Google Analytics Admin integration
Google Analytics Admin integration for AI agents.
Google Analytics Admin integration for AI agents with secure authentication and server-side credential injection. Open Connector runs the OAuth, seals the token in an encrypted vault, and serves Google Analytics Admin tools to your agent over MCP or a typed API — credentials injected server-side, every call audited, nothing leaving your infrastructure. Open source (AGPL-3.0) and self-hostable.
What your agents can do
Real Google Analytics Admin actions, managed and audited.
Your user connects Google Analytics Admin once; your agent can then manage Google Analytics accounts, properties, data streams, conversions, audiences, and access reports — scoped to the OAuth permissions you grant and the tool allowlist you configure. Every action is least-privilege and written to a tamper-evident audit trail.
- 1
Your user grants Google Analytics Admin access once (OAuth) — the token lands in the vault.
- 2
Your agent calls a tool over MCP or the typed API; Open Connector injects the credential server-side.
- 3
Every routed call appends a hash-chained audit record — nothing leaves your infra.
Tools & triggers
Supported Google Analytics Admin tools.
28 tools are generated from the published Google Analytics Admin catalog. Descriptions are plain text; each action remains subject to its configured authentication and tool allowlist.
Showing 28 tools. All published catalog entries are included in this page's server-rendered HTML.
- Analyticsadmin AccountSummaries List
- Returns summaries of all accounts accessible by the caller.
- accountsummaries
- Analyticsadmin Accounts Delete
- Marks target Account as soft-deleted (ie: "trashed") and returns it. This API does not have a method to restore soft-deleted accounts. However, they can be restored using the Trash Can UI. If the accounts are not restored before the expiration time, the account and all child resources (eg: Properties, GoogleAdsLinks, Streams, AccessBindings) will be permanently purged. https://support.google.com/analytics/answer/6154772 Returns an error if the target is not found.
- accounts
- Analyticsadmin Accounts Get
- Lookup for a single Account.
- accounts
- Analyticsadmin Accounts List
- Returns all accounts accessible by the caller. Note that these accounts might not currently have GA properties. Soft-deleted (ie: "trashed") accounts are excluded by default. Returns an empty list if no relevant accounts are found. Note: The easiest way to retrieve a list of all properties you have access to is by using `ListAccountSummaries`.
- accounts
- Analyticsadmin Accounts Patch
- Updates an account.
- accounts
- Analyticsadmin Accounts ProvisionAccountTicket
- Requests a ticket for creating an account.
- accounts
- Analyticsadmin Accounts RunAccessReport
- Returns a customized report of data access records. The report provides records of each time a user reads Google Analytics reporting data. Access records are retained for up to 2 years. Data Access Reports can be requested for a property. Reports may be requested for any property, but dimensions that aren't related to quota can only be requested on Google Analytics 360 properties. This method is only available to Administrators. These data access records include GA UI Reporting, GA UI Explorations, GA Data API, and other products like Firebase & Admob that can retrieve data from Google Analytics through a linkage. These records don't include property configuration changes like adding a stream or changing a property's time zone. For configuration change history, see [searchChangeHistoryEvents](https://developers.google.com/analytics/devguides/config/admin/v1/rest/v1alpha/accounts/searchChangeHistoryEvents). To give your feedback on this API, complete the [Google Analytics Access Reports feedback](https://docs.google.com/forms/d/e/1FAIpQLSdmEBUrMzAEdiEKk5TV5dEHvDUZDRlgWYdQdAeSdtR4hVjEhw/viewform) form.
- accounts
- Analyticsadmin Accounts SearchChangeHistoryEvents
- Searches through all changes to an account or its children given the specified set of filters. Only returns the subset of changes supported by the API. The UI may return additional changes.
- accounts
- Analyticsadmin Properties AcknowledgeUserDataCollection
- Acknowledges the terms of user data collection for the specified property. This acknowledgement must be completed (either in the Google Analytics UI or through this API) before MeasurementProtocolSecret resources may be created.
- properties
- Analyticsadmin Properties ConversionEvents Create
- Deprecated: Use `CreateKeyEvent` instead. Creates a conversion event with the specified attributes.
- properties
- Analyticsadmin Properties ConversionEvents List
- Deprecated: Use `ListKeyEvents` instead. Returns a list of conversion events in the specified parent property. Returns an empty list if no conversion events are found.
- properties
- Analyticsadmin Properties Create
- Creates a Google Analytics property with the specified location and attributes.
- properties
- Analyticsadmin Properties CustomDimensions Archive
- Archives a CustomDimension on a property.
- properties
- Analyticsadmin Properties CustomDimensions Create
- Creates a CustomDimension.
- properties
- Analyticsadmin Properties CustomDimensions List
- Lists CustomDimensions on a property.
- properties
- Analyticsadmin Properties CustomMetrics Create
- Creates a CustomMetric.
- properties
- Analyticsadmin Properties CustomMetrics List
- Lists CustomMetrics on a property.
- properties
- Analyticsadmin Properties DataStreams Create
- Creates a DataStream.
- properties
- Analyticsadmin Properties DataStreams List
- Lists DataStreams on a property.
- properties
- Analyticsadmin Properties DataStreams MeasurementProtocolSecrets Create
- Creates a measurement protocol secret.
- properties
- Analyticsadmin Properties DataStreams MeasurementProtocolSecrets List
- Returns child MeasurementProtocolSecrets under the specified parent Property.
- properties
- Analyticsadmin Properties FirebaseLinks Create
- Creates a FirebaseLink. Properties can have at most one FirebaseLink.
- properties
- Analyticsadmin Properties FirebaseLinks List
- Lists FirebaseLinks on a property. Properties can have at most one FirebaseLink.
- properties
- Analyticsadmin Properties GoogleAdsLinks Create
- Creates a GoogleAdsLink.
- properties
- Analyticsadmin Properties GoogleAdsLinks List
- Lists GoogleAdsLinks on a property.
- properties
- Analyticsadmin Properties KeyEvents Create
- Creates a Key Event.
- properties
- Analyticsadmin Properties KeyEvents List
- Returns a list of Key Events in the specified parent property. Returns an empty list if no Key Events are found.
- properties
- Analyticsadmin Properties List
- Returns child Properties under the specified parent Account. Properties will be excluded if the caller does not have access. Soft-deleted (ie: "trashed") properties are excluded by default. Returns an empty list if no relevant properties are found.
- properties
FAQ
Google Analytics Admin integration, answered
- How do AI agents use Google Analytics Admin through Open Connector?
- Your user connects Google Analytics Admin once with one of its cataloged authentication methods. Open Connector stores the credential in an encrypted vault and exposes Google Analytics Admin tools to your agent over MCP or a typed API, with credentials injected server-side on each call.
- Is this a Google Analytics Admin MCP server?
- Yes. Open Connector can serve Google Analytics Admin as a named MCP server with a scoped allowlist and a per-user connection URL, so any MCP client can call Google Analytics Admin actions with credentials injected server-side.
- Where do Google Analytics Admin credentials live?
- In your own infrastructure. Open Connector keeps credentials in its own vault and injects them at call time, so they never leave your environment.
Give your agents Google Analytics Admin — keep the keys.
Open source, self-hostable, with Google Analytics Admin credentials that never leave your infrastructure. Run it from source today.