Mcp — independently scanned and version-tracked by SaferSkills.
SaferSkills independently audited Mcp (Agent Skill) and scored it 100/100 (green). The audit ran 55 deterministic rules across Security, Supply Chain, Maintenance, Transparency, and Community; it found 0 high-severity and 0 lower-severity findings. The full rule-by-rule trace and per-finding evidence are below. Free, methodology-open.
Findings & checks · 0 flagged
Every scanned point with the score it earned and what moved between them.
First recorded scan — no prior version to compare against.
The primary manifest — the file an agent reads to learn what this artifact does.
A Model Context Protocol (MCP) server built with the official MCP Python SDK that lets you control Piwik PRO Analytics resources.
Turn questions into insights. The Query API lets you explore your analytics data using natural language. Ask about visitors, page views, conversions, and more without navigating complex dashboards or building reports manually.
Keep your analytics setup organized without leaving your the conversation with your AI assistant:
Manage your tracking setup without touching your website code:
Build and manage your audience segments:
Fine-tune your Piwik PRO setup:
Go to your account's API credentials page: https://ACCOUNT.piwik.pro/profile/api-credentials, then generate new credentials.
You will need these three variables for the MCP configuration:
PIWIK_PRO_HOST - Your piwik host, ACCOUNT.piwik.proPIWIK_PRO_CLIENT_ID - Client IDPIWIK_PRO_CLIENT_SECRET - Client SecretAll of these MCP clients use a JSON file to store the MCP configuration. The file name and location vary by client.
Settings -> Developer -> Edit Configto open the folder containing claude_desktop_config.json.To use Piwik PRO MCP server, you need to install uv or docker.
Copy the configuration of your preferred option and enter the required environment variables.
#### Option #1 - UV
If you don't have uv, check the official installation guide.
{
"mcpServers": {
"piwik-pro-analytics": {
"command": "uvx",
"args": ["piwik-pro-mcp"],
"env": {
"PIWIK_PRO_HOST": "ACCOUNT.piwik.pro",
"PIWIK_PRO_CLIENT_ID": "CLIENT_ID",
"PIWIK_PRO_CLIENT_SECRET": "CLIENT_SECRET"
}
}
}
}<details> <summary><b>🔒 How to keep secrets out of the configuration file</b></summary>
You can enter environment variables directly in the MCP configuration, but storing them in a separate file is more secure. Create a .piwik-pro-mcp.env file and add configuration to it:
# .piwik.pro.mcp.env
PIWIK_PRO_HOST=ACCOUNT.piwik.pro
PIWIK_PRO_CLIENT_ID=CLIENT_ID
PIWIK_PRO_CLIENT_SECRET=CLIENT_SECRETRefer to this file through --env-file argument:
{
"mcpServers": {
"piwik-pro-analytics": {
"command": "uvx",
"args": [
"piwik-pro-mcp",
"--env-file",
"/absolute/path/to/.piwik-pro-mcp.env"
]
}
}
}</details>
#### Option #2 - Docker
You need to have Docker installed. See the official installation guide.
{
"mcpServers": {
"piwik-pro-analytics": {
"command": "docker",
"args": ["run", "-i", "--rm", "ghcr.io/piwikpro/mcp:latest"],
"env": {
"PIWIK_PRO_HOST": "ACCOUNT.piwik.pro",
"PIWIK_PRO_CLIENT_ID": "CLIENT_ID",
"PIWIK_PRO_CLIENT_SECRET": "CLIENT_SECRET"
}
}
}
}<details> <summary><b>🔒 How to keep secrets out of configuration file</b></summary>
You can enter environment variables directly in the MCP configuration, but storing them in a separate file is more secure. Create a .piwik-pro-mcp.env file and add the configuration to it:
# .piwik.pro.mcp.env
PIWIK_PRO_HOST=ACCOUNT.piwik.pro
PIWIK_PRO_CLIENT_ID=CLIENT_ID
PIWIK_PRO_CLIENT_SECRET=CLIENT_SECRETRefer to this file through --env-file argument:
{
"mcpServers": {
"piwik-pro-analytics": {
"command": "docker",
"args": [
"run",
"-i",
"--rm",
"--env-file",
"/absolute/path/to/.piwik-pro-mcp.env",
"ghcr.io/piwikpro/mcp:latest"
]
}
}
}</details>
Restart your MCP client to apply configuration changes.
You're all set! The server starts in safe mode by default, so you can explore your analytics data without worrying about accidental changes.
Try these prompts to get started:
List my Piwik PRO apps.
List tags in <NAME> app.
What were the top 10 pages last week?
Show me conversion trends from the last month.Once you're comfortable, disable safe mode to enable t create, update, and delete operations:
PIWIK_PRO_SAFE_MODE=0Then try prompts like:
In app <NAME>, add a new tag that shows alert("hello") on every page.
Copy the tag <NAME> from app <APP> to all apps with the <PREFIX> prefix.PIWIK_PRO_TELEMETRY (default 1): Controls anonymous usage telemetry. Set this to 0 to disable it.PIWIK_PRO_TM_RESOURCE_CHECK (default 1): Enables Tag Manager template validation. Set to 0 to bypass when experimenting with custom templates.We value your feedback and questions. If you have suggestions, run into issues, or want to request a feature, open an issue on our GitHub Issues page. Your feedback helps us improve the project and support the community.
We collect anonymous telemetry data to help us understand how the MCP server is used and to improve its reliability and features. This telemetry includes information about which MCP tools are invoked and whether the result is a success or an error, but it doesn't include any personal data, tool arguments, or sensitive information.
We use this data only to identify issues, prioritize improvements, and provide the best possible experience for all users.
If you prefer not to send telemetry data, you can opt out at any time by adding the following environment variable PIWIK_PRO_TELEMETRY=0 to your MCP server configuration.
| Document | Description |
|---|---|
| Available Tools | Complete reference for all MCP tools |
| Development Guide | Setup, running, testing, and architecture |
| Contributing | How to contribute to the project |
~30 seconds. Free. No account. Every finding cites a rule and a line of evidence.