranges, and up to 250,000 pivot cells. Every pivot requires - `ga4_batch_run_reports` — Run 1-5 independent read-only GA4 Core reports for the same property in one official Data API batch request. - `ga4_batch_run_pivot_reports` — Run 1-5 independent read-only GA4 pivot reports for the same property in one official Data API batch request. - `ga4_check_compatibility` — Ask the official GA4 Data API which dimensions and metrics are compatible with a proposed Core report selection. - `ga4_get_property_quotas_snapshot` — Read the current GA4 Data API property quota snapshot from the official v1alpha endpoint. This does not run a report, but Google still charges one property-quot - `ga4_list_accounts` — List raw GA4 Analytics Admin accounts accessible to the authenticated user (read-only, auto-paginated). - `ga4_list_admin_resources` — List an allowlisted GA4 Admin collection in read-only mode: streams, custom definitions, key events, audiences, product links, annotations, channel groups, expa - `ga4_get_property_configuration` — Read GA4 property details plus selected singleton Admin settings (attribution, retention, Google Signals, reporting identity, or user-provided-data settings). - `ga4_list_audience_exports` — List existing GA4 Audience Export snapshots and Recurring Audience Lists without creating new exports. - `ga4_query_audience_export` — Query rows from an existing GA4 Audience Export. User/device identifiers are redacted by default; include them only through explicit opt-in. - `ga4_health_check` — Read-only GA4 health check. Verifies configured credentials, accessible properties, and metadata/property access without exposing OAuth tokens. - `ga4_list_properties` — List all GA4 properties accessible with the current credentials. Returns property ID, display name, timezone, and currency. - `ga4_run_report` — Run a GA4 analytics report with intelligent query planning. Supports 52 metrics, 63 dimensions, auto-pagination. Use ga4://metrics and ga4://dimensions resource - `ga4_run_realtime_report` — Run a read-only GA4 Data API realtime report. Realtime supports only a limited subset of dimensions and metrics. - `ga4_get_metadata` — Get the complete list of dimensions and metrics available for a specific GA4 property. Useful for discovering custom dimensions/metrics. - `ga4_get_custom_definitions` — List custom dimensions and custom metrics exposed by GA4 Data API metadata. Read-only fallback for custom definition inventory. - `ga4_get_key_events` — Inventory GA4 key events/conversions using metadata-aware Data API reports. Returns best-effort event names and counts. - `ga4_get_ecommerce_diagnostics` — Read-only ecommerce coverage diagnostics for core ecommerce events, revenue metrics, and item-level reporting over a date range. - `ga4_get_event_parameters` — Best-effort event parameter inventory from GA4 metadata plus event reports. Documents Data API limitations for raw parameters. - `ga4_run_funnel_recipe` — Run a read-only configurable funnel recipe using one GA4 report per eventName/pagePath step and return simple step counts. - `ga4_get_audience_export_diagnostics` — Read-only Audience Export diagnostics. Lists existing audience exports, state counts, and optionally samples rows from an existing export. - `ga4_get_audience_diagnostics` — Read-only audience diagnostics from Admin API audiences, Data API recurring audience lists, and observed audienceName report fallback. - `ga4_get_bigquery_export_diagnostics` — Detect GA4 BigQuery export links and diagnose export modes, stream coverage, excluded events, and dataset location. - `ga4_get_server_side_tagging_diagnostics` — Best-effort read-only server-side tagging diagnostics from data streams, Measurement Protocol secrets, event rules, and stream settings. - `ga4_run_advanced_funnel_report` — Run the GA4 Data API v1alpha runFunnelReport endpoint with optional breakdown/next-action, falling back to read-only step counts if unavailable. - `ga4_get_channel_groups` — List custom channel groups defined for a GA4 property. - `ga4_validate_query` — Validate a metric/dimension combination BEFORE executing. Checks max limits (9 dims, 10 metrics), ecommerce rules, and dimension compatibility. ## Install **Verdict: review** — Installable, but 1 thing to check first: No publisher has proved control of this listing; it is indexed, not vouched for. **Cautions** (coverage gaps and advisories — never blocking) - No publisher has proved control of this listing; it is indexed, not vouched for. **Config** (claude-code): ```json "{\n \"mcpServers\": {\n \"google-analytics-mcp-server\": {\n \"command\": \"npx\",\n \"args\": [\n \"-y\",\n \"@getmcpads/google-analytics-mcp-server\"\n ],\n \"env\": {\n \"GA4_CLIENT_SECRET\": \"\",\n \"GA4_REFRESH_TOKEN\": \"\"\n }\n }\n }\n}" ``` **Credentials it will ask for** (names only — Forge never holds a value): - `GA4_CLIENT_SECRET` — Ga4 Client Secret (required) - `GA4_REFRESH_TOKEN` — Ga4 Refresh Token (required) Placeholders only. Forge never holds, brokers, or transmits a credential value — replace each in your own config file. Do not send a value back to Forge; no Forge endpoint accepts one. - This entry needs 2 credentials (2 required). The generated config carries placeholders, so it will fail in the editor rather than at runtime if they are left unset. ## Blast radius Moderate blast radius — holds an oauth grant; runs on your machine. - Floor 30, ceiling 30 (tier: moderate) - This is impact, not likelihood. A high radius is not a defect: a filesystem server is supposed to write files. It is never part of the trust score. ## Machine-readable views of this entry - Signed JSON: https://forgeregistry.com/api/v1/packages/%40getmcpads%2Fgoogle-analytics-mcp-server - Install plan: https://forgeregistry.com/api/v1/packages/%40getmcpads%2Fgoogle-analytics-mcp-server/install-plan - Alternatives: https://forgeregistry.com/api/v1/alternatives/%40getmcpads%2Fgoogle-analytics-mcp-server - HTML page: https://forgeregistry.com/registry/%40getmcpads%2Fgoogle-analytics-mcp-server - MCP: POST https://forgeregistry.com/api/mcp → `forge_get_package` / `forge_install_plan` ## About this document Generated by Forge (https://forgeregistry.com) — a compact rendering of the same record served, signed, at the JSON URL above. Trust and scan facts are the registry's own measurements; anything Forge did not measure is named as unmeasured rather than omitted.