Is io.github.mharnett/gtm-ga4 safe to use?

io.github.mharnett/gtm-ga4 has no known CVEs as of the latest MCPpedia security scan. It does not require authentication, so any local process can connect — keep this in mind in shared environments.

How do I install io.github.mharnett/gtm-ga4?

io.github.mharnett/gtm-ga4 supports copy-paste install configs on its MCPpedia page for Claude Desktop, Cursor, and Claude Code. Scroll to the Quick Install section and select your client.

What can io.github.mharnett/gtm-ga4 do?

io.github.mharnett/gtm-ga4 provides 13 tools: gtm_list_tags, gtm_get_tag, gtm_update_tag, gtm_create_tag, gtm_list_triggers and 8 more. See the full tools list on the server page for descriptions and parameters.

What AI clients work with io.github.mharnett/gtm-ga4?

io.github.mharnett/gtm-ga4 is compatible with claude-desktop, cursor, claude-code. It uses stdio and http transport.

Is io.github.mharnett/gtm-ga4 actively maintained?

io.github.mharnett/gtm-ga4 is recently maintained — last commit was 33 days ago. It has 1 GitHub stars.

io.github.mharnett/gtm-ga4

mcp-gtm-ga4

GTM + GA4 MCP: tag management, consent auditing, workspace versioning, reports.

1 13 tools GitHub npm

No known CVEs

No license

Maintained

Last commit 33d ago

Works with most clients

Transport: stdio, http

13 tools · ~735 tok

Grade B · 0.4% of 200K ctx

Edit this pageView history

Analytics Marketing

Step 1

Install in your client

Config is the same across clients — only the file and path differ.

Supported in Claude Desktopstdio, http · Node 18+

Paste into ~/Library/Application Support/Claude/claude_desktop_config.json

{
  "mcpServers": {
    "gtm-ga4": {
      "env": {
        "GTM_ACCOUNT_ID": "1234567890",
        "GA4_PROPERTY_ID": "331956119",
        "GTM_CONTAINER_ID": "9876543",
        "GOOGLE_APPLICATION_CREDENTIALS": "/path/to/service-account.json"
      },
      "args": [
        "/path/to/mcp-gtm-ga4/dist/index.js"
      ],
      "command": "node"
    }
  }
}

Are you the author?

Add this badge to your README to show your security score and help users find safe servers.

Embed in your READMEAbout badges →

[![MCPpedia Score](https://mcppedia.org/api/badge/io-github-mharnett-gtm-ga4)](https://mcppedia.org/s/io-github-mharnett-gtm-ga4)

Read me

What io.github.mharnett/gtm-ga4 does

MCP server for Google Tag Manager and GA4 -- tag management, consent auditing, workspace versioning, and analytics reporting via Claude.

Test This Server

Run this in your terminal to verify the server starts. Then let us know if it worked — your result helps other developers.

npx -y 'mcp-gtm-ga4' 2>&1 | head -1 && echo "✓ Server started successfully"

After testing, let us know if it worked:

Loading README…

Scored, not listed

Why this score

Five weighted categories — click any category to see the underlying evidence.

Score breakdown

78/100across 5 weighted dimensions

How we score →

0255075100

−22

Security

Maintenance

Efficiency

Documentation

Compatibility

Categoriesclick a row to see evidence

Security

OSV.dev

No known CVEs.

Checked mcp-gtm-ga4 against OSV.dev.

Inventory

Tools (13)

Click any tool to inspect its schema.

~735 tokens total

Community

Reviews

Be the first to review

Have you used this server?

Share your experience — it helps other developers decide.

How easy was setup?Did it work reliably?How was the documentation?

Frequently Asked Questions

Is io.github.mharnett/gtm-ga4 safe to use?: io.github.mharnett/gtm-ga4 has no known CVEs as of the latest MCPpedia security scan. It does not require authentication, so any local process can connect — keep this in mind in shared environments.
How do I install io.github.mharnett/gtm-ga4?: io.github.mharnett/gtm-ga4 supports copy-paste install configs on its MCPpedia page for Claude Desktop, Cursor, and Claude Code. Scroll to the Quick Install section and select your client.
What can io.github.mharnett/gtm-ga4 do?: io.github.mharnett/gtm-ga4 provides 13 tools: gtm_list_tags, gtm_get_tag, gtm_update_tag, gtm_create_tag, gtm_list_triggers and 8 more. See the full tools list on the server page for descriptions and parameters.
What AI clients work with io.github.mharnett/gtm-ga4?: io.github.mharnett/gtm-ga4 is compatible with claude-desktop, cursor, claude-code. It uses stdio and http transport.
Is io.github.mharnett/gtm-ga4 actively maintained?: io.github.mharnett/gtm-ga4 is recently maintained — last commit was 33 days ago. It has 1 GitHub stars.

Similar servers

Others in analytics / marketing

View all →

Mcp Server Typescript92

DataForSEO API modelcontextprotocol server

223 9

Lighthouse Mcp Server88

MCP server that enables AI agents to perform comprehensive web audits using Google Lighthouse with 13+ tools for performance, accessibility, SEO, and security analysis.

61 1

io.github.dynatrace-oss/dynatrace-managed-mcp88

MCP server for Dynatrace Managed to access logs, events, and metrics.

21 2

io.github.surendranb/google-analytics-mcp88

An MCP server that provides [describe what your server does]

222 3

MCP Security Weekly

Get CVE alerts and security updates for io.github.mharnett/gtm-ga4 and similar servers.

Community

Discussion

Start a conversation

Ask a question, share a tip, or report an issue.

Has anyone used this with Cursor?How do you handle auth?Any alternatives?

Edit this pageView history

Analytics Marketing

Step 1

Install in your client

Config is the same across clients — only the file and path differ.

Supported in Claude Desktopstdio, http · Node 18+

Paste into ~/Library/Application Support/Claude/claude_desktop_config.json

{
  "mcpServers": {
    "gtm-ga4": {
      "env": {
        "GTM_ACCOUNT_ID": "1234567890",
        "GA4_PROPERTY_ID": "331956119",
        "GTM_CONTAINER_ID": "9876543",
        "GOOGLE_APPLICATION_CREDENTIALS": "/path/to/service-account.json"
      },
      "args": [
        "/path/to/mcp-gtm-ga4/dist/index.js"
      ],
      "command": "node"
    }
  }
}

Are you the author?

Add this badge to your README to show your security score and help users find safe servers.

Embed in your READMEAbout badges →

[![MCPpedia Score](https://mcppedia.org/api/badge/io-github-mharnett-gtm-ga4)](https://mcppedia.org/s/io-github-mharnett-gtm-ga4)

Read me

What io.github.mharnett/gtm-ga4 does

MCP server for Google Tag Manager and GA4 -- tag management, consent auditing, workspace versioning, and analytics reporting via Claude.

Test This Server

Run this in your terminal to verify the server starts. Then let us know if it worked — your result helps other developers.

npx -y 'mcp-gtm-ga4' 2>&1 | head -1 && echo "✓ Server started successfully"

After testing, let us know if it worked:

README

mcp-gtm-ga4

MCP server for Google Tag Manager and GA4 -- tag management, consent auditing, workspace versioning, and analytics reporting via Claude.

Features

14 tools spanning GTM workspace management (tags, triggers, variables), consent compliance auditing, workspace preview/versioning, and GA4 reporting
Sandbox safety -- all write operations verify they target the resolved workspace, refusing to write to non-sandbox workspaces
Multi-client support -- configure per-client via environment variables
Auto-detects Default Workspace ID -- no need to manually specify workspace IDs unless using a custom sandbox

Installation

npm install mcp-gtm-ga4

Or clone and build:

git clone https://github.com/mharnett/mcp-gtm-ga4.git
cd mcp-gtm-ga4
npm install
npm run build

Configuration

Security: Never share your .mcp.json file or commit it to git -- it may contain API credentials. Add .mcp.json to your .gitignore.

Runtime configuration is via environment variables.

Variable	Required	Description
`GOOGLE_APPLICATION_CREDENTIALS`	Yes	Path to a Google credential JSON key file (service account or authorized-user — see Authentication below)
`GTM_ACCOUNT_ID`	Yes	GTM account ID
`GTM_CONTAINER_ID`	Yes	GTM container ID
`GA4_PROPERTY_ID`	Yes	GA4 property ID
`GTM_SANDBOX_WORKSPACE_ID`	No	Override workspace ID (auto-detects Default Workspace if omitted)
`MCP_SERVER_NAME`	No	Server name (defaults to package name `mcp-gtm-ga4`)

See config.example.json for a reference template. The only value read from disk is oauth.scope (in an optional config.json) — the single source of truth for the OAuth scope the onboarding paths request. If no config.json is present, the committed minimum scope is used.

Authentication

This MCP supports two auth models. Both feed the same GOOGLE_APPLICATION_CREDENTIALS runtime path.

Precedence & mechanism

There is no runtime service-account-vs-OAuth toggle. Both models converge on a single slot — GOOGLE_APPLICATION_CREDENTIALS — which the runtime hands to GoogleAuth({ keyFile }). Whichever file you point that env var at is the credential:

a service-account JSON key (option 1 below), or
the authorized_user keyfile the auth subcommand writes (option 2) — a file that plugs into the exact same slot.

So the only real precedence rule is failure handling: an explicitly-configured keyfile is used; when GOOGLE_APPLICATION_CREDENTIALS is unset the server fails loudly at startup with an onboarding error naming both the service-account path and the auth OAuth helper. It deliberately does not fall back to Google's Application Default Credentials (gcloud user creds / GCE metadata server) — no silent machine-local default, no silent runtime failover.

1. Service account (primary, recommended for unattended/server use)

Create a service account in your GCP project, download its JSON key, grant it the GTM container role (on the target GTM container) and GA4 property access, and point GOOGLE_APPLICATION_CREDENTIALS at the key file. No OAuth flow, no browser, no refresh token. This is the recommended path for headless/server/unattended deployments.

2. User OAuth (interactive, for users without a service account)

If you can't use a service account, mint a user credential with your own Google OAuth client (a "Desktop app" OAuth 2.0 Client ID created in your own GCP project — enable the Tag Manager API and the Google Analytics Admin + Data APIs). Two equivalent onboarding commands, both hardened with PKCE (RFC 7636, S256) and both requesting the scope from config.json (oauth.scope) so they never drift:

export GOOGLE_CLIENT_ID=your-client-id.apps.googleusercontent.com
export GOOGLE_CLIENT_SECRET=your-client-secret

# Option A: write an authorized_user credential file directly
node dist/index.js auth --output .

... [View full README on GitHub](https://github.com/mharnett/mcp-gtm-ga4#readme)

Loading README…

Scored, not listed

Why this score

Five weighted categories — click any category to see the underlying evidence.

Score breakdown

78/100across 5 weighted dimensions

How we score →

0255075100

−22

Security

Maintenance

Efficiency

Documentation

Compatibility

Categoriesclick a row to see evidence

Security

OSV.dev

No known CVEs.

Checked mcp-gtm-ga4 against OSV.dev.

Inventory

Tools (13)

Click any tool to inspect its schema.

~735 tokens total

Community

Reviews

Be the first to review

Have you used this server?

Share your experience — it helps other developers decide.

How easy was setup?Did it work reliably?How was the documentation?

Frequently Asked Questions

Is io.github.mharnett/gtm-ga4 safe to use?: io.github.mharnett/gtm-ga4 has no known CVEs as of the latest MCPpedia security scan. It does not require authentication, so any local process can connect — keep this in mind in shared environments.
How do I install io.github.mharnett/gtm-ga4?: io.github.mharnett/gtm-ga4 supports copy-paste install configs on its MCPpedia page for Claude Desktop, Cursor, and Claude Code. Scroll to the Quick Install section and select your client.
What can io.github.mharnett/gtm-ga4 do?: io.github.mharnett/gtm-ga4 provides 13 tools: gtm_list_tags, gtm_get_tag, gtm_update_tag, gtm_create_tag, gtm_list_triggers and 8 more. See the full tools list on the server page for descriptions and parameters.
What AI clients work with io.github.mharnett/gtm-ga4?: io.github.mharnett/gtm-ga4 is compatible with claude-desktop, cursor, claude-code. It uses stdio and http transport.
Is io.github.mharnett/gtm-ga4 actively maintained?: io.github.mharnett/gtm-ga4 is recently maintained — last commit was 33 days ago. It has 1 GitHub stars.

Similar servers

Others in analytics / marketing

View all →

Mcp Server Typescript92

DataForSEO API modelcontextprotocol server

223 9

Lighthouse Mcp Server88

MCP server that enables AI agents to perform comprehensive web audits using Google Lighthouse with 13+ tools for performance, accessibility, SEO, and security analysis.

61 1

io.github.dynatrace-oss/dynatrace-managed-mcp88

MCP server for Dynatrace Managed to access logs, events, and metrics.

21 2

io.github.surendranb/google-analytics-mcp88

An MCP server that provides [describe what your server does]

222 3

MCP Security Weekly

Get CVE alerts and security updates for io.github.mharnett/gtm-ga4 and similar servers.

Community