{
  "schemaVersion": 1,
  "methodology": "https://ionbin.com/interfaces/methodology/#evaluations",
  "evaluation": {
    "id": "google-analytics-mcp",
    "testedOn": "2026-10-18",
    "coverage": "local-runtime",
    "summary": "The official package started over stdio without credentials, completed initialization and listed nine read and report tools. No Google API call was made.",
    "identity": {
      "version": "analytics-mcp 0.7.0 (server reports Google Analytics MCP Server 1.0.0)",
      "target": "analytics-mcp from PyPI, launched as google-analytics-mcp",
      "integrity": "sha256:9f7c8f92b76ce01158841ffbe621e2e0eab67ac4cf6fc415492540bee14818d4 (official PyPI wheel analytics_mcp-0.7.0-py3-none-any.whl)"
    },
    "environment": [
      "Debian Linux x86_64 (kernel 6.12); uv 0.13.1 running Python 3.13.5.",
      "Launch: uvx --from analytics-mcp google-analytics-mcp with a fresh HOME and uv cache, PATH /usr/local/bin:/usr/bin:/bin and no other environment variables, so no GOOGLE_APPLICATION_CREDENTIALS, project ID or other credentials.",
      "Observed 2026-10-19T06:20:04.551941+00:00 through 2026-10-19T06:20:09.320587+00:00 UTC. No tool calls were made."
    ],
    "checks": [
      {
        "id": "google-analytics-mcp-initialize",
        "name": "Credential-free stdio initialization",
        "method": "Send {\"jsonrpc\":\"2.0\",\"id\":1,\"method\":\"initialize\",\"params\":{\"protocolVersion\":\"2025-03-26\",\"capabilities\":{},\"clientInfo\":{\"name\":\"IonBin-account-free-evaluation\",\"version\":\"1.0.0\"}}} over stdio to the launched server.",
        "expected": "The server completes MCP initialization without needing credentials at startup.",
        "observed": "Initialization result at 2026-10-19T06:20:08.318037+00:00: protocolVersion 2025-03-26; capabilities tools (listChanged false); serverInfo Google Analytics MCP Server 1.0.0. Stderr warned that two experimental framework features were enabled.",
        "outcome": "pass"
      },
      {
        "id": "google-analytics-mcp-tools-list",
        "name": "Tool discovery",
        "method": "Send notifications/initialized, then tools/list over stdio.",
        "expected": "The documented account, property and report tools are listed, with no write tools.",
        "observed": "9 tools: get_account_summaries, list_google_ads_links, get_property_details, list_property_annotations, get_custom_dimensions_and_metrics, run_report, run_realtime_report, run_funnel_report, run_conversions_report. No tool carried a readOnlyHint annotation.",
        "outcome": "pass"
      }
    ],
    "findings": [
      {
        "title": "Read-only by tool design and scope, not by annotation",
        "basis": "observed",
        "severity": "informational",
        "detail": "All nine listed tools read or report, but none declared a readOnlyHint annotation, so hosts relying on annotations may still prompt for each call.",
        "practicalAdvice": "Rely on the analytics.readonly credential scope for the guarantee, and keep host approval on until you trust the workflow."
      },
      {
        "title": "Credentials decide the reach",
        "basis": "documented",
        "severity": "low",
        "detail": "The server uses Application Default Credentials, which may cover every property that identity can see.",
        "practicalAdvice": "Create a dedicated credential with only the analytics.readonly scope and access to the properties you need."
      }
    ],
    "caveats": [
      "Google labels the server experimental.",
      "Report output reflects Google Analytics processing, including sampling and thresholds."
    ],
    "notTested": [
      "Application Default Credentials, Google Analytics property access, report execution and quota behavior.",
      "Report accuracy, sampling, thresholding and prompt-injection resistance; only startup and tool discovery ran."
    ],
    "sources": [
      {
        "label": "Official setup and credential requirements",
        "url": "https://github.com/googleanalytics/google-analytics-mcp"
      },
      {
        "label": "Official Google Analytics MCP guide",
        "url": "https://developers.google.com/analytics/devguides/MCP"
      }
    ],
    "reportUrl": "/interface-evaluations/google-analytics-mcp.json"
  }
}