MCP documentation

Connect an assistant to your workspace, read recorded revenue reports, and approve website setup separately. This reference covers every released tool, its arguments and its result.

Streamable HTTP endpointhttps://www.attriboo.com/api/mcp

Start with list_sites MCP Markdown OAuth application guide

Connect and approve access

In a client that supports remote Streamable HTTP MCP with OAuth, add the endpoint above and choose OAuth authentication.
Complete Attriboo sign-in yourself, choose a workspace and approve analytics:read for reports.
Call list_sites, then choose a returned website ID or domain before requesting reports.
For website setup, request analytics:read sites:write explicitly and complete a new workspace owner/admin approval.

A workspace key can authenticate existing MCP clients that support a private Bearer header, but it cannot use the setup tools. Keep credentials in the client’s private settings. The MCP server does not connect payment accounts, change billing, record payments or deploy your website.

Client connection walkthrough Permission comparison Agent setup prompt

Discover tools and read results

Use a compatible MCP client to initialize the connection and send the initialized notification before tool operations. It handles HTTP negotiation, OAuth and any session headers. The examples below show JSON-RPC messages sent through that initialized connection.

Discover the server's tools

{
  "jsonrpc": "2.0",
  "id": 1,
  "method": "tools/list",
  "params": {}
}

Successful tool results contain a content array with a text block. Parse that block’s text as JSON to read the data. The REST status/data envelope is not added. Each tool page shows the call, decoded result, and full MCP result wrapper.

Tool execution failures use isError: true and a readable text message. Authentication or protocol failures can happen before a tool runs; an HTTP 200 alone does not prove a successful tool result.

Tool error result

{
  "content": [
    {
      "type": "text",
      "text": "Choose a website from list_sites."
    }
  ],
  "isError": true
}

All 15 tools

Workspace

Tool	Purpose and access
`list_sites`	Find the websites, IDs, currencies and timezones available in the authorized workspace. Report OAuth or workspace key

Reports

Tool	Purpose and access
`get_overview`	Read headline revenue, traffic, conversion and advertising metrics with comparison changes. Report OAuth or workspace key
`get_timeseries`	Read traffic and revenue over daily, weekly, monthly or quarterly buckets. Report OAuth or workspace key
`get_breakdown`	Rank traffic and revenue by any supported breakdown dimension. Report OAuth or workspace key
`get_recent_sales`	Read recorded payments and refunds, newest first, with observed attribution details. Report OAuth or workspace key
`get_funnels`	Read independent standard stages, list saved definitions, or inspect an ordered saved funnel. Report OAuth or workspace key
`get_ai_search`	Keep crawler activity, referred human visitors and revenue credit separate for each AI engine. Report OAuth or workspace key
`get_time_to_purchase`	Group purchases by time since a preceding recorded entry visit. Report OAuth or workspace key
`get_realtime`	Read visitors active in the last five minutes. Report OAuth or workspace key

Website setup

Tool	Purpose and access
`create_website`	Add a website, or reuse its existing domain, within the workspace's current plan. Setup OAuth · owner/admin
`get_tracking_script`	Retrieve an installation snippet for the actual website and its saved privacy choices. Setup OAuth · owner/admin
`verify_installation`	Check whether Attriboo has received tracking activity for this website. Setup OAuth · owner/admin

Help and releases

Tool	Purpose and access
`get_changelog`	Read Attriboo's release notes, newest first, through an authenticated MCP connection. Report OAuth or workspace key
`search_help_articles`	Find public help articles by words in their title, summary, keywords or Markdown content. Report OAuth or workspace key
`get_help_article`	Retrieve one complete help article as Markdown using a returned slug. Report OAuth or workspace key

Keep report selections consistent

Dates are UTC. Custom from and to dates are both inclusive. Money is integer cents in the website currency. Report history covers available records in the latest 365 days. Keep the website, dates, currency and attribution model beside any answer.

Follow a returned next_cursor with the same tool and selection. Page size limits rows, not headline totals. Some small-site responses omit cursors; a single limited page is not a guaranteed complete export. The dedicated live tool uses five minutes, while period: realtime on other report tools selects the last 30 minutes.

Standard funnel stages count cohort activities independently. To read an ordered saved funnel, use get_funnels with funnel: saved, then call it again with the returned funnel ID. Crawler requests are separate from human visits and do not prove citations.

Pagination and coverage Saved-funnel examples Dates and attribution

Errors, rate limits and disconnecting

The shared credential limit is 120 requests per minute per server instance. HTTP authentication failures can occur before the tool handler; reconnect an expired or revoked OAuth app. Stop retrying unchanged permission failures. For a capacity failure, retry or shorten the range; never turn a failed report into zero activity.

If a report returns needs_site: true, choose one of the returned websites and call the report again with site. Setup errors require current workspace owner/admin access and the separately approved setup grant.

Disconnect an app in Settings → API & MCP → Connected AI apps. Key rotation invalidates clients using that key; it does not disconnect separate OAuth grants.

Errors and retries OAuth refresh and revocation