Google Analytics 4

This connector wraps the Google Analytics Data API v1beta (analyticsdata.googleapis.com) and Admin API v1beta (analyticsadmin.googleapis.com).

Setup (one-time, about 10 minutes):

1. Go to https://console.cloud.google.com → pick or create a project.
2. APIs & Services → Library → enable both:
   • Google Analytics Admin API (https://console.cloud.google.com/apis/library/analyticsadmin.googleapis.com)
   • Google Analytics Data API (https://console.cloud.google.com/apis/library/analyticsdata.googleapis.com)
3. APIs & Services → OAuth consent screen: Internal on Google Workspace, otherwise External with publishing status In production. While an app is in Testing, Google revokes its refresh tokens after 7 days.
4. APIs & Services → Credentials → Create Credentials → OAuth client ID → application type Web application → authorized redirect URI https://cloud.anythingmcp.com/api/mcp-oauth/callback on AnythingMCP Cloud, or <your AnythingMCP server URL>/api/mcp-oauth/callback when you host AnythingMCP yourself.
5. Paste the client ID and secret into GOOGLE_CLIENT_ID and GOOGLE_CLIENT_SECRET, leave GOOGLE_REFRESH_TOKEN empty, and install.
6. On the connector page, click Authorize with Provider and sign in with a Google account that has access to your GA4 properties. The refresh token is stored encrypted and access tokens are renewed automatically.

Scope: https://www.googleapis.com/auth/analytics.readonly. The authorization URL carries access_type=offline&prompt=consent, so Google returns a refresh token every time you authorize.

Already have a refresh token? You can paste it into GOOGLE_REFRESH_TOKEN instead of step 6, for example one minted in the OAuth Playground (https://developers.google.com/oauthplayground → ⚙️ → 'Use your own OAuth credentials') with the scope above (add https://developers.google.com/oauthplayground as a redirect URI of the client first). It must come from the same OAuth client as GOOGLE_CLIENT_ID.

Authentication: OAuth2 with refresh — the engine exchanges refresh_token → access_token against https://oauth2.googleapis.com/token automatically and sends Authorization: Bearer ACCESS_TOKEN on every call. Tokens are cached and refreshed on 401.

Service accounts are NOT supported yet — they require JWT RS256 signing which our engine doesn't do. Workaround: create a dedicated 'automation' Google account, grant it Viewer access to the GA properties you care about, and authorize the connector with that account. The token never expires unless the account password changes or the OAuth grant is revoked.

Two hosts in one adapter: tools transparently call either Admin (admin endpoints) or Data (report endpoints) — paths are absolute URLs so the engine routes correctly. No extra config needed.

Property IDs: GA4 properties are 9-12 digit numeric IDs (NOT the measurement ID G-XXXXXXXX, NOT the Universal Analytics view ID). Find them via ga4_get_account_summaries (the first call you should make) or in the GA admin UI under Property Settings → Property details.

Reports — runReport body shape:

• dimensions: array of {name: 'pagePath'} — see https://ga.dev/api/data/v1/dimensions for the full list (~190 built-in).
• metrics: array of {name: 'sessions'} — see https://ga.dev/api/data/v1/metrics (~80 built-in).
• dateRanges: array of {startDate: '2025-01-01', endDate: 'today'}. startDate accepts YYYY-MM-DD, today, yesterday, or NdaysAgo.
• dimensionFilter / metricFilter: optional Filter expressions.
• limit (default 10k, max 250k), offset, orderBys.

Realtime: runRealtimeReport looks at the last 30 minutes. Only a subset of dimensions/metrics work here (those with realtime in their docs).

Funnel reports: runFunnelReport is in v1alpha — uses a multi-step funnel definition. See instructions in tool description.

Quotas:

• Data API: 200k requests/day per project, 5k tokens/hour, 25k tokens/day. Token cost depends on report complexity — see https://ga.dev/api/data/v1/quotas.
• Admin API: 1500 requests/hour per project, 100k/day.
• 429 → exponential backoff (engine handles retry on quota errors).

Out of scope here: BigQuery export, GTM (Tag Manager) — separate APIs, would be a sibling adapter.