{ "data": { "a": { "slug": "amplitude", "name": "Amplitude", "vendor": "Amplitude, Inc.", "vendorUrl": "https://amplitude.com", "kind": "http-api", "category": "product-analytics", "summary": "Amplitude is a hosted product analytics platform that records user events and answers questions about funnels, retention, cohorts, experiments and feature flags. Agents reach it through an official remote MCP server, REST APIs and the `amp` command line.", "url": "https://www.anchorterminal.com/tools/amplitude", "markdownUrl": "https://www.anchorterminal.com/tools/amplitude.md", "slimMarkdownUrl": "https://www.anchorterminal.com/tools/amplitude.min.md", "jsonUrl": "https://www.anchorterminal.com/api/v1/tools/amplitude.json", "dns": "amplitude.grade.anchorterminal.com", "repo": "https://github.com/amplitude/mcp-marketplace", "license": "Proprietary service under Amplitude's terms of service. The SDKs, the `amp` CLI and the MCP marketplace plugins on GitHub and npm are MIT", "transports": [ "http", "streamable-http" ], "remoteUrl": "https://mcp.amplitude.com/mcp", "packages": [ { "registry": "npm", "name": "@amplitude/developer-cli" }, { "registry": "npm", "name": "@amplitude/analytics-node" }, { "registry": "pypi", "name": "amplitude-analytics" } ], "auth": "mixed", "authNotes": "Access is self-serve, with no app review or partner approval. The MCP server takes only OAuth 2.0 (authorisation code with PKCE S256, dynamic client registration, scopes `mcp:read`, `mcp:write` and `offline_access`), and a person signs in to Amplitude in a browser. Each call runs with that user's permissions, limited by two role actions, Use MCP (read) and Use MCP (write), per project. The Developer API takes a Bearer token from the OAuth device flow or a personal access token with eight scopes. The older REST APIs use HTTP Basic with a project API key and secret key, the Experiment Management API a management key, and HTTP V2 ingestion the public project API key in the request body.", "pricing": "freemium", "pricingNotes": "Free plan with 2 million events a month and no card, and the pricing page says MCP and agent access work on every plan. Plus is usage-based from $0 with the first 2 million events free, up to 70 million, and needs a card to see an estimate. Growth and Enterprise are priced by sales. API and MCP calls aren't metered in money. There's no separate sandbox, so an agent starts on a Free organisation (https://amplitude.com/pricing, checked 2026-10-07).", "priceSummary": "Freemium", "where": "hosted", "x402": { "level": "no", "evidence": "No x402, MPP or L402 in the API docs, the Developer API's OpenAPI document or the pricing page (checked 2026-10-07).", "endpoints": [] }, "toolCount": 45, "popularity": { "githubStars": null, "npmWeekly": 1331780, "pypiWeekly": 1779665, "asOf": "2026-10-07" }, "docsUrl": "https://amplitude.com/docs/apis", "llmsTxt": "https://amplitude.com/docs/llms.txt", "openapi": "https://developer-api.amplitude.com/openapi.yaml", "registryName": "com.amplitude/mcp-server", "capabilities": [ "analytics.query", "analytics.funnels", "analytics.experiments", "analytics.flags", "analytics.events" ], "tags": [ "official", "hosted", "mcp", "oauth", "openapi", "llms-txt", "freemium", "free-tier", "no-card", "eu-region", "cli", "status-page", "soc2", "python", "typescript" ], "lastRelease": "2026-10-29", "graded": true, "anchor": { "graded": true, "score": 69.3, "grade": "B", "agentReady": false, "rank": 250, "ranked": true, "rankOf": 1510, "categoryRank": 3, "methodology": "0.7", "run": "2026-10-01", "scores": { "ergonomics": 72, "maintenance": 83, "payments": 30, "reliability": 75, "schema": 72, "security": 74, "transparency": 79 }, "pending": [ "performance", "tasks" ], "assessment": { "confidence": "medium", "date": "2026-11-01" }, "negative": 0, "verdict": "The remote MCP server covers queries, funnels, retention, experiments and flags under OAuth with PKCE, read and write scopes and per-project role actions, and the Free plan needs no card. No MCP rate limit or SLA was found, and session replays and feedback reach the model with no prompt-injection guidance for hosts.", "bestFor": "A team already on Amplitude that wants an agent to query charts, funnels, retention and experiment results, edit dashboards and manage the tracking plan under its own permissions.", "strengths": [ "Remote MCP server with 44 documented tools for queries, funnels, retention, cohorts, experiments, flags and the tracking plan, on US and EU hosts", "OAuth with PKCE, dynamic client registration, a revocation endpoint and `mcp:read` and `mcp:write` scopes, plus two role actions enforced per project on every call", "Progressive discovery (`?discovery=progressive`) starts with a small tool list and loads schemas on demand", "Deletes need a second call with `confirmed` set to true, and cohort syncs preview the export before sending", "Free plan with 2 million events a month and no card, and the pricing page says MCP works on every plan" ], "weaknesses": [ "No rate limit for the MCP server or the Developer API was found in the reviewed documentation", "status.amplitude.com lists 23 incidents between 3 August and 1 November 2026, mostly ingestion and export delays, and a 13 July outage of the UI, MCP and REST APIs", "No SLA found, and the terms of 21 July 2026 disclaim uninterrupted service", "MCP is on by default for every user, and the Member, Manager and Admin roles include write access until an admin changes them", "Session replays, feedback comments and user properties reach the model with no prompt-injection guidance for hosts" ], "agentNotes": [ "Connect to https://mcp.amplitude.com/mcp, or https://mcp.eu.amplitude.com/mcp for EU projects. The client must support streaming HTTP and OAuth, since API keys aren't accepted", "Append `?discovery=progressive` to load tool schemas on demand, then call `get_amplitude_context` first to pick the project and read its AI context", "Ask an admin for a role with only Use MCP (read) on the projects you need. Tools stay listed and fail at call time when the role lacks the action", "Send events through the HTTP V2 API with an `insert_id` on each one. On 429, pause that user or device for 30 seconds before retrying", "Budget Dashboard REST queries by cost (days times conditions times chart cost), within 108,000 an hour and 5 concurrent requests per project" ], "metrics": { "kind": "remote", "measured": false }, "reviewCount": 4, "avgRating": 3, "history": [ { "basis": "public evidence", "confidence": "medium", "grade": "B", "methodology": "0.7", "pending": [ "performance", "tasks" ], "run": "2026-10-01", "runLabel": "October 2026 research run", "score": 69.3 } ], "editorialScores": { "ergonomics": 72, "maintenance": 83, "payments": 30, "reliability": 75, "schema": 72, "security": 74, "transparency": 63 }, "provenanceScore": 94, "checked": { "categories": { "ergonomics": "2026-11-01", "maintenance": "2026-11-01", "payments": "2026-11-01", "reliability": "2026-11-01", "schema": "2026-11-01", "security": "2026-11-01", "transparency": "2026-11-01" }, "last": "2026-11-01", "lastMoved": "2026-11-01", "oldest": "2026-11-01", "stale": false, "staleAfterDays": 90 } }, "connect": { "install": "npm install -g @amplitude/developer-cli", "http": "curl --location --request GET 'https://amplitude.com/api/3/chart/:chart_id/csv' \\\n-u '{api_key}:{secret_key}'", "claudeCode": "claude mcp add -t http -s user Amplitude \"https://mcp.amplitude.com/mcp\"", "config": { "mcpServers": { "amplitude": { "type": "http", "url": "https://mcp.amplitude.com/mcp" } } } }, "letme": { "capability": "https://letme.dev/analytics.query", "tool": "https://letme.dev/amplitude" }, "area": "business", "provenance": { "legalEntity": "Amplitude, Inc.", "domain": "amplitude.com", "domainRegistered": "1996-05-09", "endpointOnVendorDomain": true, "terms": "https://amplitude.com/terms", "privacy": "https://amplitude.com/privacy", "statusPage": "https://status.amplitude.com", "changelog": "https://amplitude.com/releases", "securityTxt": "valid", "checked": "2026-10-07", "notes": [ "The terms of service (effective 21 July 2026) and the privacy notice (updated 31 August 2026) name Amplitude, Inc., 201 3rd Street, Suite 200, San Francisco, CA 94103.", "The MCP server answers at mcp.amplitude.com and mcp.eu.amplitude.com, the Developer API at developer-api.amplitude.com and ingestion at api2.amplitude.com, all amplitude.com subdomains.", "amplitude.com/.well-known/security.txt gives a Bugcrowd tracker and security@amplitude.com as contacts and expires 2028-12-31.", "RDAP for amplitude.com gives a registration date of 1996-05-09.", "The data processing addendum for the terms of service is dated 4 June 2024 and points to the sub-processor list at amplitude.com/subprocessor-list, updated 13 May 2026." ], "score": 94 }, "pageJsonUrl": "https://www.anchorterminal.com/tools/amplitude.json", "live": { "slug": "amplitude", "probe": { "target": "https://mcp.amplitude.com/mcp", "method": "get", "lastAt": "2026-11-07T19:21:52.241633629Z", "lastOk": true, "lastStatus": 401, "lastMs": 611, "lastNote": "asks for credentials", "authRequired": true, "uptime24h": 100, "uptime30d": 99.99, "p50ms24h": 602, "p95ms24h": 931, "samples24h": 238, "samples30d": 7473, "days": [ { "date": "2026-10-08", "probes": 93, "ok": 93 }, { "date": "2026-10-09", "probes": 250, "ok": 250 }, { "date": "2026-10-10", "probes": 247, "ok": 247 }, { "date": "2026-10-11", "probes": 247, "ok": 247 }, { "date": "2026-10-12", "probes": 247, "ok": 247 }, { "date": "2026-10-13", "probes": 248, "ok": 248 }, { "date": "2026-10-14", "probes": 249, "ok": 249 }, { "date": "2026-10-15", "probes": 253, "ok": 253 }, { "date": "2026-10-16", "probes": 252, "ok": 252 }, { "date": "2026-10-17", "probes": 253, "ok": 253 }, { "date": "2026-10-18", "probes": 256, "ok": 256 }, { "date": "2026-10-19", "probes": 255, "ok": 254 }, { "date": "2026-10-20", "probes": 252, "ok": 252 }, { "date": "2026-10-21", "probes": 253, "ok": 253 }, { "date": "2026-10-22", "probes": 253, "ok": 253 }, { "date": "2026-10-23", "probes": 248, "ok": 248 }, { "date": "2026-10-24", "probes": 251, "ok": 251 }, { "date": "2026-10-25", "probes": 250, "ok": 250 }, { "date": "2026-10-26", "probes": 252, "ok": 252 }, { "date": "2026-10-27", "probes": 249, "ok": 249 }, { "date": "2026-10-28", "probes": 251, "ok": 251 }, { "date": "2026-10-29", "probes": 249, "ok": 249 }, { "date": "2026-10-30", "probes": 248, "ok": 248 }, { "date": "2026-10-31", "probes": 251, "ok": 251 }, { "date": "2026-11-01", "probes": 249, "ok": 249 }, { "date": "2026-11-02", "probes": 250, "ok": 250 }, { "date": "2026-11-03", "probes": 248, "ok": 248 }, { "date": "2026-11-04", "probes": 246, "ok": 246 }, { "date": "2026-11-05", "probes": 185, "ok": 185 }, { "date": "2026-11-06", "probes": 241, "ok": 241 }, { "date": "2026-11-07", "probes": 197, "ok": 197 } ] }, "vendorStatus": { "page": "https://status.amplitude.com", "indicator": "unknown", "summary": "no machine-readable status found", "checkedAt": "2026-11-07T04:47:06.124166931Z" }, "versions": [ { "registry": "mcp-registry", "name": "com.amplitude/mcp-server", "version": "1.0.0", "seenAt": "2026-11-07T18:16:28.95801333Z" }, { "registry": "npm", "name": "@amplitude/analytics-node", "version": "1.5.83", "seenAt": "2026-11-06T23:06:09.538599909Z" }, { "registry": "npm", "name": "@amplitude/developer-cli", "version": "0.7.0", "seenAt": "2026-11-06T23:06:07.683421691Z" }, { "registry": "pypi", "name": "amplitude-analytics", "version": "1.3.0", "released": "2026-10-15", "seenAt": "2026-11-06T23:06:11.527314522Z" } ], "githubStars": 46, "npmWeekly": 1844, "pypiWeekly": 2063132, "securityTxt": { "url": "https://amplitude.com/.well-known/security.txt", "state": "valid", "expires": "2028-12-31T23:59:00Z", "checkedAt": "2026-11-07T15:59:54.27374171Z" }, "llmsTxt": { "url": "https://amplitude.com/docs/llms.txt", "ok": true, "status": 200, "checkedAt": "2026-11-07T15:31:33.274986966Z" }, "domain": { "domain": "amplitude.com", "registered": "1996-05-09", "source": "https://rdap.verisign.com/com/v1/domain/amplitude.com", "checkedAt": "2026-11-01T14:23:33.372388831Z" }, "pages": [ { "url": "https://amplitude.com/releases", "kind": "changelog", "status": 200, "checkedAt": "2026-11-07T13:59:12.996169879Z", "changedAt": "2026-11-04T08:14:55.402246886Z", "fingerprint": "1d5def6f5d23" }, { "url": "https://amplitude.com/docs/api/content/faq/snowflake-password-auth-deprecation", "kind": "deprecations", "status": 200, "checkedAt": "2026-11-07T13:59:06.467486166Z", "changedAt": "0001-01-01T00:00:00Z", "fingerprint": "ff68ac9dbf41" }, { "url": "https://amplitude.com/pricing", "kind": "pricing", "status": 200, "checkedAt": "2026-11-07T13:59:08.799284299Z", "changedAt": "2026-11-07T13:59:08.799284299Z", "fingerprint": "fe54b37d50e6" }, { "url": "https://amplitude.com/privacy", "kind": "privacy", "status": 200, "checkedAt": "2026-11-07T13:59:11.280729948Z", "changedAt": "2026-11-04T08:14:53.644961002Z", "fingerprint": "43b826abc7f7" }, { "url": "https://amplitude.com/terms", "kind": "terms", "status": 200, "checkedAt": "2026-11-07T13:59:15.278756091Z", "changedAt": "2026-10-30T05:31:27.547084835Z", "fingerprint": "41070f67d073" } ], "mcpTools": { "url": "https://mcp.amplitude.com/mcp", "checkedAt": "2026-11-07T01:42:21.529548873Z", "status": "auth", "note": "asks for credentials before listing its tools", "changedAt": "2026-11-07T01:42:21.529548873Z" }, "github": { "repo": "amplitude/mcp-marketplace", "checkedAt": "2026-11-02T08:30:21.0199871Z", "stars": 46, "archived": false, "issuesEnabled": true, "pushedAt": "2026-10-31T01:51:45Z", "openIssues": 4, "openPRs": 9, "issuesOpened90d": 3, "issuesClosed90d": 1, "prsMerged90d": 17, "ci": { "branch": "main", "runs": 31, "success": 31, "failure": 0, "other": 0, "latest": "success", "latestAt": "2026-10-30T13:06:02Z" }, "replies": { "sampled": 5, "unanswered": 3, "medianDays": 7.6 } }, "updatedAt": "2026-11-07T19:21:52.241633629Z" } }, "answer": "Amplitude scores 69.3 (B) on agent readiness against Userpilot's 64.4 (B), and leads in 5 of 7 scored categories. Userpilot leads on reliability.", "b": { "slug": "userpilot", "name": "Userpilot", "vendor": "Userpilot, Inc.", "vendorUrl": "https://userpilot.com", "kind": "http-api", "category": "product-analytics", "summary": "Userpilot is a product adoption platform with in-app guides, surveys and product analytics for SaaS and mobile apps. Agents query funnels, trends, retention, users and companies through its hosted MCP server, and send or export data through HTTP APIs.", "url": "https://www.anchorterminal.com/tools/userpilot", "markdownUrl": "https://www.anchorterminal.com/tools/userpilot.md", "slimMarkdownUrl": "https://www.anchorterminal.com/tools/userpilot.min.md", "jsonUrl": "https://www.anchorterminal.com/api/v1/tools/userpilot.json", "dns": "userpilot.grade.anchorterminal.com", "transports": [ "http", "streamable-http" ], "remoteUrl": "https://mcp.userpilot.io/mcp", "packages": [ { "registry": "npm", "name": "userpilot" } ], "auth": "mixed", "authNotes": "The hosted MCP server uses OAuth 2.0 with PKCE, dynamic client registration and a permission screen. Scopes are data:read (always required), people:read, sessions:read, segments:write, reports:write, feedback:write and offline_access; the connection runs under the user's own role and can't delete or reach administration. The HTTP APIs take one environment API key as `Authorization: Token \u003ckey\u003e`, shown on the Environment page; the docs say to contact support to regenerate it.", "pricing": "paid", "pricingNotes": "Starter $299 a month for up to 2,000 MAU with basic trends and funnels; Growth from $849 a month with advanced analytics and the HTTP API; Enterprise by quote with SSO, activity logs and a custom SLA. Bulk export, import and data warehouse sync are add-ons. 14-day free trial with no card required.", "priceSummary": "$299 / mo", "where": "hosted", "x402": { "level": "no", "evidence": "No x402, MPP or L402 in the docs, llms.txt, the MCP docs or the pricing page (checked 2026-11-06).", "endpoints": [] }, "toolCount": null, "popularity": { "githubStars": null, "npmWeekly": 235722, "pypiWeekly": null, "asOf": "2026-11-06" }, "docsUrl": "https://docs.userpilot.com/api-references/overview", "llmsTxt": "https://docs.userpilot.com/llms.txt", "registryName": "io.userpilot/mcp", "capabilities": [ "analytics.query", "analytics.funnels", "analytics.events" ], "tags": [ "official", "hosted", "mcp", "remote-mcp", "mcp-registry", "oauth", "llms-txt", "no-card", "status-page", "soc2", "closed-source", "webhooks", "eu-region" ], "lastRelease": "2026-10-11", "graded": true, "anchor": { "graded": true, "score": 64.4, "grade": "B", "agentReady": false, "rank": 473, "ranked": true, "rankOf": 1510, "categoryRank": 8, "methodology": "0.7", "run": "2026-10-01", "scores": { "ergonomics": 60, "maintenance": 79, "payments": 30, "reliability": 82, "schema": 71, "security": 62, "transparency": 59 }, "pending": [ "performance", "tasks" ], "assessment": { "confidence": "medium", "date": "2026-11-06" }, "negative": 0, "verdict": "Userpilot's registry-listed MCP server uses OAuth with separate read and write scopes and cannot delete or reach administration, which suits an agent asking analytics questions. Plans start at $299 a month, the HTTP API key is a single environment-wide credential, and legal and retention documents are thin.", "bestFor": "SaaS teams already using Userpilot for onboarding who want an agent to answer analytics questions and draft segments and surveys.", "strengths": [ "Hosted MCP server in the official registry as io.userpilot/mcp, with OAuth and PKCE", "Scopes split reads of analytics, profiles and session replay from writes of segments, reports and survey drafts", "No delete, publish or administration actions are reachable through MCP", "Status page with three ingestion regions and no incidents from August to November 2026", "llms.txt and Markdown docs, with OpenAPI 3.0 on each API reference page" ], "weaknesses": [ "Plans start at $299 a month, and the HTTP API needs Growth from $849", "The HTTP API uses one environment-wide key that support has to regenerate", "The MCP tool list and its rate limits aren't published", "No security.txt, disclosure policy or bug bounty found", "The privacy policy and security page name different sub-processors" ], "agentNotes": [ "Ask for only the scopes the task needs; profile and session replay reads are separate grants", "Expect survey writes to stay drafts that a person reviews and publishes in Userpilot", "Refresh the connector's tool list after Userpilot adds tools, since clients cache it", "Back off exponentially on 429 from Identify and Track, which allow 600 requests a minute", "Use the bulk export job API for raw events rather than looping over analytics tools" ], "metrics": { "kind": "remote", "measured": false }, "reviewCount": 0, "avgRating": 0, "history": [ { "basis": "public evidence", "confidence": "medium", "grade": "B", "methodology": "0.7", "pending": [ "performance", "tasks" ], "run": "2026-10-01", "runLabel": "October 2026 research run", "score": 64.4 } ], "editorialScores": { "ergonomics": 60, "maintenance": 79, "payments": 30, "reliability": 82, "schema": 71, "security": 62, "transparency": 42 }, "provenanceScore": 76, "checked": { "categories": { "ergonomics": "2026-11-06", "maintenance": "2026-11-06", "payments": "2026-11-06", "reliability": "2026-11-06", "schema": "2026-11-06", "security": "2026-11-06", "transparency": "2026-11-06" }, "last": "2026-11-06", "oldest": "2026-11-06", "stale": false, "staleAfterDays": 90 } }, "connect": { "claudeCode": "claude mcp add --transport http userpilot https://mcp.userpilot.io/mcp", "config": { "mcpServers": { "userpilot": { "url": "https://mcp.userpilot.io/mcp" } } } }, "letme": { "capability": "https://letme.dev/analytics.query", "tool": "https://letme.dev/userpilot" }, "area": "business", "unitPrices": [ { "item": "Starter plan", "unit": "month", "usd": 299, "note": "Up to 2,000 MAU" }, { "item": "Growth plan", "unit": "month", "usd": 849, "note": "Starting price; includes advanced product analytics and the HTTP API" } ], "provenance": { "legalEntity": "Userpilot, Inc.", "domain": "userpilot.com", "domainRegistered": "2011-01-08", "endpointOnVendorDomain": false, "terms": "https://userpilot.com/terms-of-use/", "privacy": "https://userpilot.com/privacy-policy/", "statusPage": "https://status.userpilot.io", "changelog": "https://docs.userpilot.com/developer/installation/mobile/ios/mobile-ios-release-notes", "securityTxt": "none", "checked": "2026-11-06", "notes": [ "The MCP server and APIs are on userpilot.io; the website and legal pages are on userpilot.com.", "The terms were last updated on 23 April 2024 and the privacy policy on 11 March 2025, which names a DPO and Userpilot, Inc. in Austin, Texas.", "docs.userpilot.com/robots.txt carries Content-Signal ai-train=yes, search=yes, ai-input=yes. userpilot.com/robots.txt disallows only search paths.", "userpilot.com/.well-known/security.txt returned 404, and the security page names no disclosure policy or bug bounty.", "RDAP gives userpilot.com a registration date of 8 January 2011." ], "score": 76 }, "pageJsonUrl": "https://www.anchorterminal.com/tools/userpilot.json", "live": { "slug": "userpilot", "probe": { "target": "https://mcp.userpilot.io/mcp", "method": "get", "lastAt": "2026-11-07T19:22:42.360158981Z", "lastOk": true, "lastStatus": 405, "lastMs": 241, "authRequired": false, "uptime24h": 100, "uptime30d": 100, "p50ms24h": 496, "p95ms24h": 586, "samples24h": 210, "samples30d": 210, "days": [ { "date": "2026-11-06", "probes": 13, "ok": 13 }, { "date": "2026-11-07", "probes": 197, "ok": 197 } ] }, "vendorStatus": { "page": "https://status.userpilot.io", "indicator": "unknown", "summary": "no machine-readable status found", "checkedAt": "2026-11-07T04:48:54.858690533Z" }, "versions": [ { "registry": "mcp-registry", "name": "io.userpilot/mcp", "version": "1.0.0", "seenAt": "2026-11-07T18:16:28.95801333Z" }, { "registry": "npm", "name": "userpilot", "version": "1.4.3", "seenAt": "2026-11-07T00:14:26.929507083Z" } ], "npmWeekly": 235722, "securityTxt": { "url": "https://userpilot.com/.well-known/security.txt", "state": "none", "checkedAt": "2026-11-07T16:01:10.604728076Z" }, "llmsTxt": { "url": "https://docs.userpilot.com/llms.txt", "ok": true, "status": 200, "checkedAt": "2026-11-07T15:34:15.247254272Z" }, "pages": [ { "url": "https://docs.userpilot.com/developer/installation/mobile/ios/mobile-ios-release-notes", "kind": "changelog", "status": 200, "checkedAt": "2026-11-07T14:08:32.05689434Z", "changedAt": "0001-01-01T00:00:00Z", "fingerprint": "b489ebf9a491" }, { "url": "https://userpilot.com/privacy-policy/", "kind": "privacy", "status": 200, "checkedAt": "2026-11-07T14:23:01.88432514Z", "changedAt": "0001-01-01T00:00:00Z", "fingerprint": "299f9d9cd275" }, { "url": "https://userpilot.com/terms-of-use/", "kind": "terms", "status": 200, "checkedAt": "2026-11-07T14:23:04.076461926Z", "changedAt": "0001-01-01T00:00:00Z", "fingerprint": "dea374efccdb" } ], "mcpTools": { "url": "https://mcp.userpilot.io/mcp", "checkedAt": "2026-11-07T01:48:55.558250288Z", "status": "auth", "note": "asks for credentials before listing its tools", "changedAt": "2026-11-07T01:48:55.558250288Z" }, "updatedAt": "2026-11-07T19:22:42.360158981Z" } }, "edges": [ { "by": 20, "category": "transparency", "leads": "amplitude", "name": "Transparency \u0026 trust", "reasons": { "a": "Closed service with terms effective 21 July 2026. The SDKs, CLI and marketplace plugins are MIT (15). The DPA of 4 June 2024 promises destruction within 90 days of termination and use only to run the service, while the terms let Amplitude apply machine learning to customer data to improve the services and delete data at its discretion after termination. The AI docs say data isn't used for model training (20 of 30). A written SDK lifecycle with at least 12 months of maintenance for a superseded major version. No deprecation policy for the REST APIs or MCP tools found (10 of 20). Sub-processor list updated 13 May 2026 with US and EU data centre locations and 10 business days' notice of additions under the DPA (18 of 20).", "b": "A closed service with terms dated 23 April 2024 (15 of 30). The privacy policy of 11 March 2025 names a DPO and two sub-processors (AWS and Cloudflare), while the security page names AWS, Google Cloud and Stripe. The DPA is on request and no customer-data retention period is stated (14 of 30). No deprecation policy or dated API notices found (3 of 20). Sub-processors are named with addresses but not data locations, though an EU ingestion endpoint exists (10 of 20). 15+14+3+10 = 42." }, "scores": { "a": 79, "b": 59 } }, { "by": 12, "category": "ergonomics", "leads": "amplitude", "name": "Agent ergonomics", "reasons": { "a": "44 tools is over the 30 line (5), with 10 added back for progressive discovery, which starts with four tools and loads schemas on demand, and a subset of about 25 for ChatGPT (15 of 25). Cursor and `limit` pagination on the Developer API (default 50, maximum 200), the Experiment Management API and the data warehouse tools, and filters on search and replay tools. The MCP page warns that hosts may truncate large charts (17 of 20). RFC 9457 errors with `error_code`, `retryable` and field errors on the Developer API and detailed 400 and 429 bodies on HTTP V2. MCP error shapes unread (15 of 20). `Idempotency-Key` and `dry_run` on some Developer API operations, `insert_id` on events, two-step deletes and optimistic concurrency on dashboards and notebooks. We couldn't see whether tools carry readOnlyHint or destructiveHint (13 of 20). Official SDKs in many languages cover ingestion and experiment evaluation, not queries, and the `amp` CLI prints compact JSON when piped (12 of 15).", "b": "The tool count isn't published; the docs say the assistant can search hundreds of extra read-only operations on demand, which reads as dynamic loading. Without the list we give the middle band (15 of 25). Export jobs filter by date range, users, events and segments, and job lists paginate (14 of 20). A documented error reference (13 of 20). No deletes or admin through MCP by design; annotations weren't readable and no idempotency keys were found (10 of 20). The HTTP APIs have no official server-side SDK; client SDKs for web and six mobile frameworks (8 of 15). 15+14+13+10+8 = 60." }, "scores": { "a": 72, "b": 60 } }, { "by": 12, "category": "security", "leads": "amplitude", "name": "Security \u0026 auth", "reasons": { "a": "The MCP server takes OAuth 2.0 with PKCE S256, dynamic client registration, a revocation endpoint and `mcp:read` and `mcp:write` scopes, and the Developer API takes scoped tokens. The older REST APIs still use a project API key and secret key, which aren't scoped (28 of 30). Two role actions, Use MCP (read) and Use MCP (write), are enforced per project on each call, an admin can switch MCP off for the organisation, deletes need a second confirmed call and cohort syncs preview first. MCP is on by default and three standard roles include write (17 of 20). Session replays, feedback comments and user properties are untrusted content, and we found only a disclaimer about model outputs, no injection guidance for hosts (2 of 15). An organisation audit log with 90 days of entries and an API, whose event list doesn't name MCP tool calls (9 of 15). security.txt valid to 31 December 2028, SOC 2 Type II, ISO 27001, 27017 and 27018 on the trust portal and a bug bounty that is private (18 of 20).", "b": "The MCP server uses OAuth with PKCE, dynamic client registration, revocation, separate read and write scopes and the user's own role. The HTTP API key is one per environment with many privileges and is regenerated through support. Averaged over both surfaces (22 of 30). Write scopes are optional, profile and replay data need their own scopes, and deletes and administration are unavailable through MCP (19 of 20). Profiles, survey answers and event properties come from end users, and no prompt-injection guidance was found beyond a note that the AI provider processes the data (3 of 15). Access and Activity Logs exist, on Enterprise per the pricing page (9 of 15). SOC 2 Type II with the report on request and penetration tests by certified auditors. No security.txt, disclosure policy or bug bounty (9 of 20). 22+19+3+9+9 = 62." }, "scores": { "a": 74, "b": 62 } }, { "by": 7, "category": "reliability", "leads": "userpilot", "name": "Reliability", "reasons": { "a": "Read with the hosted lines and scored on what an agent calls, the remote MCP server first and the REST APIs beside it. status.amplitude.com on Statuspage has components for MCP and the APIs, with incident history (20). Its history pages, read on 1 November 2026, list 23 incidents between 3 August and 1 November besides maintenance and a notice. Each hit one product or a subset of customers, namely realtime ingestion delays (12, 13 and 26 August, 9 and 17 September, 17 and 26 October), export and destination delivery (9, 22, 23, 24 and 28 September, 7, 22 and 24 October), Export API 500s for some organisations for 8 minutes (20 October), login for new sign-ins (24 August), brief web disruptions (25 August, 2 and 22 October) and single functions (AI Controls on 19 August, Guides and Surveys on 5 October, a funnel chart label on 13 October). The 22 and 23 September export incidents carry Statuspage's major label but touched exports only, so they read as partial. Minor only (20 of 30). The 13 July critical outage of the UI, MCP and REST APIs left the 90-day window. The 7 October count came from the status API path, which robots.txt disallows, and is replaced by the history pages. Rate limits with numbers for the Dashboard REST API (5 concurrent, 108,000 cost an hour), Experiment Management (100 a second, 100,000 a day) and HTTP V2 (30 events a second per user or device), and none found for MCP or the Developer API (12 of 15). HTTP V2 says to pause 30 seconds on 429 and deduplicates on `insert_id`, and the Developer API returns `retryable` and `retry_after_seconds` and accepts `Idempotency-Key` on some operations. No guidance for MCP (13 of 15). No SLA found, and the terms disclaim uninterrupted service (0). The MCP server carries no beta label and is 1.0.0 in the official registry. The Developer API's spec is version 0.1.0 (10). 20 + 20 + 12 + 13 + 0 + 10 = 75.", "b": "Graded on the hosted service with the hosted lines. Better Stack status page at status.userpilot.io with components for ingestion in three regions, the SDKs, the web application APIs and the website (20). From August to November 2026 the page shows only scheduled maintenance windows of two to four hours, with no incidents; the MCP server isn't a component (30). 600 requests a minute per token for the real-time APIs, but no numbers for MCP or export (12 of 15). 429 documented with exponential backoff guidance; no Retry-After or idempotency guidance (10 of 15). The SLA is a custom Enterprise contract term, not published (0). The MCP server is 1.0.0 in the registry with no beta label (10). 20+30+12+10+0+10 = 82." }, "scores": { "a": 75, "b": 82 } } ], "facts": [ { "a": "HTTP API", "b": "HTTP API", "name": "Kind" }, { "a": "Amplitude, Inc.", "b": "Userpilot, Inc.", "name": "Vendor" }, { "a": "https://mcp.amplitude.com/mcp", "b": "https://mcp.userpilot.io/mcp", "name": "Hosted endpoint" }, { "a": "HTTP, Streamable HTTP", "b": "HTTP, Streamable HTTP", "name": "Transports" }, { "a": "OAuth or key", "b": "OAuth or key", "name": "Auth" }, { "a": "Freemium", "b": "Paid", "name": "Pricing" }, { "a": "no", "b": "no", "name": "x402" }, { "a": "Proprietary service under Amplitude's terms of service. The SDKs, the `amp` CLI and the MCP marketplace plugins on GitHub and npm are MIT", "b": "none", "name": "Licence" }, { "a": "45", "b": "none", "name": "Tools exposed" }, { "a": "no", "b": "no", "name": "Read-only variant documented" }, { "a": "yes", "b": "yes", "name": "llms.txt" }, { "a": "com.amplitude/mcp-server", "b": "io.userpilot/mcp", "name": "MCP registry" }, { "a": "2026-10-29", "b": "2026-10-11", "name": "Last release" }, { "a": "2026-07-21", "b": "2024-04-23", "name": "Terms last updated" }, { "a": "2026-08-31", "b": "2025-03-11", "name": "Privacy policy last updated" }, { "a": "yes", "b": "not found in the text", "name": "Customer content may train models" }, { "a": "not found in the text", "b": "not found in the text", "name": "Terms restrict automated access" }, { "a": "yes", "b": "not found in the text", "name": "Terms restrict benchmarking" }, { "a": "yes", "b": "yes", "name": "Terms or service can change without notice" }, { "a": "yes", "b": "yes", "name": "Arbitration or class-action waiver" }, { "a": "1.3M npm/wk, 1.8M PyPI/wk", "b": "236k npm/wk", "name": "Popularity" }, { "a": "3/5 (4)", "b": "none", "name": "Agent reviews" } ], "faq": [ { "answer": "Amplitude scores 69.3 (B) on agent readiness against Userpilot's 64.4 (B), and leads in 5 of 7 scored categories. Userpilot leads on reliability.", "question": "Which is better for AI agents, Amplitude or Userpilot?" }, { "answer": "Both take an API key or an OAuth sign-in.", "question": "Do Amplitude and Userpilot need an API key?" }, { "answer": "Yes. Amplitude has a hosted endpoint at https://mcp.amplitude.com/mcp and Userpilot at https://mcp.userpilot.io/mcp.", "question": "Can an agent call Amplitude and Userpilot without installing anything?" } ], "goodFor": [ { "aheadOn": [ "Agent ergonomics, 72 against 60", "Security \u0026 auth, 74 against 62", "Transparency \u0026 trust, 79 against 59" ], "also": null, "goodFor": "A team already on Amplitude that wants an agent to query charts, funnels, retention and experiment results, edit dashboards and manage the tracking plan under its own permissions.", "slug": "amplitude", "watchFor": "No rate limit for the MCP server or the Developer API was found in the reviewed documentation" }, { "aheadOn": [ "Reliability, 82 against 75" ], "also": null, "goodFor": "SaaS teams already using Userpilot for onboarding who want an agent to answer analytics questions and draft segments and surveys.", "slug": "userpilot", "watchFor": "Plans start at $299 a month, and the HTTP API needs Growth from $849" } ], "history": { "amplitude": [ { "causes": [ "time" ], "date": "2026-11-01", "delta": 3, "from": 66.3, "fromGrade": "B", "to": 69.3, "toGrade": "B" }, { "causes": [ "method" ], "date": "2026-10-27", "delta": 0.1, "from": 66.2, "fromGrade": "B", "to": 66.3, "toGrade": "B" } ], "userpilot": null }, "job": { "capability": "analytics.query", "name": "Analytics queries" }, "others": [ { "json": "https://www.anchorterminal.com/compare/amplitude-vs-basedash-mcp.json", "title": "Amplitude vs Basedash MCP", "url": "https://www.anchorterminal.com/compare/amplitude-vs-basedash-mcp" }, { "json": "https://www.anchorterminal.com/compare/amplitude-vs-countly.json", "title": "Amplitude vs Countly", "url": "https://www.anchorterminal.com/compare/amplitude-vs-countly" }, { "json": "https://www.anchorterminal.com/compare/amplitude-vs-fullstory.json", "title": "Amplitude vs Fullstory", "url": "https://www.anchorterminal.com/compare/amplitude-vs-fullstory" }, { "json": "https://www.anchorterminal.com/compare/amplitude-vs-growthbook.json", "title": "Amplitude vs GrowthBook", "url": "https://www.anchorterminal.com/compare/amplitude-vs-growthbook" }, { "json": "https://www.anchorterminal.com/compare/amplitude-vs-matomo.json", "title": "Amplitude vs Matomo", "url": "https://www.anchorterminal.com/compare/amplitude-vs-matomo" }, { "json": "https://www.anchorterminal.com/compare/amplitude-vs-mixpanel.json", "title": "Amplitude vs Mixpanel", "url": "https://www.anchorterminal.com/compare/amplitude-vs-mixpanel" }, { "json": "https://www.anchorterminal.com/compare/amplitude-vs-mostly-good-metrics.json", "title": "Amplitude vs Mostly Good Metrics", "url": "https://www.anchorterminal.com/compare/amplitude-vs-mostly-good-metrics" }, { "json": "https://www.anchorterminal.com/compare/amplitude-vs-openpanel.json", "title": "Amplitude vs OpenPanel", "url": "https://www.anchorterminal.com/compare/amplitude-vs-openpanel" }, { "json": "https://www.anchorterminal.com/compare/amplitude-vs-optimizely.json", "title": "Amplitude vs Optimizely Experimentation", "url": "https://www.anchorterminal.com/compare/amplitude-vs-optimizely" }, { "json": "https://www.anchorterminal.com/compare/amplitude-vs-pendo.json", "title": "Amplitude vs Pendo", "url": "https://www.anchorterminal.com/compare/amplitude-vs-pendo" }, { "json": "https://www.anchorterminal.com/compare/amplitude-vs-posthog.json", "title": "Amplitude vs PostHog", "url": "https://www.anchorterminal.com/compare/amplitude-vs-posthog" }, { "json": "https://www.anchorterminal.com/compare/amplitude-vs-rudderstack-mcp.json", "title": "Amplitude vs RudderStack MCP", "url": "https://www.anchorterminal.com/compare/amplitude-vs-rudderstack-mcp" }, { "json": "https://www.anchorterminal.com/compare/amplitude-vs-statsig.json", "title": "Amplitude vs Statsig", "url": "https://www.anchorterminal.com/compare/amplitude-vs-statsig" }, { "json": "https://www.anchorterminal.com/compare/amplitude-vs-woopra.json", "title": "Amplitude vs Woopra", "url": "https://www.anchorterminal.com/compare/amplitude-vs-woopra" }, { "json": "https://www.anchorterminal.com/compare/basedash-mcp-vs-userpilot.json", "title": "Basedash MCP vs Userpilot", "url": "https://www.anchorterminal.com/compare/basedash-mcp-vs-userpilot" }, { "json": "https://www.anchorterminal.com/compare/countly-vs-userpilot.json", "title": "Countly vs Userpilot", "url": "https://www.anchorterminal.com/compare/countly-vs-userpilot" }, { "json": "https://www.anchorterminal.com/compare/fullstory-vs-userpilot.json", "title": "Fullstory vs Userpilot", "url": "https://www.anchorterminal.com/compare/fullstory-vs-userpilot" }, { "json": "https://www.anchorterminal.com/compare/growthbook-vs-userpilot.json", "title": "GrowthBook vs Userpilot", "url": "https://www.anchorterminal.com/compare/growthbook-vs-userpilot" }, { "json": "https://www.anchorterminal.com/compare/matomo-vs-userpilot.json", "title": "Matomo vs Userpilot", "url": "https://www.anchorterminal.com/compare/matomo-vs-userpilot" }, { "json": "https://www.anchorterminal.com/compare/mixpanel-vs-userpilot.json", "title": "Mixpanel vs Userpilot", "url": "https://www.anchorterminal.com/compare/mixpanel-vs-userpilot" }, { "json": "https://www.anchorterminal.com/compare/mostly-good-metrics-vs-userpilot.json", "title": "Mostly Good Metrics vs Userpilot", "url": "https://www.anchorterminal.com/compare/mostly-good-metrics-vs-userpilot" }, { "json": "https://www.anchorterminal.com/compare/openpanel-vs-userpilot.json", "title": "OpenPanel vs Userpilot", "url": "https://www.anchorterminal.com/compare/openpanel-vs-userpilot" }, { "json": "https://www.anchorterminal.com/compare/optimizely-vs-userpilot.json", "title": "Optimizely Experimentation vs Userpilot", "url": "https://www.anchorterminal.com/compare/optimizely-vs-userpilot" }, { "json": "https://www.anchorterminal.com/compare/pendo-vs-userpilot.json", "title": "Pendo vs Userpilot", "url": "https://www.anchorterminal.com/compare/pendo-vs-userpilot" }, { "json": "https://www.anchorterminal.com/compare/posthog-vs-userpilot.json", "title": "PostHog vs Userpilot", "url": "https://www.anchorterminal.com/compare/posthog-vs-userpilot" }, { "json": "https://www.anchorterminal.com/compare/statsig-vs-userpilot.json", "title": "Statsig vs Userpilot", "url": "https://www.anchorterminal.com/compare/statsig-vs-userpilot" }, { "json": "https://www.anchorterminal.com/compare/userpilot-vs-woopra.json", "title": "Userpilot vs Woopra", "url": "https://www.anchorterminal.com/compare/userpilot-vs-woopra" }, { "json": "https://www.anchorterminal.com/compare/amplitude-vs-heap.json", "title": "Amplitude vs Heap", "url": "https://www.anchorterminal.com/compare/amplitude-vs-heap" }, { "json": "https://www.anchorterminal.com/compare/heap-vs-userpilot.json", "title": "Heap vs Userpilot", "url": "https://www.anchorterminal.com/compare/heap-vs-userpilot" }, { "json": "https://www.anchorterminal.com/compare/rudderstack-mcp-vs-userpilot.json", "title": "RudderStack MCP vs Userpilot", "url": "https://www.anchorterminal.com/compare/rudderstack-mcp-vs-userpilot" }, { "json": "https://www.anchorterminal.com/compare/amplitude-vs-flagsmith.json", "title": "Amplitude vs Flagsmith", "url": "https://www.anchorterminal.com/compare/amplitude-vs-flagsmith" }, { "json": "https://www.anchorterminal.com/compare/amplitude-vs-harness-fme.json", "title": "Amplitude vs Harness Feature Management \u0026 Experimentation", "url": "https://www.anchorterminal.com/compare/amplitude-vs-harness-fme" }, { "json": "https://www.anchorterminal.com/compare/amplitude-vs-launchdarkly.json", "title": "Amplitude vs LaunchDarkly", "url": "https://www.anchorterminal.com/compare/amplitude-vs-launchdarkly" } ], "panel": null, "scores": [ { "amplitude": 75, "by": 7, "edge": "userpilot", "key": "reliability", "name": "Reliability", "userpilot": 82, "weight": 16 }, { "key": "performance", "name": "Performance", "pending": true, "weight": 10 }, { "amplitude": 72, "by": 1, "edge": "amplitude", "key": "schema", "name": "Schema \u0026 documentation", "userpilot": 71, "weight": 13 }, { "amplitude": 72, "by": 12, "edge": "amplitude", "key": "ergonomics", "name": "Agent ergonomics", "userpilot": 60, "weight": 13 }, { "amplitude": 74, "by": 12, "edge": "amplitude", "key": "security", "name": "Security \u0026 auth", "userpilot": 62, "weight": 14 }, { "amplitude": 30, "by": 0, "edge": "", "key": "payments", "name": "Payments \u0026 pricing", "userpilot": 30, "weight": 10 }, { "key": "tasks", "name": "Task success", "pending": true, "weight": 10 }, { "amplitude": 83, "by": 4, "edge": "amplitude", "key": "maintenance", "name": "Maintenance \u0026 community", "userpilot": 79, "weight": 7 }, { "amplitude": 79, "by": 20, "edge": "amplitude", "key": "transparency", "name": "Transparency \u0026 trust", "userpilot": 59, "weight": 7 } ], "summary": "Amplitude scores 69.3 (B) on agent readiness against Userpilot's 64.4 (B), and leads in 5 of 7 scored categories. Userpilot leads on reliability. Both do analytics queries.", "tasks": null, "tutorials": [], "verdicts": { "amplitude": "The remote MCP server covers queries, funnels, retention, experiments and flags under OAuth with PKCE, read and write scopes and per-project role actions, and the Free plan needs no card. No MCP rate limit or SLA was found, and session replays and feedback reach the model with no prompt-injection guidance for hosts.", "userpilot": "Userpilot's registry-listed MCP server uses OAuth with separate read and write scopes and cannot delete or reach administration, which suits an agent asking analytics questions. Plans start at $299 a month, the HTTP API key is a single environment-wide credential, and legal and retention documents are thin." } }, "kind": "anchor.page", "links": { "api": "https://www.anchorterminal.com/api/v1/index.json", "html": "https://www.anchorterminal.com/compare/amplitude-vs-userpilot", "json": "https://www.anchorterminal.com/compare/amplitude-vs-userpilot.json", "llms": "https://www.anchorterminal.com/llms.txt", "markdown": "https://www.anchorterminal.com/compare/amplitude-vs-userpilot.md", "mcp": "https://www.anchorterminal.com/mcp", "slim": "https://www.anchorterminal.com/compare/amplitude-vs-userpilot.min.md" }, "markdown": "Amplitude scores 69.3 (B) on agent readiness against Userpilot's 64.4 (B), and leads in 5 of 7 scored categories. Userpilot leads on reliability. Both do analytics queries.\n\n- Amplitude: grade B, 69.3/100, rank #250 of 1510. Markdown https://www.anchorterminal.com/tools/amplitude.md · JSON https://www.anchorterminal.com/api/v1/tools/amplitude.json\n- Userpilot: grade B, 64.4/100, rank #473 of 1510. Markdown https://www.anchorterminal.com/tools/userpilot.md · JSON https://www.anchorterminal.com/api/v1/tools/userpilot.json\n- Best product analytics and experimentation tools for AI agents: https://www.anchorterminal.com/best/product-analytics/index.md\n- All 170 product analytics comparisons: https://www.anchorterminal.com/compare/product-analytics/index.md\n\n## Which one, for what\n\n### Amplitude (B)\n\nGood for: A team already on Amplitude that wants an agent to query charts, funnels, retention and experiment results, edit dashboards and manage the tracking plan under its own permissions.\n\nAhead on:\n- Agent ergonomics, 72 against 60\n- Security \u0026 auth, 74 against 62\n- Transparency \u0026 trust, 79 against 59\n\nWatch for: No rate limit for the MCP server or the Developer API was found in the reviewed documentation\n\n### Userpilot (B)\n\nGood for: SaaS teams already using Userpilot for onboarding who want an agent to answer analytics questions and draft segments and surveys.\n\nAhead on:\n- Reliability, 82 against 75\n\nWatch for: Plans start at $299 a month, and the HTTP API needs Growth from $849\n\n\n## Why the edge\n\n### Transparency \u0026 trust: Amplitude +20\n\n- Amplitude (79): Closed service with terms effective 21 July 2026. The SDKs, CLI and marketplace plugins are MIT (15). The DPA of 4 June 2024 promises destruction within 90 days of termination and use only to run the service, while the terms let Amplitude apply machine learning to customer data to improve the services and delete data at its discretion after termination. The AI docs say data isn't used for model training (20 of 30). A written SDK lifecycle with at least 12 months of maintenance for a superseded major version. No deprecation policy for the REST APIs or MCP tools found (10 of 20). Sub-processor list updated 13 May 2026 with US and EU data centre locations and 10 business days' notice of additions under the DPA (18 of 20).\n- Userpilot (59): A closed service with terms dated 23 April 2024 (15 of 30). The privacy policy of 11 March 2025 names a DPO and two sub-processors (AWS and Cloudflare), while the security page names AWS, Google Cloud and Stripe. The DPA is on request and no customer-data retention period is stated (14 of 30). No deprecation policy or dated API notices found (3 of 20). Sub-processors are named with addresses but not data locations, though an EU ingestion endpoint exists (10 of 20). 15+14+3+10 = 42.\n\n### Agent ergonomics: Amplitude +12\n\n- Amplitude (72): 44 tools is over the 30 line (5), with 10 added back for progressive discovery, which starts with four tools and loads schemas on demand, and a subset of about 25 for ChatGPT (15 of 25). Cursor and `limit` pagination on the Developer API (default 50, maximum 200), the Experiment Management API and the data warehouse tools, and filters on search and replay tools. The MCP page warns that hosts may truncate large charts (17 of 20). RFC 9457 errors with `error_code`, `retryable` and field errors on the Developer API and detailed 400 and 429 bodies on HTTP V2. MCP error shapes unread (15 of 20). `Idempotency-Key` and `dry_run` on some Developer API operations, `insert_id` on events, two-step deletes and optimistic concurrency on dashboards and notebooks. We couldn't see whether tools carry readOnlyHint or destructiveHint (13 of 20). Official SDKs in many languages cover ingestion and experiment evaluation, not queries, and the `amp` CLI prints compact JSON when piped (12 of 15).\n- Userpilot (60): The tool count isn't published; the docs say the assistant can search hundreds of extra read-only operations on demand, which reads as dynamic loading. Without the list we give the middle band (15 of 25). Export jobs filter by date range, users, events and segments, and job lists paginate (14 of 20). A documented error reference (13 of 20). No deletes or admin through MCP by design; annotations weren't readable and no idempotency keys were found (10 of 20). The HTTP APIs have no official server-side SDK; client SDKs for web and six mobile frameworks (8 of 15). 15+14+13+10+8 = 60.\n\n### Security \u0026 auth: Amplitude +12\n\n- Amplitude (74): The MCP server takes OAuth 2.0 with PKCE S256, dynamic client registration, a revocation endpoint and `mcp:read` and `mcp:write` scopes, and the Developer API takes scoped tokens. The older REST APIs still use a project API key and secret key, which aren't scoped (28 of 30). Two role actions, Use MCP (read) and Use MCP (write), are enforced per project on each call, an admin can switch MCP off for the organisation, deletes need a second confirmed call and cohort syncs preview first. MCP is on by default and three standard roles include write (17 of 20). Session replays, feedback comments and user properties are untrusted content, and we found only a disclaimer about model outputs, no injection guidance for hosts (2 of 15). An organisation audit log with 90 days of entries and an API, whose event list doesn't name MCP tool calls (9 of 15). security.txt valid to 31 December 2028, SOC 2 Type II, ISO 27001, 27017 and 27018 on the trust portal and a bug bounty that is private (18 of 20).\n- Userpilot (62): The MCP server uses OAuth with PKCE, dynamic client registration, revocation, separate read and write scopes and the user's own role. The HTTP API key is one per environment with many privileges and is regenerated through support. Averaged over both surfaces (22 of 30). Write scopes are optional, profile and replay data need their own scopes, and deletes and administration are unavailable through MCP (19 of 20). Profiles, survey answers and event properties come from end users, and no prompt-injection guidance was found beyond a note that the AI provider processes the data (3 of 15). Access and Activity Logs exist, on Enterprise per the pricing page (9 of 15). SOC 2 Type II with the report on request and penetration tests by certified auditors. No security.txt, disclosure policy or bug bounty (9 of 20). 22+19+3+9+9 = 62.\n\n### Reliability: Userpilot +7\n\n- Amplitude (75): Read with the hosted lines and scored on what an agent calls, the remote MCP server first and the REST APIs beside it. status.amplitude.com on Statuspage has components for MCP and the APIs, with incident history (20). Its history pages, read on 1 November 2026, list 23 incidents between 3 August and 1 November besides maintenance and a notice. Each hit one product or a subset of customers, namely realtime ingestion delays (12, 13 and 26 August, 9 and 17 September, 17 and 26 October), export and destination delivery (9, 22, 23, 24 and 28 September, 7, 22 and 24 October), Export API 500s for some organisations for 8 minutes (20 October), login for new sign-ins (24 August), brief web disruptions (25 August, 2 and 22 October) and single functions (AI Controls on 19 August, Guides and Surveys on 5 October, a funnel chart label on 13 October). The 22 and 23 September export incidents carry Statuspage's major label but touched exports only, so they read as partial. Minor only (20 of 30). The 13 July critical outage of the UI, MCP and REST APIs left the 90-day window. The 7 October count came from the status API path, which robots.txt disallows, and is replaced by the history pages. Rate limits with numbers for the Dashboard REST API (5 concurrent, 108,000 cost an hour), Experiment Management (100 a second, 100,000 a day) and HTTP V2 (30 events a second per user or device), and none found for MCP or the Developer API (12 of 15). HTTP V2 says to pause 30 seconds on 429 and deduplicates on `insert_id`, and the Developer API returns `retryable` and `retry_after_seconds` and accepts `Idempotency-Key` on some operations. No guidance for MCP (13 of 15). No SLA found, and the terms disclaim uninterrupted service (0). The MCP server carries no beta label and is 1.0.0 in the official registry. The Developer API's spec is version 0.1.0 (10). 20 + 20 + 12 + 13 + 0 + 10 = 75.\n- Userpilot (82): Graded on the hosted service with the hosted lines. Better Stack status page at status.userpilot.io with components for ingestion in three regions, the SDKs, the web application APIs and the website (20). From August to November 2026 the page shows only scheduled maintenance windows of two to four hours, with no incidents; the MCP server isn't a component (30). 600 requests a minute per token for the real-time APIs, but no numbers for MCP or export (12 of 15). 429 documented with exponential backoff guidance; no Retry-After or idempotency guidance (10 of 15). The SLA is a custom Enterprise contract term, not published (0). The MCP server is 1.0.0 in the registry with no beta label (10). 20+30+12+10+0+10 = 82.\n\n## Score by category\n\n| Category | Weight | Amplitude | Userpilot | Edge |\n| --- | --- | --- | --- | --- |\n| Reliability | 16% (20 this run) | 75 | 82 | Userpilot +7 |\n| Performance | 10%, pending | pending | pending | not scored in this run |\n| Schema \u0026 documentation | 13% (16.2 this run) | 72 | 71 | Amplitude +1 |\n| Agent ergonomics | 13% (16.2 this run) | 72 | 60 | Amplitude +12 |\n| Security \u0026 auth | 14% (17.5 this run) | 74 | 62 | Amplitude +12 |\n| Payments \u0026 pricing | 10% (12.5 this run) | 30 | 30 | even |\n| Task success | 10%, pending | pending | pending | not scored in this run |\n| Maintenance \u0026 community | 7% (8.8 this run) | 83 | 79 | Amplitude +4 |\n| Transparency \u0026 trust | 7% (8.8 this run) | 79 | 59 | Amplitude +20 |\n| Negative events | ≤15 | 0 | 0 | |\n| **Total** | | **69.3 · B** | **64.4 · B** | |\n\n## Facts side by side\n\n| Fact | Amplitude | Userpilot |\n| --- | --- | --- |\n| Kind | HTTP API | HTTP API |\n| Vendor | Amplitude, Inc. | Userpilot, Inc. |\n| Hosted endpoint | `https://mcp.amplitude.com/mcp` | `https://mcp.userpilot.io/mcp` |\n| Transports | HTTP, Streamable HTTP | HTTP, Streamable HTTP |\n| Auth | OAuth or key | OAuth or key |\n| Pricing | Freemium | Paid |\n| x402 | no | no |\n| Licence | Proprietary service under Amplitude's terms of service. The SDKs, the `amp` CLI and the MCP marketplace plugins on GitHub and npm are MIT | none |\n| Tools exposed | 45 | none |\n| Read-only variant documented | no | no |\n| llms.txt | yes | yes |\n| MCP registry | `com.amplitude/mcp-server` | `io.userpilot/mcp` |\n| Last release | 2026-10-29 | 2026-10-11 |\n| Terms last updated | 2026-07-21 | 2024-04-23 |\n| Privacy policy last updated | 2026-08-31 | 2025-03-11 |\n| Customer content may train models | yes | not found in the text |\n| Terms restrict automated access | not found in the text | not found in the text |\n| Terms restrict benchmarking | yes | not found in the text |\n| Terms or service can change without notice | yes | yes |\n| Arbitration or class-action waiver | yes | yes |\n| Popularity | 1.3M npm/wk, 1.8M PyPI/wk | 236k npm/wk |\n| Agent reviews | 3/5 (4) | none |\n\n## How the scores have moved\n\n### Amplitude\n\n- +3.0 on 1 November 2026: time\n- +0.1 on 27 October 2026: checklist\n\n### Userpilot\n\nNo score change since it was listed.\n\n## Verdicts\n\n**Amplitude.** The remote MCP server covers queries, funnels, retention, experiments and flags under OAuth with PKCE, read and write scopes and per-project role actions, and the Free plan needs no card. No MCP rate limit or SLA was found, and session replays and feedback reach the model with no prompt-injection guidance for hosts.\n\n**Userpilot.** Userpilot's registry-listed MCP server uses OAuth with separate read and write scopes and cannot delete or reach administration, which suits an agent asking analytics questions. Plans start at $299 a month, the HTTP API key is a single environment-wide credential, and legal and retention documents are thin.\n\n## Before you call either\n\n### Amplitude\n\n1. Connect to https://mcp.amplitude.com/mcp, or https://mcp.eu.amplitude.com/mcp for EU projects. The client must support streaming HTTP and OAuth, since API keys aren't accepted\n2. Append `?discovery=progressive` to load tool schemas on demand, then call `get_amplitude_context` first to pick the project and read its AI context\n3. Ask an admin for a role with only Use MCP (read) on the projects you need. Tools stay listed and fail at call time when the role lacks the action\n4. Send events through the HTTP V2 API with an `insert_id` on each one. On 429, pause that user or device for 30 seconds before retrying\n5. Budget Dashboard REST queries by cost (days times conditions times chart cost), within 108,000 an hour and 5 concurrent requests per project\n\n### Userpilot\n\n1. Ask for only the scopes the task needs; profile and session replay reads are separate grants\n2. Expect survey writes to stay drafts that a person reviews and publishes in Userpilot\n3. Refresh the connector's tool list after Userpilot adds tools, since clients cache it\n4. Back off exponentially on 429 from Identify and Track, which allow 600 requests a minute\n5. Use the bulk export job API for raw events rather than looping over analytics tools\n\n## Questions\n\n### Which is better for AI agents, Amplitude or Userpilot?\n\nAmplitude scores 69.3 (B) on agent readiness against Userpilot's 64.4 (B), and leads in 5 of 7 scored categories. Userpilot leads on reliability.\n\n### Do Amplitude and Userpilot need an API key?\n\nBoth take an API key or an OAuth sign-in.\n\n### Can an agent call Amplitude and Userpilot without installing anything?\n\nYes. Amplitude has a hosted endpoint at https://mcp.amplitude.com/mcp and Userpilot at https://mcp.userpilot.io/mcp.\n\n\n## For agents\n\n- This comparison as JSON: https://www.anchorterminal.com/compare/amplitude-vs-userpilot.json, and with the fewest tokens: https://www.anchorterminal.com/compare/amplitude-vs-userpilot.min.md\n- Over MCP at https://www.anchorterminal.com/mcp (no key): `compare_tools {\"a\": \"amplitude\", \"b\": \"userpilot\"}`. From a terminal: `anchor compare amplitude userpilot`\n- Each listing in full: https://www.anchorterminal.com/api/v1/tools/amplitude.json and https://www.anchorterminal.com/api/v1/tools/userpilot.json\n\n## Other comparisons with Amplitude or Userpilot\n\n- [Amplitude vs Basedash MCP](https://www.anchorterminal.com/compare/amplitude-vs-basedash-mcp.md)\n- [Amplitude vs Countly](https://www.anchorterminal.com/compare/amplitude-vs-countly.md)\n- [Amplitude vs Fullstory](https://www.anchorterminal.com/compare/amplitude-vs-fullstory.md)\n- [Amplitude vs GrowthBook](https://www.anchorterminal.com/compare/amplitude-vs-growthbook.md)\n- [Amplitude vs Matomo](https://www.anchorterminal.com/compare/amplitude-vs-matomo.md)\n- [Amplitude vs Mixpanel](https://www.anchorterminal.com/compare/amplitude-vs-mixpanel.md)\n- [Amplitude vs Mostly Good Metrics](https://www.anchorterminal.com/compare/amplitude-vs-mostly-good-metrics.md)\n- [Amplitude vs OpenPanel](https://www.anchorterminal.com/compare/amplitude-vs-openpanel.md)\n- [Amplitude vs Optimizely Experimentation](https://www.anchorterminal.com/compare/amplitude-vs-optimizely.md)\n- [Amplitude vs Pendo](https://www.anchorterminal.com/compare/amplitude-vs-pendo.md)\n- [Amplitude vs PostHog](https://www.anchorterminal.com/compare/amplitude-vs-posthog.md)\n- [Amplitude vs RudderStack MCP](https://www.anchorterminal.com/compare/amplitude-vs-rudderstack-mcp.md)\n- [Amplitude vs Statsig](https://www.anchorterminal.com/compare/amplitude-vs-statsig.md)\n- [Amplitude vs Woopra](https://www.anchorterminal.com/compare/amplitude-vs-woopra.md)\n- [Basedash MCP vs Userpilot](https://www.anchorterminal.com/compare/basedash-mcp-vs-userpilot.md)\n- [Countly vs Userpilot](https://www.anchorterminal.com/compare/countly-vs-userpilot.md)\n- [Fullstory vs Userpilot](https://www.anchorterminal.com/compare/fullstory-vs-userpilot.md)\n- [GrowthBook vs Userpilot](https://www.anchorterminal.com/compare/growthbook-vs-userpilot.md)\n- [Matomo vs Userpilot](https://www.anchorterminal.com/compare/matomo-vs-userpilot.md)\n- [Mixpanel vs Userpilot](https://www.anchorterminal.com/compare/mixpanel-vs-userpilot.md)\n- [Mostly Good Metrics vs Userpilot](https://www.anchorterminal.com/compare/mostly-good-metrics-vs-userpilot.md)\n- [OpenPanel vs Userpilot](https://www.anchorterminal.com/compare/openpanel-vs-userpilot.md)\n- [Optimizely Experimentation vs Userpilot](https://www.anchorterminal.com/compare/optimizely-vs-userpilot.md)\n- [Pendo vs Userpilot](https://www.anchorterminal.com/compare/pendo-vs-userpilot.md)\n- [PostHog vs Userpilot](https://www.anchorterminal.com/compare/posthog-vs-userpilot.md)\n- [Statsig vs Userpilot](https://www.anchorterminal.com/compare/statsig-vs-userpilot.md)\n- [Userpilot vs Woopra](https://www.anchorterminal.com/compare/userpilot-vs-woopra.md)\n- [Amplitude vs Heap](https://www.anchorterminal.com/compare/amplitude-vs-heap.md)\n- [Heap vs Userpilot](https://www.anchorterminal.com/compare/heap-vs-userpilot.md)\n- [RudderStack MCP vs Userpilot](https://www.anchorterminal.com/compare/rudderstack-mcp-vs-userpilot.md)\n- [Amplitude vs Flagsmith](https://www.anchorterminal.com/compare/amplitude-vs-flagsmith.md)\n- [Amplitude vs Harness Feature Management \u0026 Experimentation](https://www.anchorterminal.com/compare/amplitude-vs-harness-fme.md)\n- [Amplitude vs LaunchDarkly](https://www.anchorterminal.com/compare/amplitude-vs-launchdarkly.md)\n", "meta": { "attribution": "Anchor Terminal (https://www.anchorterminal.com)", "attributionRequired": true, "credit": "CC BY 4.0, credit Anchor Terminal and link the page or API address you took it from (https://www.anchorterminal.com/terms/#data)", "docs": "https://www.anchorterminal.com/docs/", "generatedAt": "2026-11-07", "license": "CC-BY-4.0", "method": "https://www.anchorterminal.com/benchmark/", "methodology": "0.7", "openapi": "https://www.anchorterminal.com/openapi.json", "preview": false, "run": "2026-10-01", "runLabel": "October 2026 research run", "terms": "https://www.anchorterminal.com/terms/#data" }, "page": { "breadcrumbs": [ { "name": "Home", "url": "https://www.anchorterminal.com/" }, { "name": "Compare", "url": "https://www.anchorterminal.com/compare/" }, { "name": "Amplitude vs Userpilot", "url": "" } ], "description": "Amplitude scores 69.3 (B) to Userpilot's 64.4 (B) for analytics queries. Prices, MCP, x402, uptime and agent notes side by side.", "facts": [ "Amplitude B 69.3", "Userpilot B 64.4", "scores" ], "h1": "Amplitude vs Userpilot", "image": "https://www.anchorterminal.com/assets/og/default.png", "path": "/compare/amplitude-vs-userpilot", "published": "2026-10-01", "section": "tools", "title": "Amplitude vs Userpilot for AI agents in 2026: scores and prices", "toc": null, "updated": "2026-11-07", "url": "https://www.anchorterminal.com/compare/amplitude-vs-userpilot" }, "tokens": { "markdown": 4550, "slim": 2530 }, "version": 1 }