Connect your AI assistant with MCP
Connect a compatible remote MCP app to Attriboo, approve access, then ask questions about your recorded visits and revenue. The connection reads reports; it does not install tracking or add websites.
Instructions reviewed
Add Attriboo to a compatible app
- Find the app's remote MCP connection settings.
Use an app that supports a remote HTTP MCP server with OAuth. Its menu names and available connection options depend on the app.
- Enter the Attriboo server URL.
Use https://www.attriboo.com/api/mcp and choose OAuth authentication.
- Complete sign-in and approve access.
The app opens Attriboo's sign-in page if needed, then an approval screen for the requested workspace. Complete this yourself and return to the app.
- Ask the assistant to list your websites.
The list_sites tool returns the sites this connection can read. If there are none, add your website in the dashboard first.
Choose a useful first question
- Which sources brought the most recorded revenue in the last 30 days?
- Which landing pages received revenue credit, and under which attribution model?
- How do paid campaign costs compare with recorded campaign revenue?
- Did visitors from AI assistants become buyers this week?
Understand permissions and disconnect
OAuth requests analytics:read for a selected workspace. It can read reports, help and release notes. It cannot add websites, change settings or record data. Open Settings → API & MCP to see and disconnect connected apps.
An existing workspace API key can also authenticate MCP, but it is broader than the read-only OAuth grant. Keep keys in the client's private credential settings, never in a shared prompt.
Developer connection details
| Item | Value |
|---|---|
| Transport | Streamable HTTP |
| MCP endpoint | https://www.attriboo.com/api/mcp |
| Authorization server metadata | https://www.attriboo.com/.well-known/oauth-authorization-server |
| Protected resource metadata | https://www.attriboo.com/.well-known/oauth-protected-resource |
| OAuth scope | analytics:read |
| Authorization code protection | PKCE, S256 |
| Refresh tokens | Rotating; reconnect if revoked or expired |
Still need a hand?
Send a question without needing to sign in.