Is io.attrikit/mcp safe to use?

io.attrikit/mcp has no known CVEs as of the latest MCPpedia security scan. It requires authentication to connect, which limits unauthorized access. Licensed under MIT.

How do I install io.attrikit/mcp?

io.attrikit/mcp supports copy-paste install configs on its MCPpedia page for Claude Desktop, Cursor, and Claude Code. Scroll to the Quick Install section and select your client.

What can io.attrikit/mcp do?

io.attrikit/mcp provides 2 tools: import_spend, record_campaign_decision. See the full tools list on the server page for descriptions and parameters.

What AI clients work with io.attrikit/mcp?

io.attrikit/mcp is compatible with claude-desktop, cursor, claude-code. It uses stdio and http transport.

Is io.attrikit/mcp actively maintained?

io.attrikit/mcp is actively maintained - last commit was 1 day ago.

io.attrikit/mcp

@attrkit/mcp

Run AttriKit web-to-app attribution from an agent: apps, campaign links, spend, decisions, exports

409/wk 2 tools GitHub npm

No known CVEs

MIT license

Actively maintained

Last commit 1d ago

Works with most clients

Transport: stdio, http

2 tools · ~147 tok

Grade A · 0.1% of 200K ctx

MCPpedia last refreshed this data 10h ago

Edit this pageView history

io.attrikit/mcp is an MCP server that run AttriKit web-to-app attribution from an agent: apps, campaign links, spend, decisions, exports. Its tool list has not been published yet over stdio and http, requires no API key, and scores 89/100 on MCPpedia's security, maintenance and efficiency rubric.

Marketing

Step 1

Install in your client

Config is the same across clients - only the file and path differ.

Supported in Claude Desktopstdio, http · Node 18+

Paste into ~/Library/Application Support/Claude/claude_desktop_config.json

{
  "mcpServers": {
    "attrkit": {
      "env": {
        "ATTRKIT_API_KEY": "${env:ATTRKIT_API_KEY}",
        "ATTRKIT_API_URL": "https://attrikit.io"
      },
      "args": [
        "-y",
        "@attrkit/mcp"
      ],
      "command": "npx"
    }
  }
}

Are you the author?

Add this badge to your README to show your security score and help users find safe servers.

Embed in your READMEAbout badges →

[![MCPpedia Score](https://mcppedia.org/api/badge/io-attrikit-mcp)](https://mcppedia.org/s/io-attrikit-mcp)

Read me

What io.attrikit/mcp does

Run AttriKit web-to-app attribution from an agent: apps, campaign links, spend, decisions, exports

Test This Server

This server supports HTTP transport. Be the first to test it - help the community know if it works.

Loading README…

Scored, not listed

Why this score

Five weighted categories - click any category to see the underlying evidence.

Score breakdown

89/100across 5 weighted dimensions

How we score →

0255075100

−11

Security

Maintenance

Efficiency

Documentation

Compatibility

Categoriesclick a row to see evidence

Security

OSV.dev

No known CVEs.

Checked @attrkit/mcp against OSV.dev.

Inventory

Tools (2)

Click any tool to inspect its schema.

~147 tokens total

Community

Reviews

Be the first to review

Have you used this server?

Share your experience - it helps other developers decide.

How easy was setup?Did it work reliably?How was the documentation?

Frequently Asked Questions

Is io.attrikit/mcp safe to use?: io.attrikit/mcp has no known CVEs as of the latest MCPpedia security scan. It requires authentication to connect, which limits unauthorized access. Licensed under MIT.
How do I install io.attrikit/mcp?: io.attrikit/mcp supports copy-paste install configs on its MCPpedia page for Claude Desktop, Cursor, and Claude Code. Scroll to the Quick Install section and select your client.
What can io.attrikit/mcp do?: io.attrikit/mcp provides 2 tools: import_spend, record_campaign_decision. See the full tools list on the server page for descriptions and parameters.
What AI clients work with io.attrikit/mcp?: io.attrikit/mcp is compatible with claude-desktop, cursor, claude-code. It uses stdio and http transport.
Is io.attrikit/mcp actively maintained?: io.attrikit/mcp is actively maintained - last commit was 1 day ago.

Similar servers

Others in marketing

View all →

Seo94

Free Google Search Console MCP: your real GSC, Google Analytics and keyword data for AI agents.

622 2

Mcp Server Typescript93

DataForSEO API modelcontextprotocol server

261 9

Mailcheap92

Newsletters where you pay for the emails you send, not for dormant subscribers, at a fraction of the price of beehiiv and the like. Open source: self-host it, or use mailcheap.ai.

1.7k 8

io.github.nirholas/xactions92

X/Twitter automation MCP: scrape, post, schedule, analyze, engage. No API key required.

655 6

MCP Security Weekly

Get CVE alerts and security updates for io.attrikit/mcp and similar servers.

Community

Discussion

Start a conversation

Ask a question, share a tip, or report an issue.

Has anyone used this with Cursor?How do you handle auth?Any alternatives?

Edit this pageView history

Marketing

Step 1

Install in your client

Config is the same across clients - only the file and path differ.

Supported in Claude Desktopstdio, http · Node 18+

Paste into ~/Library/Application Support/Claude/claude_desktop_config.json

{
  "mcpServers": {
    "attrkit": {
      "env": {
        "ATTRKIT_API_KEY": "${env:ATTRKIT_API_KEY}",
        "ATTRKIT_API_URL": "https://attrikit.io"
      },
      "args": [
        "-y",
        "@attrkit/mcp"
      ],
      "command": "npx"
    }
  }
}

Are you the author?

Add this badge to your README to show your security score and help users find safe servers.

Embed in your READMEAbout badges →

[![MCPpedia Score](https://mcppedia.org/api/badge/io-attrikit-mcp)](https://mcppedia.org/s/io-attrikit-mcp)

Read me

What io.attrikit/mcp does

Run AttriKit web-to-app attribution from an agent: apps, campaign links, spend, decisions, exports

Test This Server

This server supports HTTP transport. Be the first to test it - help the community know if it works.

README

@attrkit/mcp

A stdio MCP server for AttriKit, web-to-app attribution for iOS and Android apps that buy ads. Use it from Claude Code, Claude Desktop, Codex, Cursor, Gemini CLI, VS Code or Windsurf to create campaign links, import spend, read each campaign's scale, cut or hold call, and export installs and events. It is a thin client over AttriKit's public API. It holds no database access; your tenant scope is resolved from your secret management key.

Source: KamyarTaher/attrikit-mcp. Report an issue there or at contact@clashware.com. MIT licensed.

What it exposes

The server provides 39 tools.

Area	Tools
Key scope	`whoami`
Workspace usage	`get_usage_cap`, `set_usage_cap`
Apps	`list_apps`, `create_app`, `get_app`, `update_app`, `archive_app`
SDK keys	`get_publishable_key`, `rotate_publishable_key`
Management keys	`list_api_keys`, `create_api_key`, `revoke_api_key`
Campaign links	`list_links`, `create_campaign_link`, `update_link_status`
Decisions and reporting	`list_campaigns`, `list_ads`, `list_recent_events`, `list_event_deliveries`, `get_campaign_decision`, `record_campaign_decision`, `get_attribution_rollup`, `lookup_customer_attribution`
Spend and costs	`get_spend`, `import_spend`, `set_cost_model`, `pull_network_spend`
Ad integrations	`list_integrations`, `create_integration`, `update_integration`, `delete_integration`
RevenueCat	`get_revenuecat`, `configure_revenuecat`
Outbound webhooks	`list_webhooks`, `create_webhook`, `delete_webhook`
Data export	`export_events`
Server events	`send_server_event`

get_campaign_decision returns the engine's call verbatim. The model reports it; it does not recompute it.

A Meta or TikTok integration has two delivery options. delivery_scope is all (the default: every install with measurement consent, organic ones included) or attributed (only installs AttriKit attributes to that network: a click ID, a link token, or a Matched install at or above the delivery floor). renewal_event is purchase (the default: a renewal is sent as Purchase) or custom (it is sent as the custom event subscription_renewed, with its value). Set them on create_integration, or later with update_integration and the action set_delivery_options, which leaves the credential and status as they are. A Google integration refuses attributed and custom.

delivery_scope_overrides sets the scope per country: an object of upper-case country code to all or attributed, for example {"MX": "all"} to send every install made in Mexico while delivery_scope stays attributed elsewhere. The country is the install's own, taken from the request IP at its first open; an install whose country has no entry, or has none, takes delivery_scope. On set_delivery_options the object replaces the whole map, and {} clears it.

Before you connect

Install Node.js 22 or newer. The npx -y @attrkit/mcp command downloads and starts the server automatically, so no global install is required.

Node.js 22 is required from 2.0.0. engines.node is >=22; 1.x accepted Node.js 18. If a client still starts the server with an older Node, upgrade Node, or pin @attrkit/mcp@1. The tools, their inputs and their outputs did not change.

Create the first workspace management key under Dashboard → Settings → API keys & MCP. This one-time bootstrap requires the dashboard.

After that first key exists, a workspace-scoped read/write key can manage every customer operation available through the Management API. This includes apps, delegated keys, usage caps, integrations, and exports.

Use a read-only or app-scoped key when the client needs less access. App-scoped keys cannot read or change the workspace usage cap, create sibling apps, or manage workspace-wid

... View full README on GitHub

Loading README…

Scored, not listed

Why this score

Five weighted categories - click any category to see the underlying evidence.

Score breakdown

89/100across 5 weighted dimensions

How we score →

0255075100

−11

Security

Maintenance

Efficiency

Documentation

Compatibility

Categoriesclick a row to see evidence

Security

OSV.dev

No known CVEs.

Checked @attrkit/mcp against OSV.dev.

Inventory

Tools (2)

Click any tool to inspect its schema.

~147 tokens total

Community

Reviews

Be the first to review

Have you used this server?

Share your experience - it helps other developers decide.

How easy was setup?Did it work reliably?How was the documentation?

Frequently Asked Questions

Is io.attrikit/mcp safe to use?: io.attrikit/mcp has no known CVEs as of the latest MCPpedia security scan. It requires authentication to connect, which limits unauthorized access. Licensed under MIT.
How do I install io.attrikit/mcp?: io.attrikit/mcp supports copy-paste install configs on its MCPpedia page for Claude Desktop, Cursor, and Claude Code. Scroll to the Quick Install section and select your client.
What can io.attrikit/mcp do?: io.attrikit/mcp provides 2 tools: import_spend, record_campaign_decision. See the full tools list on the server page for descriptions and parameters.
What AI clients work with io.attrikit/mcp?: io.attrikit/mcp is compatible with claude-desktop, cursor, claude-code. It uses stdio and http transport.
Is io.attrikit/mcp actively maintained?: io.attrikit/mcp is actively maintained - last commit was 1 day ago.

Similar servers

Others in marketing

View all →

Seo94

Free Google Search Console MCP: your real GSC, Google Analytics and keyword data for AI agents.

622 2

Mcp Server Typescript93

DataForSEO API modelcontextprotocol server

261 9

Mailcheap92

Newsletters where you pay for the emails you send, not for dormant subscribers, at a fraction of the price of beehiiv and the like. Open source: self-host it, or use mailcheap.ai.

1.7k 8

io.github.nirholas/xactions92

X/Twitter automation MCP: scrape, post, schedule, analyze, engage. No API key required.

655 6

MCP Security Weekly

Get CVE alerts and security updates for io.attrikit/mcp and similar servers.

Community

Discussion

Start a conversation

Ask a question, share a tip, or report an issue.

Has anyone used this with Cursor?How do you handle auth?Any alternatives?