MCP Integration
The Model Context Protocol (MCP) lets AI assistants query your Zenovay analytics directly. Ask questions like "How many visitors did I get this week?" or "What are my top pages?" and get live data from your dashboard — without leaving your IDE or chat.
MCP is available on all plans (Free, Pro, Scale, Enterprise). Daily query limits vary by plan. Authentication uses OAuth 2.1 — no API key configuration needed.
Quick Start
See also: Browser Extension — detect the Zenovay tracker on any site and watch live events from Chrome or Firefox.
Connecting takes under a minute. Just add the server URL to your MCP client — OAuth handles the rest.
1. Add the MCP Server
Add the Zenovay server URL to your AI client. No API key or manual configuration required.
{
"mcpServers": {
"zenovay-analytics": {
"url": "https://api.zenovay.com/mcp"
}
}
}{
"mcpServers": {
"zenovay-analytics": {
"url": "https://api.zenovay.com/mcp"
}
}
}{
"servers": {
"zenovay-analytics": {
"type": "http",
"url": "https://api.zenovay.com/mcp"
}
}
}{
"mcpServers": {
"zenovay-analytics": {
"serverUrl": "https://api.zenovay.com/mcp"
}
}
}You can also add it via the Claude Code CLI:
claude mcp add --transport http zenovay-analytics https://api.zenovay.com/mcp2. Authorize Access
When you first connect, your MCP client will open a browser window showing the Zenovay authorization page. Here you can:
- Select your team (if you belong to multiple teams)
- Set permissions for each tool category (None / Read / Write)
- Click Authorize to grant access
This is a one-time setup. Your MCP client stores the OAuth token and refreshes it automatically.
The authorization page uses OAuth 2.1 with PKCE — the industry standard used by Stripe, GitHub, and other platforms. Your credentials are never shared with the MCP client.
3. Start Querying
Once authorized, you can ask your AI assistant questions like:
- "List my websites"
- "How many visitors did zenovay.com get this week?"
- "What are the top 10 pages by traffic?"
- "Compare this week's bounce rate to last week"
- "Show me any anomalies in my traffic"
- "Export the last 30 days of analytics as CSV"
- "Create a new goal for my signup page"
- "Show me all my goals and their conversion rates"
- "Add an IP exclusion for our office network"
How OAuth Authorization Works
When your MCP client connects to https://api.zenovay.com/mcp, the following happens automatically:
- Discovery — The client fetches OAuth metadata from
/.well-known/oauth-authorization-server - Registration — The client registers itself (one-time) via Dynamic Client Registration
- Authorization — A browser window opens showing the Zenovay consent page
- Token Exchange — After you authorize, the client exchanges the code for an access token
- Connected — All MCP requests use the OAuth token. It refreshes automatically when it expires.
You can view and revoke connected applications in Settings > Usage in your Zenovay Dashboard.
Connection Details
| Property | Value |
|---|---|
| Server URL | https://api.zenovay.com/mcp |
| Transport | Streamable HTTP (JSON-RPC 2.0) |
| Authentication | OAuth 2.1 with PKCE (automatic) |
| Protocol Version | 2025-11-25 |
| OAuth Discovery | https://api.zenovay.com/.well-known/oauth-authorization-server |
Permissions
During authorization, you choose the access level for each tool category:
| Level | Description |
|---|---|
| None | No access to tools in this category |
| Read | Query data, view analytics, export reports |
| Write | Read access plus creating goals, managing funnels, updating settings |
Tool Categories
| Category | Tools | Write Available |
|---|---|---|
| Analytics | 8 tools — visitors, pages, traffic sources, geo, tech, real-time | No (read-only) |
| Advanced Analytics | 13 tools — funnels, goals, sessions, heatmaps, errors, revenue, uptime | Yes |
| AI Insights | 4 tools — insights, anomalies, weekly digest, recommendations | No (read-only) |
| Management | 29 tools — websites, goals, funnels, tracking, reports, API keys | Yes |
| Settings | 16 tools — exclusions, notifications, team members, domains | Yes |
| Webhooks | 6 tools — webhook CRUD, deliveries, automation rules | Yes |
See the full Tools Reference for detailed parameters, examples, and response schemas for all tools.
Rate Limits
Daily query limits are per team (shared across all connected applications):
| Plan | Queries / Day | Requests / Minute |
|---|---|---|
| Free | 25 | 10 |
| Pro | 100 | 30 |
| Scale | 500 | 60 |
| Enterprise | 10,000 | 120 |
Most tools cost 1 query. The query_analytics natural language tool costs 3 queries due to its AI processing.
Usage resets daily at 00:00 UTC. Check your remaining quota anytime with the get_api_usage tool, or in Settings > Usage in your dashboard.
When you hit the daily limit, requests return error code -32003. Do not retry — use get_api_usage at the start of your session to check remaining quota before running expensive queries.
Plan Enforcement
Some MCP tools are gated behind paid plans. Tools like get_session_replays, get_heatmap_data, get_revenue, and get_retention_data require a Pro or higher subscription, while export_data requires Scale or higher. Analytics queries are automatically clamped to your plan's data retention window (e.g., 1 year for Free, 2 years for Pro).
{
"jsonrpc": "2.0",
"id": 1,
"error": {
"code": -32002,
"message": "This feature requires a paid plan. Upgrade at https://app.zenovay.com/plans"
}
}Managing Connected Applications
You can view and revoke OAuth tokens for connected MCP clients:
- Go to Settings > Usage in your Zenovay Dashboard
- Scroll to the MCP Requests section
- View daily usage, rate limits, and connected application count
- To revoke access, go to API Keys and manage tokens from there
Revoking a token immediately disconnects the MCP client. The client will need to re-authorize to reconnect.
Error Handling
When something goes wrong, the server returns a JSON-RPC error:
| Code | Meaning | What to Do |
|---|---|---|
-32001 | Auth failed | Re-authorize your MCP client (token may have expired) |
-32002 | Feature requires upgrade | Upgrade your plan at app.zenovay.com/plans |
-32003 | Daily limit reached | Wait until 00:00 UTC or upgrade your plan |
-32007 | Write permission required | Re-authorize with Write access for the category |
-32008 | Category not enabled | Re-authorize and enable the required category |
-32601 | Unknown tool | Check the tool name — use tools/list to see available tools |
Troubleshooting
"Needs authentication" in Claude Code
This means the OAuth flow hasn't completed yet. Run claude mcp list to check status, then start a new session — it will prompt you to authorize in the browser.
Browser doesn't open for authorization
Make sure your MCP client supports OAuth 2.1. If using an older client, check for updates. The server URL alone (https://api.zenovay.com/mcp) should trigger automatic OAuth discovery.
"Invalid or expired OAuth token"
Your token has expired and automatic refresh failed. Remove the server and re-add it:
claude mcp remove zenovay-analytics
claude mcp add --transport http zenovay-analytics https://api.zenovay.com/mcpRate limit errors
Check your current usage with get_api_usage or in Settings > Usage. The query_analytics tool costs 3 queries — use specific tools like get_visitors (1 query) when possible.
Prompt for AI Assistants
If your AI assistant doesn't automatically detect the MCP server, you can paste this prompt to help it connect:
Connect to the Zenovay Analytics MCP server at https://api.zenovay.com/mcp
Authentication: OAuth 2.1 (automatic). When you first connect, a browser window will open for me to authorize access. No API key is needed.
Setup:
- Server URL: https://api.zenovay.com/mcp
- Transport: HTTP (Streamable HTTP, JSON-RPC 2.0)
- OAuth discovery: https://api.zenovay.com/.well-known/oauth-authorization-server
After connecting, call list_websites first to get my website IDs — every analytics tool requires a website_id parameter.
Available tool categories:
- Analytics (8 tools): visitors, pages, traffic sources, geographic data, real-time
- Advanced (13 tools): funnels, goals, sessions, heatmaps, errors, revenue, uptime
- AI Insights (4 tools): AI-generated insights, anomalies, weekly digest, recommendations
- Management (29 tools): website settings, goals, funnels, tracking, reports
- Settings (16 tools): IP exclusions, notifications, team members, domains
- Webhooks (6 tools): webhook CRUD, deliveries, automation rules
Rate limits: Free 25/day, Pro 100/day, Scale 500/day, Enterprise 10,000/day. The query_analytics tool costs 3 queries; all others cost 1.This prompt gives any MCP-capable AI everything it needs to connect and start querying your analytics. Just paste it into your conversation.
Next Steps
- Tools Reference — Full documentation of all tools with parameters and examples
- Permissions & Limits — Access modes, rate limits, and error codes