@mikusnuz/umami-mcp

MCPcommunity
v2.0.1mikusnuzMITUpdated 5d agonpmGitHub

MCP server for the Umami Analytics v3 API

Works in
ClaudeCursorCopilotGemini

Inferred from the transports this listing declares (stdio). A client not listed here hasn’t been ruled out — it just isn’t something Forge can confirm.

Automatically indexed from public sources. Not yet verified by the developer on Forge.Claim this listing →
327Downloads/wk
8GitHub stars
1Forks
5d agoLast update
Reads these credentials
  • UMAMI_PASSWORDAPI keyoptional

    Login password (for self-hosted)

  • UMAMI_API_KEYAPI keyoptional

    Bearer API key for Umami Cloud or self-hosted Umami 3.4+

Declared by the author in the official MCP registry. Forge does not store, broker, or ever see these values — the config below is scaffolded with placeholders you fill in locally.

Package
Authormikusnuz
LicenseMIT
Version2.0.1
Sourcenpm+mcp-registry
Trust Status
B
60/100Good
✓Listed in Forge index+10/10
—Publisher identity verified+0/20
→ Publisher: run `forge publish` from the package repo to claim ownership
—Ed25519 publish signature+0/5
→ Included automatically when the publisher runs `forge publish`
—Domain verification+0/5
→ Publisher: host /.well-known/forge.json on the package homepage with { "publisher": "<github-login>" }
—npm Trusted Publishing (Sigstore)+0/5
→ Publish from GitHub Actions with --provenance so the attestation binds this package to this repo
—npm maintainer match+0/5
→ Earned once your identity is verified above and that login is an npm maintainer of this package
✓CVE scan · clean+30/30
✓Static analysis · clean+20/20
Paste into Claude Code, Cursor, or any AI assistant to fix all gaps
StatusCommunity-indexed
PublisherUnverified
SignatureUnsigned
Domain—
Provenance—
Dependencies✓ 60 resolved+ · none vulnerable
Tool surface40 tools · 1 privileged
Security scan✓ Cleanv2.0.1 · todayHow well does this scan work?
EvalsNone
IndexedOct 11, 2026

Verification confirms publisher identity (repo ownership), not code safety. The security scan covers known CVEs and suspicious install scripts.

Tools

40 tools · 1 privileged
Statically extracted from the published packagev2.0.1 · 5h ago

Read out of the source npm actually ships, at scan time. The package was never executed. Tools registered dynamically at runtime, or hidden inside bundled or minified code, can be missed — so this is a floor on the tool surface, not a complete census of it.

get_meGet the currently authenticated user's profile information

Get the currently authenticated user's profile information

No input schema was published for this tool.

get_my_websitesGet the list of websites belonging to the current user

Get the list of websites belonging to the current user

No input schema was published for this tool.

get_my_teamsGet the list of teams the current user belongs to

Get the list of teams the current user belongs to

No input schema was published for this tool.

update_my_passwordUpdate the current user's password (self-hosted Umami only; Cloud API keys cannot call this route)

Update the current user's password (self-hosted Umami only; Cloud API keys cannot call this route)

No input schema was published for this tool.

verify_authVerify the current authentication token is valid

Verify the current authentication token is valid

No input schema was published for this tool.

get_shareResolve a public Umami share by its slug without authentication

Resolve a public Umami share by its slug without authentication

No input schema was published for this tool.

heartbeatCheck if the Umami server is running and healthy

Check if the Umami server is running and healthy

No input schema was published for this tool.

complete_two_factor_loginComplete a pending self-hosted Umami login after a tool reports that 2FA is required

Complete a pending self-hosted Umami login after a tool reports that 2FA is required

No input schema was published for this tool.

send_eventSend a custom event or pageview to Umami (useful for server-side tracking)

Send a custom event or pageview to Umami (useful for server-side tracking)

No input schema was published for this tool.

get_event_valuesGet event or session property values for a website

Get event or session property values for a website

No input schema was published for this tool.

get_event_data_eventsGet event data events (custom event names and counts) for a website

Get event data events (custom event names and counts) for a website

No input schema was published for this tool.

get_event_data_fieldsGet event data fields (property keys and their data types) for a website

Get event data fields (property keys and their data types) for a website

No input schema was published for this tool.

get_event_data_propertiesGet custom-event property names and their data types for a website

Get custom-event property names and their data types for a website

No input schema was published for this tool.

get_event_data_by_idGet the custom data attached to one event

Get the custom data attached to one event

No input schema was published for this tool.

get_event_data_valuesGet event data values (aggregated counts for a specific property) for a website

Get event data values (aggregated counts for a specific property) for a website

No input schema was published for this tool.

get_event_data_statsGet event data statistics (summary counts) for a website

Get event data statistics (summary counts) for a website

No input schema was published for this tool.

batch_eventsSend multiple events or pageviews in a single batch request

Send multiple events or pageviews in a single batch request

No input schema was published for this tool.

send_identifyAttach custom session data or a distinct ID through Umami's public collection API

Attach custom session data or a distinct ID through Umami's public collection API

No input schema was published for this tool.

send_performanceSend Core Web Vitals through Umami's public collection API

Send Core Web Vitals through Umami's public collection API

No input schema was published for this tool.

get_realtimeGet real-time data for a website (last 30 minutes). Returns current visitors, active URLs, referrers, countries, and events.

Get real-time data for a website (last 30 minutes). Returns current visitors, active URLs, referrers, countries, and events.

No input schema was published for this tool.

list_reportsList saved reports for a website

List saved reports for a website

No input schema was published for this tool.

get_reportGet details of a specific saved report

Get details of a specific saved report

No input schema was published for this tool.

create_reportCreate and save a new report

Create and save a new report

No input schema was published for this tool.

update_reportUpdate an existing saved report

Update an existing saved report

No input schema was published for this tool.

delete_reportprivilegedDelete a saved report

Delete a saved report

No input schema was published for this tool.

run_reportExecute a current Umami v3 report and return its result

Execute a current Umami v3 report and return its result

No input schema was published for this tool.

get_sessionGet details of a specific session

Get details of a specific session

No input schema was published for this tool.

get_session_activityGet activity log for a specific session (pages visited, events fired)

Get activity log for a specific session (pages visited, events fired)

No input schema was published for this tool.

get_session_propertiesGet custom properties attached to a specific session

Get custom properties attached to a specific session

No input schema was published for this tool.

get_session_data_propertiesGet session data property names and their data types for a website

Get session data property names and their data types for a website

No input schema was published for this tool.

get_session_data_valuesGet session data values (aggregated counts for session properties) for a website

Get session data values (aggregated counts for session properties) for a website

No input schema was published for this tool.

get_statsGet summary statistics for a website (pageviews, visitors, visits, bounces, totaltime)

Get summary statistics for a website (pageviews, visitors, visits, bounces, totaltime)

No input schema was published for this tool.

get_pageviewsGet pageview and session counts over time for a website

Get pageview and session counts over time for a website

No input schema was published for this tool.

get_metricsGet aggregated metrics for a website (e.g. top pages, browsers, countries, devices, OS, events)

Get aggregated metrics for a website (e.g. top pages, browsers, countries, devices, OS, events)

No input schema was published for this tool.

get_eventsList event rows for a website with current Umami v3 filters and pagination

List event rows for a website with current Umami v3 filters and pagination

No input schema was published for this tool.

get_sessionsGet session data for a website

Get session data for a website

No input schema was published for this tool.

get_daterangeGet the date range of available data for a website

Get the date range of available data for a website

No input schema was published for this tool.

get_event_seriesGet event metrics over time (event series data) for a website

Get event metrics over time (event series data) for a website

No input schema was published for this tool.

get_session_statsGet summarized session statistics for a website (total sessions, unique visitors, etc.)

Get summarized session statistics for a website (total sessions, unique visitors, etc.)

No input schema was published for this tool.

get_sessions_weeklyGet weekly session data for a website

Get weekly session data for a website

No input schema was published for this tool.

40 of 40 tools published a description.

Tool names and descriptions are written by the publisher and shown verbatim as inert text. They are the strings an MCP client passes to a model, so Forge scans them for prompt-injection patterns — any finding appears with the security scan above. “Privileged” is a keyword match on the tool name, not an audit of what the tool does: a benign-sounding name can still do anything.

About

MCP server for the Umami Analytics v3 API

Keywords
mcpumamianalyticsmodel-context-protocolaiclaude
Alternatives
Comparing tool surfaces…

Dependency tree

What one Forge scan resolved from npm metadata on 2026-10-13 — observed resolution, not a publisher declaration.

60 packages resolved · 2 direct · none carrying advisories Resolution stops at depth 4 and 60 packages.

The crawl stopped at the depth-4 limit. Anything below that level was never resolved.

The crawl stopped at the 60-package limit. The rest of the tree was never resolved.

36 more resolved packages are not drawn here (display cap: 24). Every dependency carrying an advisory is drawn regardless of the cap. Full inventory (CycloneDX SBOM)

Declared but not resolved

55 declared dependencies never landed in the tree. They are missing from Forge's resolution, not from the package.

+43 more not listed. The counts by reason above cover all of them.

Not followed: peerDependencies. This tree covers runtime dependencies only, so anything those pull in was never resolved.

Topics

Related in analytics & dashboards