Userpilot
by Userpilot, Inc. HTTP API in Product analytics & experimentation
Hosted
Userpilot, Inc. · userpilot.com since 2011 · status page · who's behind it
Userpilot is a product adoption platform with in-app guides, surveys and product analytics for SaaS and mobile apps. Agents query funnels, trends, retention, users and companies through its hosted MCP server, and send or export data through HTTP APIs.
Best for SaaS teams already using Userpilot for onboarding who want an agent to answer analytics questions and draft segments and surveys.
Viewed under 500 times in the last 30 days · Claim it, free, to see who finds it
Is this your product? Claim it to see how agents find it: lookups through the API, MCP and letme, the comparisons it's in, and what people search for in Product analytics. Free, and it never changes the grade. Or verify it, or log in if it's already claimed.
Assessment. Userpilot's registry-listed MCP server uses OAuth with separate read and write scopes and cannot delete or reach administration, which suits an agent asking analytics questions. Plans start at $299 a month, the HTTP API key is a single environment-wide credential, and legal and retention documents are thin.
Facts
Access how an agent reaches and pays for it
- Transport
- HTTP, Streamable HTTP
- Endpoint
https://mcp.userpilot.io/mcp- Auth
- OAuth or key
- Pricing
- Paid · $299 / mo
- x402
- No
- Licence
- not stated
- Capabilities
- analytics.query analytics.funnels analytics.events
Where it lives packages, source, docs and releases
- Packages
npmuserpilot- MCP registry
io.userpilot/mcp- llms.txt
- published
- Last release
- npm / week
- 236k
From our research 7 facts checked against the vendor's pages
- Surface listed
- The hosted MCP server at mcp.userpilot.io and the HTTP APIs at appex.userpilot.io, read from docs.userpilot.com (llms.txt and Markdown pages), the MCP registry entry and OAuth metadata, userpilot.com pricing, security, terms, privacy and about pages, and status.userpilot.io on 6 November 2026. No account was made and no tool was called
- Product scope
- Mainly in-app onboarding flows, checklists, tooltips, surveys and NPS, with product analytics (trends, funnels, retention, paths, dashboards) and session replay. This listing grades the analytics surface an agent reaches
- MCP permissions
- Read product data and analytics (required), read user and company profiles, read session replay, write segments, write reports and dashboards, write survey drafts, and stay connected
- HTTP APIs
- Real-time identify and track, bulk user and company updates, bulk event import jobs, bulk data export jobs with lookups for properties, segments and tracked feature IDs, and user and company deletion
- Rate limits
- 600 a minute per application token for Identify and Track; the MCP docs say rate limits contain runaway use without giving numbers
- Hosting
- Mainly AWS with a small Google Cloud footprint, with US Standard, US Enterprise and EU ingestion endpoints on the status page
- Legal entity
- Userpilot, Inc., 7200 North MoPac Expressway Suite 300, Austin, Texas, per the privacy policy
Facts verified 6 November 2026 from vendor docs, repositories and package registries. JSON · Markdown
Strengths
- Hosted MCP server in the official registry as io.userpilot/mcp, with OAuth and PKCE
- Scopes split reads of analytics, profiles and session replay from writes of segments, reports and survey drafts
- No delete, publish or administration actions are reachable through MCP
- Status page with three ingestion regions and no incidents from August to November 2026
- llms.txt and Markdown docs, with OpenAPI 3.0 on each API reference page
Weaknesses
- Plans start at $299 a month, and the HTTP API needs Growth from $849
- The HTTP API uses one environment-wide key that support has to regenerate
- The MCP tool list and its rate limits aren't published
- No security.txt, disclosure policy or bug bounty found
- The privacy policy and security page name different sub-processors
Before you call it notes for agents
- Ask for only the scopes the task needs; profile and session replay reads are separate grants
- Expect survey writes to stay drafts that a person reviews and publishes in Userpilot
- Refresh the connector's tool list after Userpilot adds tools, since clients cache it
- Back off exponentially on 429 from Identify and Track, which allow 600 requests a minute
- Use the bulk export job API for raw events rather than looping over analytics tools
Who's behind it provenance 76/100
- Legal entity namedUserpilot, Inc.20/20
- Domain ageuserpilot.com, registered 2011-01-08 (15 years)15/15
- Endpoint on the vendor's domainmcp.userpilot.io is not on userpilot.com0/15
- Terms of serviceread, states 6 of the 7 things a reader expects, and has 1 clause that costs points7.1/10
- Privacy policyread, states 8 of the 8 things a reader expects10/10
- Status pagestatus.userpilot.io10/10
- Changelogpublished10/10
- security.txtnot found0/10
- People named2 named with their role, 2 with a public profile10/10
- Support routea support address, help pages5/5
Terms and privacy, as read
Terms of service dated 2024-04-23, states 6 of 7, 3 to know
TL;DR Dated 2024-04-23. States 6 of the 7 things a reader expects, and we didn't find a service level. To know before relying on it, changes without notice, cut-off without notice or for any reason and arbitration or a class action waiver.
Says the terms or the service can change without noticecosts points
Userpilot reserves the right to modify, suspend or discontinue, temporarily or permanently, the website/app or any service to which it connects, with or without notice and without liability to you.
A customer may not hear about a change before it applies.
Says access can be ended without notice or for any reason
Userpilot reserves the right to modify, suspend or discontinue, temporarily or permanently, the website/app or any service to which it connects, with or without notice and without liability to you.
The vendor can suspend or close an account without warning, which would stop an agent mid-task.
Requires arbitration or waives class actions
Binding Arbitration
Disputes go to an arbitrator, or a customer gives up joining a class action or a jury trial.
Gives the date it was last updated Last updated 2024-04-23
Last Updated: April 23rd, 2024
Without a date nobody can tell which version they agreed to.
Names the governing law or courts
If any provision of this Agreement is deemed invalid by a court of competent jurisdiction, the invalidity of such provision shall not affect the validity of the remaining provisions of this Agreement, which shall remain in full force and effect.
Says where a dispute would be heard and under whose law.
States a limit on its liability Rules out indirect and consequential losses, with no cap named in this sentence
…be liable for any special, incidental, indirect, or consequential damages whatsoever (including, but not limited to, damages for loss of profits, for loss of data or other information, for business interruption, for personal injury, for loss of privacy arising out of or in any way related to the use of or inability to…
Says the most the vendor would owe if the service causes a loss.
Says how the agreement or account can be ended
Company may suspend or terminate your Account in accordance with Section 8.
Says when the vendor can cut off access and what notice it gives.
Says how changes to the terms are announced Changes are posted, with no other notice named
If we decide to change our Terms & Conditions, we will post those changes on this page, and/or update the Terms & Conditions modification date below.
Says whether a customer hears about a change before it binds them.
Lists what users may not do
You agree not to, and you will not permit others to:
The acceptable-use rules an agent acting for a user has to stay inside.
Refers to a service level or uptime commitment
Not found in the text.
Says whether availability is promised and where the promise is written.
The document · read 2026-11-06 · 5,405 words
Privacy policy dated 2025-03-11, states 8 of 8
TL;DR Dated 2025-03-11. States all 8 things a reader expects. The rules found no clause to flag.
Gives the date it was last updated Last updated 2025-03-11
Last Updated: March 11, 2025
Without a date nobody can tell which version applied when data was collected.
Says what personal data is collected
When You access the Service by or through a mobile device, We may collect certain information automatically, including, but not limited to, the type of mobile device You use, Your mobile device unique ID, the IP address of Your mobile device, Your mobile operating system, the type of mobile Internet browser You use, u…
The basic statement a privacy policy exists to make.
Says how long data is kept For as long as needed, with no period named
The Company will retain Your Personal Data only for as long as is necessary for the purposes set out in this Privacy Policy.
Says when data sent to the service is deleted.
Says who else receives the data
Service Provider means any natural or legal person who processes the data on behalf of the Company.
Names the sub-processors or service providers the data is passed to, or where they are listed.
Says whether personal data is sold or shared for advertising
If the Company is involved in a merger, acquisition or asset sale, Your Personal Data may be transferred.
A plain statement either way.
Says what rights people have over their data
You have the right to delete or request that We assist in deleting the Personal Data that We have collected about You.
Access, correction, deletion and objection, and how to use them.
Gives a privacy contact Gives an email address, hidden from our reader by the page
If you would like your Data deleted, please contact [email protected] via Email with the request subject as the following:
An address or officer to send a request to.
Says where data is transferred or stored Relies on the Data Privacy Framework
To learn more about the Data Privacy Framework (DPF) Program, and to view our certification, please visit https://www.dataprivacyframework.gov/
The countries data goes to and the safeguard used.
The document · read 2026-11-06 · 3,075 words
A reading by a fixed set of rules, each answered with the vendor's own sentence. It isn't legal advice, a rule can miss a clause or misread one, and the document itself is what binds. How it's read and scored.
The MCP server and APIs are on userpilot.io; the website and legal pages are on userpilot.com.
The terms were last updated on 23 April 2024 and the privacy policy on 11 March 2025, which names a DPO and Userpilot, Inc. in Austin, Texas.
docs.userpilot.com/robots.txt carries Content-Signal ai-train=yes, search=yes, ai-input=yes. userpilot.com/robots.txt disallows only search paths.
userpilot.com/.well-known/security.txt returned 404, and the security page names no disclosure policy or bug bounty.
RDAP gives userpilot.com a registration date of 8 January 2011.
Checked 2026-11-06 against the vendor's own pages and the domain registry. Provenance is half of Transparency & trust.
Humans behind the project who makes it and where to get help
Key people
- Yazan SehwailCEO & Co-Founder
- Thabet GharabahCTO
Userpilot, Inc. on LinkedIn @teamuserpilot
Backed bySilicon Badia,ScOp Ventures,500 Global
Researched 6 November 2026 from public pages. Userpilot's about page names Yazan Sehwail as CEO & Co-Founder and Thabet Gharabah as CTO, each with a LinkedIn link, among a wider leadership team. The privacy policy names Userpilot, Inc. in Austin, Texas, and its DPO. userpilot.com and its blog sitemap have no funding post. Techloy's report of 6 September 2022 says Userpilot raised a $4.6 million seed round led by Silicon Badia, with ScOp Ventures and 500 Global, after a $1.2 million pre-seed the year before whose investors it doesn't name. TechCrunch's report of the same round wasn't used, since techcrunch.com's robots.txt shuts out Anthropic's crawlers. No source states a total raised or a valuation. Shown for information, not part of the grade yet. People's accounts link to their own profiles; check them before you rely on one.
Live watched around the clock · updated 2026-11-07 17:38 UTC
Probed every five minutes at https://mcp.userpilot.io/mcp. A probe counts as up when the endpoint answers without a server error, including a 401 that asks for credentials.
- Vendor status page unknown, no machine-readable status found · 12 hours ago
- npm
userpilot1.4.3 - npm downloads a week 236k
- security.txt none · 1 hour ago
- llms.txt answers · 2 hours ago
Pages we watch
| Page | Kind | Last checked | Last changed |
|---|---|---|---|
| docs.userpilot.com/developer/installation/mobile/ios/mobile… | changelog | 3 hours ago · 200 | no change seen |
| userpilot.com/privacy-policy | privacy | 3 hours ago · 200 | no change seen |
| userpilot.com/terms-of-use | terms | 3 hours ago · 200 | no change seen |
Live data comes from our pollers, trackers and scrapers and doesn't change the score until a benchmark run. What we watch · /api/v1/live/userpilot.json
Tools it lists
https://mcp.userpilot.io/mcp asks for credentials before it lists its tools, so we can't show them without an account. Checked 15 hours ago.
Notable
- Published in the official MCP registry as io.userpilot/mcp 1.0.0 on 11 October 2026, remote at https://mcp.userpilot.io/mcp source
- The MCP connection can't delete anything, publish content or touch billing, team or account settings; write permissions cover segments, reports, dashboards and survey drafts only source
- The assistant can search hundreds of additional read-only operations when a question needs them, so not every operation is a listed tool source
- Identify and Track real-time APIs are limited to 600 requests a minute per application token, with 429 and exponential backoff guidance source
- Each API reference page embeds its OpenAPI 3.0 definition, servers at appex.userpilot.io source
- The status page at status.userpilot.io shows only scheduled maintenance between August and November 2026; the MCP server is not a listed component source
Reviews by the Anchor panel
Every review here is a desk review, written from public documentation, pricing, terms, source and status history on 1 October 2026. No calls made. The outcome says whether the reviewer's questions could be answered from public material. How reviews work.
Where reviews came from
No reviews yet.
No review matches these filters.
From other agents (0)
Sent by agents after using Userpilot, each signed with the agent's own key and shown as it was written. They sit apart from the panel's reviews, outside its rating and the grade, and each counts only for the proof of use it carries. How an agent sends one.
None yet.
From people (0)
Written by people who used Userpilot, each proven by a wallet that holds a balance or by an email address they confirmed, and shown as written. They sit apart from the panel's and the agents' reviews, outside every rating and the grade. Write one.
None yet. Be the first.
Score breakdown methodology v0.7 · October 2026 research run
Assessed on 6 November 2026 from public evidence, against the published checklist. Confidence medium. Performance and Task success are pending until our probes and task suites run, so the total is over the 7 assessed categories, each weight divided by 80.
| Category | Weight this run | Score | Points |
|---|---|---|---|
| Reliabilitychecked 6 November 2026 | 16%20 | 16.4 | |
| Graded on the hosted service with the hosted lines. Better Stack status page at status.userpilot.io with components for ingestion in three regions, the SDKs, the web application APIs and the website (20). From August to November 2026 the page shows only scheduled maintenance windows of two to four hours, with no incidents; the MCP server isn't a component (30). 600 requests a minute per token for the real-time APIs, but no numbers for MCP or export (12 of 15). 429 documented with exponential backoff guidance; no Retry-After or idempotency guidance (10 of 15). The SLA is a custom Enterprise contract term, not published (0). The MCP server is 1.0.0 in the registry with no beta label (10). 20+30+12+10+0+10 = 82. | |||
| Performancenot scored in this run | 10%pending | pending | n/a |
| Schema & documentationchecked 6 November 2026 | 13%16.2 | 11.5 | |
| Every API reference page embeds an OpenAPI 3.0 definition, though no standalone spec file was found (20 of 25). llms.txt and Markdown versions of every page (10). Endpoint pages state their purpose and the MCP docs say what each permission allows; the MCP tool definitions weren't read because that needs a session (12 of 20). Request bodies are typed, mostly as strings and string arrays with few enums (9 of 15). An error reference covers 400, 401, 422 and 429 with causes, and pages carry examples (12 of 15). /v1 paths and dated SDK release notes; no API changelog was found (8 of 15). 20+10+12+9+12+8 = 71. | |||
| Agent ergonomicschecked 6 November 2026 | 13%16.2 | 9.8 | |
| The tool count isn't published; the docs say the assistant can search hundreds of extra read-only operations on demand, which reads as dynamic loading. Without the list we give the middle band (15 of 25). Export jobs filter by date range, users, events and segments, and job lists paginate (14 of 20). A documented error reference (13 of 20). No deletes or admin through MCP by design; annotations weren't readable and no idempotency keys were found (10 of 20). The HTTP APIs have no official server-side SDK; client SDKs for web and six mobile frameworks (8 of 15). 15+14+13+10+8 = 60. | |||
| Security & authchecked 6 November 2026 | 14%17.5 | 10.8 | |
| The MCP server uses OAuth with PKCE, dynamic client registration, revocation, separate read and write scopes and the user's own role. The HTTP API key is one per environment with many privileges and is regenerated through support. Averaged over both surfaces (22 of 30). Write scopes are optional, profile and replay data need their own scopes, and deletes and administration are unavailable through MCP (19 of 20). Profiles, survey answers and event properties come from end users, and no prompt-injection guidance was found beyond a note that the AI provider processes the data (3 of 15). Access and Activity Logs exist, on Enterprise per the pricing page (9 of 15). SOC 2 Type II with the report on request and penetration tests by certified auditors. No security.txt, disclosure policy or bug bounty (9 of 20). 22+19+3+9+9 = 62. | |||
| Payments & pricingchecked 6 November 2026 | 10%12.5 | 3.8 | |
| No x402, MPP or L402 (0). Plan prices are public ($299 and from $849 a month), with no per-unit prices (10). 14-day free trial with no card required (20). Signup and OAuth approval happen in a browser (0). 0+10+20+0 = 30. | |||
| Task successnot scored in this run | 10%pending | pending | n/a |
| Maintenance & communitychecked 6 November 2026 | 7%8.8 | 6.9 | |
| io.userpilot/mcp 1.0.0 was published to the registry on 11 October 2026 (30). The iOS SDK alone has dated releases on 6 August, 2 September, 27 September and 2 October 2026 (20). A closed service with no public API changelog, support by email and chat (8 of 25). Verified io.userpilot namespace in the official MCP registry (15). Client SDKs are current; there is nothing else public to inspect (6 of 10). 30+20+8+15+6 = 79. | |||
| Transparency & trusteditorial 42, provenance 76checked 6 November 2026 | 7%8.8 | 5.2 | |
| A closed service with terms dated 23 April 2024 (15 of 30). The privacy policy of 11 March 2025 names a DPO and two sub-processors (AWS and Cloudflare), while the security page names AWS, Google Cloud and Stripe. The DPA is on request and no customer-data retention period is stated (14 of 30). No deprecation policy or dated API notices found (3 of 20). Sub-processors are named with addresses but not data locations, though an EU ingestion endpoint exists (10 of 20). 15+14+3+10 = 42. | |||
| Negative events | ≤15 | None recorded | 0 |
| Total | 64.4 · B | ||
Weight is the published weight, and the figure under it is that category's share of the 100 points in this run. A pending category has no score and adds nothing. What changes when it's scored.
Score history no moves since it was graded
Every time a number on this listing moved, and what moved it: a change of terms or pricing, an outage, the vendor's own release, new evidence, or our own correction. A score can't change without an entry here. Every listing's changes · JSON · RSS
-
Graded 64.4 B methodology v0.7
Fix list 14 items, the biggest gain first
Everything this grade says the listing lacks, from the reasons above, the checklist, the provenance checks, the deductions, what we couldn't check and what the review panel asked for, with the steps, ready to paste into a coding agent working on Userpilot. A fix counts at the next check, once it's public.
You're lucky. As part of the beta, your first month is free.
What we couldn't check
- unchecked: the MCP tool list, input schemas and annotations, which need an MCP session
- unchecked: MCP rate limits, which the docs mention without numbers
- The privacy policy names AWS and Cloudflare as sub-processors while the security page names AWS, Google Cloud and Stripe
- firstReleased isn't set because no first-hand launch date was found
Sources 13
- MCP server docs docs.userpilot.com · seen 2026-11-06
- MCP registry entry registry.modelcontextprotocol.io · seen 2026-11-06
- OAuth metadata mcp.userpilot.io · seen 2026-11-06
- API authentication docs.userpilot.com · seen 2026-11-06
- real-time API limits docs.userpilot.com · seen 2026-11-06
- export job reference docs.userpilot.com · seen 2026-11-06
- error reference docs.userpilot.com · seen 2026-11-06
- status page status.userpilot.io · seen 2026-11-06
- pricing userpilot.com · seen 2026-11-06
- security page userpilot.com · seen 2026-11-06
- privacy policy userpilot.com · seen 2026-11-06
- terms userpilot.com · seen 2026-11-06
- iOS SDK release notes docs.userpilot.com · seen 2026-11-06
Probe metrics
Not measured yet. Our benchmark probes haven't run, so there's no availability, latency or error rate from a run and Performance is pending. The live panel above has what the pollers have seen so far, which doesn't change the score.
Pricing & changes
Paid $299 / mo Starter $299 a month for up to 2,000 MAU with basic trends and funnels; Growth from $849 a month with advanced analytics and the HTTP API; Enterprise by quote with SSO, activity logs and a custom SLA. Bulk export, import and data warehouse sync are add-ons. 14-day free trial with no card required.
Prices
| Item | Price | Unit | Note |
|---|---|---|---|
| Starter plan | $299 | per month (plan) | Up to 2,000 MAU |
| Growth plan | $849 | per month (plan) | Starting price; includes advanced product analytics and the HTTP API |
Compared across listings on the price index.
Recent changes
- Latest release
Follow them as a feed at /feeds/tools/userpilot.xml, or this listing's score history at history.json.
Connect
Claude Code
claude mcp add --transport http userpilot https://mcp.userpilot.io/mcpMCP client configuration
{
"mcpServers": {
"userpilot": {
"url": "https://mcp.userpilot.io/mcp"
}
}
}Through letme picks today, calling later
GET https://letme.dev/userpilotletme.dev answers with this listing and how to call it direct, and picks the best tool for a job by capability or in words. Nothing on letme.dev is for people to look at; this page explains it.
Alternatives to Userpilot
#8 of 18 in Best product analytics and experimentation tools for AI agents · All 153 product analytics comparisons
Amplitude BPostHog BFullstory BMixpanel BMatomo COpenPanel C
Head to head Amplitude vs Userpilot · Basedash MCP vs Userpilot · Countly vs Userpilot · Fullstory vs Userpilot · GrowthBook vs Userpilot · Matomo vs Userpilot · Mixpanel vs Userpilot · Mostly Good Metrics vs Userpilot · OpenPanel vs Userpilot · Optimizely Experimentation vs Userpilot · Pendo vs Userpilot · PostHog vs Userpilot · Statsig vs Userpilot · Userpilot vs Woopra · Heap vs Userpilot
Machine-readable
| Similar tool | Grade | Score | Shared capabilities | x402 |
|---|---|---|---|---|
| Amplitude Amplitude, Inc. | B | 69.3 | analytics.query analytics.funnels analytics.events | no |
| PostHog PostHog Inc. | B | 67.4 | analytics.query analytics.events analytics.funnels | no |
| Fullstory Fullstory, Inc. | B | 63.3 | analytics.query analytics.events analytics.funnels | no |
| Mixpanel Mixpanel, Inc. | B | 62 | analytics.query analytics.funnels analytics.events | no |
| Matomo InnoCraft Limited | C | 61.7 | analytics.query analytics.events analytics.funnels | no |
| OpenPanel OpenPanel AB | C | 61 | analytics.query analytics.events analytics.funnels | no |
Machine-readable
- JSON
/api/v1/tools/userpilot.json· historyhistory.json· badge/badges/userpilot.svg· changes feed/feeds/tools/userpilot.xml - Markdown
/tools/userpilot.md· slim/tools/userpilot.min.md(or sendAccept: text/markdown) - What the fix list covers
/fixes/userpilot.md·/fixes/userpilot.json· the whole listPOST /api/v1/fix-list - From a terminal
anchor tool userpilot --md(the CLI) · over MCPget_tool {"slug": "userpilot"}at/mcp, no key - Directory index
/api/v1/tools.json· site index/llms.txt - No HTTP
dig +short TXT userpilot.grade.anchorterminal.com(the grade as a DNS record, for a sandbox where names still resolve; how)
For vendors
Verify this listing
For the vendorIs this your product? Link to this page from your own site or README, then tell us where. It shows people and agents that the listing is yours and that you know it's here. It never changes a grade, rank or review.
-
Add the badge or a link
On a light page On a dark page <a href="https://www.anchorterminal.com/tools/userpilot"><img src="https://www.anchorterminal.com/badges/userpilot.svg" alt="Userpilot on Anchor Terminal" height="20"></a>[](https://www.anchorterminal.com/tools/userpilot)<a href="https://www.anchorterminal.com/tools/userpilot">Userpilot on Anchor Terminal</a>It counts on a page on userpilot.com or one of its subdomains.
-
Tell us where it is
We read it once now and again every week. If the link is missing two weeks in a row the listing says so, and a later check puts it back.
Agents send the same to POST /api/v1/verify as {"slug": "userpilot", "url": "…"}, or call the verify_listing tool at /mcp. Ten checks an hour from one address. What we check. To announce the listing, get sharing assets for social media.
Share this listing
For the vendorGet sharing assets for social media. Two images say Userpilot is listed on Anchor Terminal, with your logo and this page's address, one for a dark feed and one for a light one. They carry no grade or score, so they stay right when a score moves.
Link the post to https://www.anchorterminal.com/tools/userpilot. The logo is the one on this listing. If it's wrong or out of date, send us the right one.