Cookie Free Analytics MCP

Remote Model Context Protocol server for Cookie Free Analytics: cookieless web analytics, EU-hosted, GDPR.

This repository is the public listing (Official MCP Registry, Glama, and install copy). The server itself runs at the product origin. There is nothing to `npm install`.

Operator: Prestons Creek Capital. Public contact: hello@cookiefreeanalytics.com.

Starter and Growth. Hobby is the dashboard only.

The tools return the same aggregates as the dashboard. They do not return visitor hashes, raw IPs, or a user graph. They do not write pageviews, change settings, or send mail.

Install

Paste this URL as a custom connector:

https://www.cookiefreeanalytics.com/mcp

The client starts OAuth 2.1 on cookiefreeanalytics.com (protected-resource metadata, PKCE S256, dynamic client registration). You sign in to Cookie Free Analytics. A Google login on the website is not an MCP token.

Claude

Claude.ai / Claude Desktop: Settings → Connectors → Add custom connector. URL above. No Client ID or secret.

Claude Code:

claude mcp add --transport http cookie-free-analytics https://www.cookiefreeanalytics.com/mcp

Cursor

`~/.cursor/mcp.json` (or project `.cursor/mcp.json`):

{
  "mcpServers": {
    "cookie-free-analytics": {
      "url": "https://www.cookiefreeanalytics.com/mcp"
    }
  }
}

VS Code

`.vscode/mcp.json` or user MCP config. Command Palette: MCP: Add Server.

{
  "servers": {
    "cookie-free-analytics": {
      "type": "http",
      "url": "https://www.cookiefreeanalytics.com/mcp"
    }
  }
}

VS Code opens a browser for OAuth on first connect.

Grok

grok.com/connectors → custom connector → the same URL. There is no Grok public catalog entry to search for.

OAuth flow

1. The client `GET`s RFC 9728 metadata for `https://www.cookiefreeanalytics.com/mcp`.

2. PKCE S256 + dynamic client registration. You do not paste a Client ID or Client Secret.

3. Browser sign-in on cookiefreeanalytics.com. Starter or Growth.

4. The client calls `POST /mcp` with the access token.

curl and scripts may still send `Authorization: Bearer` with a hashed token from Plan → Account → Read API (`cfa_live_…`, shown once). Do not commit that token.

Tools (read-only)

`range` is `today`, `7d`, `30d`, `90d`, or `YYYY-MM-DD..YYYY-MM-DD`. `f` is the same filter string the dashboard puts in the URL.

Docs

• Product: https://www.cookiefreeanalytics.com
• Read API + MCP: https://www.cookiefreeanalytics.com/docs/api
• How-to: https://www.cookiefreeanalytics.com/blog/cookieless-analytics-mcp
• Privacy: https://www.cookiefreeanalytics.com/privacy
• Support: hello@cookiefreeanalytics.com

License

MIT. Operator: Prestons Creek Capital.