No blockers found
assessed on 3 of 4 dimensions
MaintenanceActively maintained — last activity 0 days ago.GitHub · as of Jul 13, 2026
PassProvenanceOrigin linked to a public source repository.Official MCP Registry · as of Jul 13, 2026
PassSupply chainNo known vulnerabilities in scanned package dependencies (OSV).OSV (Google Open Source Vulnerabilities) · as of Jul 13, 2026
PassManifest integrityManifest capture requires running the package (sandbox phase).
PendingBehavioral trustNo live endpoint to observe.
Not applicable
Connect
npm package · v0.1.2 · stdio
UMAMI_API_KEYsecret
Umami Cloud or client API keyUMAMI_ACCESS_TOKENsecret
Existing self-hosted Bearer tokenUMAMI_USERNAME
Self-hosted Umami usernameUMAMI_PASSWORDsecret
Self-hosted Umami passwordUMAMI_URL
Self-hosted Umami instance originUMAMI_API_URL
Optional exact Umami API root for a reverse proxyUMAMI_WEBSITE_IDS
Optional comma-separated website UUID allowlistUMAMI_TOOLSETS
Comma-separated toolsets or all
Provenance
- Official MCP Registry · as of Jul 13, 2026 · registry-tos
- OSV (Google Open Source Vulnerabilities) · as of Jul 13, 2026 · CC-BY-4.0
- GitHub · as of Jul 13, 2026 · github-tos
Every verdict is attributable to its sources and recomputed from our own landed copy, never read live on this page.