The full upstream README, mirrored here for reference. Install config, tool schemas, adoption signals, and an original overview live on the Matomo Analytics listing page.
Talk to your Matomo Analytics. From Claude, Cursor, VS Code, or any MCP client.
15 curated, read-only analytics tools + a full-API escape hatch. Single binary, instant startup, context-friendly.
Quickstart · Clients · Tools · Configuration · FAQ
Every question your Matomo dashboard can answer, your AI assistant can now answer too — including follow-ups, comparisons, and "why?".
| 🎯 Curated, not generated | 15 hand-crafted tools modeled on real analytics questions — not 70+ auto-generated API mirrors that flood the model's context and degrade tool selection. |
| ⚡ Instant startup | No introspection round-trips. One static binary, no Node, no Python, no runtime. Starts in milliseconds. |
| 🔒 Safe by default | Read-only reporting tools. Token sent via POST only (never in URLs/logs), redacted from every error. TLS verification on by default. |
| 🧠 Context-friendly | Row limits on every report and a hard response budget with actionable guidance — one tool call can never blow up the context window. |
| 📡 Real-time included | Live visitor counters and a visit log (matomo_realtime) — see what's happening right now. |
| 🧰 Never a cage | matomo_api reaches any Reporting API method (funnels, heatmaps, custom dimensions, …) when the curated tools don't cover it. |
| 🔁 Resilient | Automatic retries with backoff on 429/5xx/network hiccups. Helpful, hint-annotated error messages the model can act on. |
Prebuilt binary (Linux, macOS, Windows) — grab it from Releases, or:
Matomo → Settings (⚙) → Personal → Security → Auth tokens → Create new token. View-only permissions are all it needs.
Add to claude_desktop_config.json (macOS: ~/Library/Application Support/Claude/, Windows: %APPDATA%\Claude\):
.cursor/mcp.json (project) or ~/.cursor/mcp.json (global):
.vscode/mcp.json:
Any client that speaks MCP over stdio works with the generic shape:
Run the server once (on a workstation, LAN box, or container) and point any number of MCP clients at it:
Clients connect to http://127.0.0.1:8080/mcp with the streamable HTTP
transport, e.g.:
[!WARNING] The HTTP endpoint has no built-in authentication. Keep it bound to
127.0.0.1, or put a reverse proxy with auth (or a firewall) in front before exposing it beyond localhost.
[!TIP] Set
MATOMO_DEFAULT_SITE_IDand the model never has to ask which site you mean. No token at hand? Try it against the public demo:--url https://demo.matomo.cloud --default-site-id 1(no token needed).
| Tool | Answers questions like |
|---|---|
matomo_list_sites | "Which sites do we track?" |
matomo_visits_summary | "How much traffic did we get last week?" |
matomo_pages | "What are our top pages? Where do people exit?" |
matomo_referrers | "Where do visitors come from? Which campaigns work? What do AI assistants send us?" |
matomo_events | "How often was the configurator opened?" |
matomo_goals | "What's our conversion rate per goal?" |
matomo_ecommerce | "Revenue this month? Best-selling products?" |
matomo_geo | "Which countries/cities do visitors come from?" |
matomo_devices | "Mobile vs. desktop? Which browsers?" |
matomo_visit_times | "When during the day/week do people visit?" |
matomo_site_search | "What do people search for on our site — and find nothing?" |
matomo_realtime | "Who's on the site right now?" |
matomo_page_performance | "Which pages load slowly?" |
matomo_annotations | "Which deploys or campaign launches line up with that traffic spike?" |
matomo_api | Everything else — funnels, heatmaps, custom dimensions, any Module.action of the Reporting API |
All tools accept site_id, period (day/week/month/year/range), date
(today, yesterday, 2026-07-01, last30, or start,end ranges), an optional
segment (e.g. deviceType==mobile;country==DE), and a row limit.
| Flag | Env | Default | Description |
|---|---|---|---|
--url | MATOMO_URL | — | Matomo instance URL (sub-directory installs like https://example.com/matomo/ work). Without it the server still starts and tool calls return setup guidance |
--token | MATOMO_TOKEN | — | API token (token_auth), view access is enough |
--default-site-id | MATOMO_DEFAULT_SITE_ID | — | Site used when the model doesn't specify one |
--header | MATOMO_EXTRA_HEADERS | — | Extra HTTP headers (Name:Value, repeatable / comma-separated) — for auth proxies, Zero-Trust, multi-tenant setups |
--timeout-secs | MATOMO_TIMEOUT_SECS | 30 | Per-request timeout |
--max-response-chars | MATOMO_MAX_RESPONSE_CHARS | 50000 | Response budget before truncation |
--http | MATOMO_HTTP_BIND | — | Serve MCP over streamable HTTP on this address instead of stdio (endpoint: http://<addr>/mcp) |
--insecure | MATOMO_INSECURE | false | Accept self-signed TLS certificates (explicit opt-in) |
--check | — | — | Verify URL + token + site access, then exit |
FGRibreau/mcp-matomo?mcp-matomo (which inspired this project — thanks! 🙏) introspects your Matomo instance at startup and generates one MCP tool per API method. matomo-mcp takes the opposite approach:
| matomo-mcp | mcp-matomo | |
|---|---|---|
| Tool set | 15 curated tools + escape hatch | ~70+ generated tools |
| Model context cost | Small, stable | Large, instance-dependent |
| Parameter types | Exact, hand-written enums/defaults | Inferred from parameter names |
| Startup | Instant (no network I/O) | Introspection round-trips (or cached spec file) |
| TLS verification | On by default | Disabled for introspection |
| Sub-directory installs | ✅ | Path is overwritten |
| Response size guard | Row limits + hard budget | — |
| Retries on transient errors | ✅ | — |
| Real-time (Live) tools | ✅ | — (not part of report metadata) |
If you want every API method as its own tool, use mcp-matomo. If you want the model to reliably pick the right tool and never flood its context, use matomo-mcp.
Either pass --default-site-id 1 (recommended) or let the model call matomo_list_sites first.
Run matomo-mcp --url ... --token ... --check. If it fails: regenerate the token (Settings → Personal → Security), make sure it has at least view access to the site.
MATOMO_URL must point at the Matomo root — the folder containing index.php. For https://example.com/matomo/index.php, use https://example.com/matomo/.
Inject the bypass headers: --header "CF-Access-Client-Id:..." --header "CF-Access-Client-Secret:..." (or via MATOMO_EXTRA_HEADERS).
That's the context guard doing its job. Ask for fewer rows, a shorter date range, or raise --max-response-chars.
--http, host it once, connect many clients)matomo_annotations — read & correlate deploy markers with trafficserver.json, Glama)Want one of these sooner? Open an issue — or a PR, see CONTRIBUTING.md.
Architecture and design decisions: docs/ARCHITECTURE.md.
MIT. Not affiliated with or endorsed by Matomo — Matomo is a registered trademark of InnoCraft Ltd.
Built with rmcp, the official Rust MCP SDK. Inspired by FGRibreau/mcp-matomo.
mcp-name: io.github.Liohtml/matomo-mcpIf matomo-mcp saves you a dashboard visit, a ⭐ helps others find it.