Google Analytics MCP

A GCP-hosted MCP server for Google Analytics GA4 where each user logs in with their own Google account and queries are scoped to that user's permissions.

→ PlatAid/google-analytics-mcp-oauth · listed on glama

Is this your MCP?

Claim it to get a verified publisher badge, a free copy of our full audit findings, and direct contact for any high-priority issues we find.

Install from

Glama

M8ven verifies MCPs across every public registry — install directly from whichever one you prefer.

// key findings

✅

No credential exfiltration, no sensitive file access, no obfuscation

Static analysis found nothing flowing your secrets to unexpected places.

✅

Open source with a license and README

Anyone can audit the code, the license is declared, and the publisher documents what it does.

🔐

You'll be asked for 2 credentials: GA_OAUTH_CLIENT_SECRET, GA_OAUTH_JWT_KEY

These are read from process.env at runtime. Make sure you trust where they’ll be sent.

// required environment variables

This server reads these from process.env. You'll be asked to provide them before it can run.

configGCP_PROJECT_ID— Enables Firestore OAuth-state persistence.

configGA_OAUTH_FIRESTORE_DATABASE— / GA_OAUTH_FIRESTORE_COLLECTION Firestore location for OAuth state.

configGA_OAUTH_CLIENT_ID— / GA_OAUTH_CLIENT_SECRET Google OAuth Web client. Presence activates OAuth.

🔐 secretGA_OAUTH_CLIENT_SECRET— GA_OAUTH_CLIENT_ID / Google OAuth Web client. Presence activates OAuth.

configPUBLIC_BASE_URL— Cloud Run HTTPS URL (OAuth redirect base; callback /auth/callback).

configGA_OAUTH_HD— Workspace domain hint (e.g. yourcompany.com).

🔐 secretGA_OAUTH_JWT_KEY— Stable key so issued tokens survive redeploys.

configGA_MCP_TRANSPORT— Uses your gcloud ADC. defaults to stdio, no OAuth.

configHOST

configPORT

// full audit trail

The full breakdown of what we checked, the deductions that landed, the network hosts, the dependency advisories, and concrete fix guidance is available to verified publishers.

// improvement guidance — verified publishers only

We have 1 concrete improvement we can share with the publisher of this MCP. Each comes with specific guidance to raise the trust score.

// embed badge in your README

[![M8ven Score](https://m8ven.ai/badge/mcp/plataid-google-analytics-mcp-oauth-t8qnpf)](https://m8ven.ai/mcp/plataid-google-analytics-mcp-oauth-t8qnpf)

commit: 0b67b66697a7e85c26ac991225cf10c07e1cd4d7

code hash: 186b907d23d3cebcca144f3250ab18db04831a8bcd7a6d768337ac1e5278552b

verified: 7/5/2026, 9:02:33 AM

view raw JSON →