{ "data": { "similar": [ { "grade": "B", "json": "https://www.anchorterminal.com/tools/amplitude.json", "name": "Amplitude", "score": 69.3, "shared": [ "analytics.query", "analytics.funnels", "analytics.events" ], "slug": "amplitude" }, { "grade": "B", "json": "https://www.anchorterminal.com/tools/posthog.json", "name": "PostHog", "score": 67.4, "shared": [ "analytics.query", "analytics.events", "analytics.funnels" ], "slug": "posthog" }, { "grade": "B", "json": "https://www.anchorterminal.com/tools/fullstory.json", "name": "Fullstory", "score": 63.3, "shared": [ "analytics.query", "analytics.events", "analytics.funnels" ], "slug": "fullstory" }, { "grade": "B", "json": "https://www.anchorterminal.com/tools/mixpanel.json", "name": "Mixpanel", "score": 62, "shared": [ "analytics.query", "analytics.funnels", "analytics.events" ], "slug": "mixpanel" }, { "grade": "C", "json": "https://www.anchorterminal.com/tools/matomo.json", "name": "Matomo", "score": 61.7, "shared": [ "analytics.query", "analytics.events", "analytics.funnels" ], "slug": "matomo" }, { "grade": "C", "json": "https://www.anchorterminal.com/tools/openpanel.json", "name": "OpenPanel", "score": 61, "shared": [ "analytics.query", "analytics.events", "analytics.funnels" ], "slug": "openpanel" } ], "tool": { "slug": "userpilot", "name": "Userpilot", "vendor": "Userpilot, Inc.", "vendorUrl": "https://userpilot.com", "kind": "http-api", "category": "product-analytics", "summary": "Userpilot is a product adoption platform with in-app guides, surveys and product analytics for SaaS and mobile apps. Agents query funnels, trends, retention, users and companies through its hosted MCP server, and send or export data through HTTP APIs.", "url": "https://www.anchorterminal.com/tools/userpilot", "markdownUrl": "https://www.anchorterminal.com/tools/userpilot.md", "slimMarkdownUrl": "https://www.anchorterminal.com/tools/userpilot.min.md", "jsonUrl": "https://www.anchorterminal.com/api/v1/tools/userpilot.json", "dns": "userpilot.grade.anchorterminal.com", "transports": [ "http", "streamable-http" ], "remoteUrl": "https://mcp.userpilot.io/mcp", "packages": [ { "registry": "npm", "name": "userpilot" } ], "auth": "mixed", "authNotes": "The hosted MCP server uses OAuth 2.0 with PKCE, dynamic client registration and a permission screen. Scopes are data:read (always required), people:read, sessions:read, segments:write, reports:write, feedback:write and offline_access; the connection runs under the user's own role and can't delete or reach administration. The HTTP APIs take one environment API key as `Authorization: Token \u003ckey\u003e`, shown on the Environment page; the docs say to contact support to regenerate it.", "pricing": "paid", "pricingNotes": "Starter $299 a month for up to 2,000 MAU with basic trends and funnels; Growth from $849 a month with advanced analytics and the HTTP API; Enterprise by quote with SSO, activity logs and a custom SLA. Bulk export, import and data warehouse sync are add-ons. 14-day free trial with no card required.", "priceSummary": "$299 / mo", "where": "hosted", "x402": { "level": "no", "evidence": "No x402, MPP or L402 in the docs, llms.txt, the MCP docs or the pricing page (checked 2026-11-06).", "endpoints": [] }, "toolCount": null, "popularity": { "githubStars": null, "npmWeekly": 235722, "pypiWeekly": null, "asOf": "2026-11-06" }, "docsUrl": "https://docs.userpilot.com/api-references/overview", "mcpTools": { "url": "https://mcp.userpilot.io/mcp", "checkedAt": "2026-11-07T01:48:55.558250288Z", "status": "auth", "note": "asks for credentials before listing its tools", "changedAt": "2026-11-07T01:48:55.558250288Z" }, "llmsTxt": "https://docs.userpilot.com/llms.txt", "registryName": "io.userpilot/mcp", "capabilities": [ "analytics.query", "analytics.funnels", "analytics.events" ], "tags": [ "official", "hosted", "mcp", "remote-mcp", "mcp-registry", "oauth", "llms-txt", "no-card", "status-page", "soc2", "closed-source", "webhooks", "eu-region" ], "lastRelease": "2026-10-11", "graded": true, "anchor": { "graded": true, "score": 64.4, "grade": "B", "agentReady": false, "rank": 471, "ranked": true, "rankOf": 1486, "categoryRank": 8, "methodology": "0.7", "run": "2026-10-01", "scores": { "ergonomics": 60, "maintenance": 79, "payments": 30, "reliability": 82, "schema": 71, "security": 62, "transparency": 59 }, "pending": [ "performance", "tasks" ], "breakdown": [ { "key": "reliability", "name": "Reliability", "weight": 16, "effectiveWeight": 20, "score": 82, "points": 16.4, "reason": "Graded on the hosted service with the hosted lines. Better Stack status page at status.userpilot.io with components for ingestion in three regions, the SDKs, the web application APIs and the website (20). From August to November 2026 the page shows only scheduled maintenance windows of two to four hours, with no incidents; the MCP server isn't a component (30). 600 requests a minute per token for the real-time APIs, but no numbers for MCP or export (12 of 15). 429 documented with exponential backoff guidance; no Retry-After or idempotency guidance (10 of 15). The SLA is a custom Enterprise contract term, not published (0). The MCP server is 1.0.0 in the registry with no beta label (10). 20+30+12+10+0+10 = 82.", "checked": "2026-11-06" }, { "key": "performance", "name": "Performance", "weight": 10, "effectiveWeight": 0, "pending": true, "points": 0, "reason": "Pending. Latency is measured per call by our probes, which haven't run yet, so this run doesn't score it. Its weight is shared across the assessed categories until the first probe window closes." }, { "key": "schema", "name": "Schema \u0026 documentation", "weight": 13, "effectiveWeight": 16.25, "score": 71, "points": 11.54, "reason": "Every API reference page embeds an OpenAPI 3.0 definition, though no standalone spec file was found (20 of 25). llms.txt and Markdown versions of every page (10). Endpoint pages state their purpose and the MCP docs say what each permission allows; the MCP tool definitions weren't read because that needs a session (12 of 20). Request bodies are typed, mostly as strings and string arrays with few enums (9 of 15). An error reference covers 400, 401, 422 and 429 with causes, and pages carry examples (12 of 15). /v1 paths and dated SDK release notes; no API changelog was found (8 of 15). 20+10+12+9+12+8 = 71.", "checked": "2026-11-06" }, { "key": "ergonomics", "name": "Agent ergonomics", "weight": 13, "effectiveWeight": 16.25, "score": 60, "points": 9.75, "reason": "The tool count isn't published; the docs say the assistant can search hundreds of extra read-only operations on demand, which reads as dynamic loading. Without the list we give the middle band (15 of 25). Export jobs filter by date range, users, events and segments, and job lists paginate (14 of 20). A documented error reference (13 of 20). No deletes or admin through MCP by design; annotations weren't readable and no idempotency keys were found (10 of 20). The HTTP APIs have no official server-side SDK; client SDKs for web and six mobile frameworks (8 of 15). 15+14+13+10+8 = 60.", "checked": "2026-11-06" }, { "key": "security", "name": "Security \u0026 auth", "weight": 14, "effectiveWeight": 17.5, "score": 62, "points": 10.85, "reason": "The MCP server uses OAuth with PKCE, dynamic client registration, revocation, separate read and write scopes and the user's own role. The HTTP API key is one per environment with many privileges and is regenerated through support. Averaged over both surfaces (22 of 30). Write scopes are optional, profile and replay data need their own scopes, and deletes and administration are unavailable through MCP (19 of 20). Profiles, survey answers and event properties come from end users, and no prompt-injection guidance was found beyond a note that the AI provider processes the data (3 of 15). Access and Activity Logs exist, on Enterprise per the pricing page (9 of 15). SOC 2 Type II with the report on request and penetration tests by certified auditors. No security.txt, disclosure policy or bug bounty (9 of 20). 22+19+3+9+9 = 62.", "checked": "2026-11-06" }, { "key": "payments", "name": "Payments \u0026 pricing", "weight": 10, "effectiveWeight": 12.5, "score": 30, "points": 3.75, "reason": "No x402, MPP or L402 (0). Plan prices are public ($299 and from $849 a month), with no per-unit prices (10). 14-day free trial with no card required (20). Signup and OAuth approval happen in a browser (0). 0+10+20+0 = 30.", "checked": "2026-11-06" }, { "key": "tasks", "name": "Task success", "weight": 10, "effectiveWeight": 0, "pending": true, "points": 0, "reason": "Pending. Task success needs the category task suites run through each tool, which haven't run yet, so this run doesn't score it. Its weight is shared across the assessed categories until then. A data provider's data-quality score is published on its listing now and becomes half of this category when it's scored." }, { "key": "maintenance", "name": "Maintenance \u0026 community", "weight": 7, "effectiveWeight": 8.75, "score": 79, "points": 6.91, "reason": "io.userpilot/mcp 1.0.0 was published to the registry on 11 October 2026 (30). The iOS SDK alone has dated releases on 6 August, 2 September, 27 September and 2 October 2026 (20). A closed service with no public API changelog, support by email and chat (8 of 25). Verified io.userpilot namespace in the official MCP registry (15). Client SDKs are current; there is nothing else public to inspect (6 of 10). 30+20+8+15+6 = 79.", "checked": "2026-11-06" }, { "key": "transparency", "name": "Transparency \u0026 trust", "weight": 7, "effectiveWeight": 8.75, "score": 59, "points": 5.16, "note": "editorial 42, provenance 76", "reason": "A closed service with terms dated 23 April 2024 (15 of 30). The privacy policy of 11 March 2025 names a DPO and two sub-processors (AWS and Cloudflare), while the security page names AWS, Google Cloud and Stripe. The DPA is on request and no customer-data retention period is stated (14 of 30). No deprecation policy or dated API notices found (3 of 20). Sub-processors are named with addresses but not data locations, though an EU ingestion endpoint exists (10 of 20). 15+14+3+10 = 42.", "checked": "2026-11-06" } ], "assessment": { "date": "2026-11-06", "basis": "public evidence", "confidence": "medium", "notes": { "ergonomics": "The tool count isn't published; the docs say the assistant can search hundreds of extra read-only operations on demand, which reads as dynamic loading. Without the list we give the middle band (15 of 25). Export jobs filter by date range, users, events and segments, and job lists paginate (14 of 20). A documented error reference (13 of 20). No deletes or admin through MCP by design; annotations weren't readable and no idempotency keys were found (10 of 20). The HTTP APIs have no official server-side SDK; client SDKs for web and six mobile frameworks (8 of 15). 15+14+13+10+8 = 60.", "maintenance": "io.userpilot/mcp 1.0.0 was published to the registry on 11 October 2026 (30). The iOS SDK alone has dated releases on 6 August, 2 September, 27 September and 2 October 2026 (20). A closed service with no public API changelog, support by email and chat (8 of 25). Verified io.userpilot namespace in the official MCP registry (15). Client SDKs are current; there is nothing else public to inspect (6 of 10). 30+20+8+15+6 = 79.", "payments": "No x402, MPP or L402 (0). Plan prices are public ($299 and from $849 a month), with no per-unit prices (10). 14-day free trial with no card required (20). Signup and OAuth approval happen in a browser (0). 0+10+20+0 = 30.", "reliability": "Graded on the hosted service with the hosted lines. Better Stack status page at status.userpilot.io with components for ingestion in three regions, the SDKs, the web application APIs and the website (20). From August to November 2026 the page shows only scheduled maintenance windows of two to four hours, with no incidents; the MCP server isn't a component (30). 600 requests a minute per token for the real-time APIs, but no numbers for MCP or export (12 of 15). 429 documented with exponential backoff guidance; no Retry-After or idempotency guidance (10 of 15). The SLA is a custom Enterprise contract term, not published (0). The MCP server is 1.0.0 in the registry with no beta label (10). 20+30+12+10+0+10 = 82.", "schema": "Every API reference page embeds an OpenAPI 3.0 definition, though no standalone spec file was found (20 of 25). llms.txt and Markdown versions of every page (10). Endpoint pages state their purpose and the MCP docs say what each permission allows; the MCP tool definitions weren't read because that needs a session (12 of 20). Request bodies are typed, mostly as strings and string arrays with few enums (9 of 15). An error reference covers 400, 401, 422 and 429 with causes, and pages carry examples (12 of 15). /v1 paths and dated SDK release notes; no API changelog was found (8 of 15). 20+10+12+9+12+8 = 71.", "security": "The MCP server uses OAuth with PKCE, dynamic client registration, revocation, separate read and write scopes and the user's own role. The HTTP API key is one per environment with many privileges and is regenerated through support. Averaged over both surfaces (22 of 30). Write scopes are optional, profile and replay data need their own scopes, and deletes and administration are unavailable through MCP (19 of 20). Profiles, survey answers and event properties come from end users, and no prompt-injection guidance was found beyond a note that the AI provider processes the data (3 of 15). Access and Activity Logs exist, on Enterprise per the pricing page (9 of 15). SOC 2 Type II with the report on request and penetration tests by certified auditors. No security.txt, disclosure policy or bug bounty (9 of 20). 22+19+3+9+9 = 62.", "transparency": "A closed service with terms dated 23 April 2024 (15 of 30). The privacy policy of 11 March 2025 names a DPO and two sub-processors (AWS and Cloudflare), while the security page names AWS, Google Cloud and Stripe. The DPA is on request and no customer-data retention period is stated (14 of 30). No deprecation policy or dated API notices found (3 of 20). Sub-processors are named with addresses but not data locations, though an EU ingestion endpoint exists (10 of 20). 15+14+3+10 = 42." }, "sources": [ { "what": "MCP server docs", "url": "https://docs.userpilot.com/ai/userpilot-mcp-server.md", "seen": "2026-11-06" }, { "what": "MCP registry entry", "url": "https://registry.modelcontextprotocol.io/v0/servers?search=userpilot", "seen": "2026-11-06" }, { "what": "OAuth metadata", "url": "https://mcp.userpilot.io/.well-known/oauth-authorization-server", "seen": "2026-11-06" }, { "what": "API authentication", "url": "https://docs.userpilot.com/api-references/authentication.md", "seen": "2026-11-06" }, { "what": "real-time API limits", "url": "https://docs.userpilot.com/api-references/real-time/overview.md", "seen": "2026-11-06" }, { "what": "export job reference", "url": "https://docs.userpilot.com/api-references/endpoints/export/export-job.md", "seen": "2026-11-06" }, { "what": "error reference", "url": "https://docs.userpilot.com/reference/errors.md", "seen": "2026-11-06" }, { "what": "status page", "url": "https://status.userpilot.io/", "seen": "2026-11-06" }, { "what": "pricing", "url": "https://userpilot.com/pricing/", "seen": "2026-11-06" }, { "what": "security page", "url": "https://userpilot.com/security/", "seen": "2026-11-06" }, { "what": "privacy policy", "url": "https://userpilot.com/privacy-policy/", "seen": "2026-11-06" }, { "what": "terms", "url": "https://userpilot.com/terms-of-use/", "seen": "2026-11-06" }, { "what": "iOS SDK release notes", "url": "https://docs.userpilot.com/developer/installation/mobile/ios/mobile-ios-release-notes.md", "seen": "2026-11-06" } ], "openQuestions": [ "unchecked: the MCP tool list, input schemas and annotations, which need an MCP session", "unchecked: MCP rate limits, which the docs mention without numbers", "The privacy policy names AWS and Cloudflare as sub-processors while the security page names AWS, Google Cloud and Stripe", "firstReleased isn't set because no first-hand launch date was found" ] }, "negative": 0, "verdict": "Userpilot's registry-listed MCP server uses OAuth with separate read and write scopes and cannot delete or reach administration, which suits an agent asking analytics questions. Plans start at $299 a month, the HTTP API key is a single environment-wide credential, and legal and retention documents are thin.", "bestFor": "SaaS teams already using Userpilot for onboarding who want an agent to answer analytics questions and draft segments and surveys.", "strengths": [ "Hosted MCP server in the official registry as io.userpilot/mcp, with OAuth and PKCE", "Scopes split reads of analytics, profiles and session replay from writes of segments, reports and survey drafts", "No delete, publish or administration actions are reachable through MCP", "Status page with three ingestion regions and no incidents from August to November 2026", "llms.txt and Markdown docs, with OpenAPI 3.0 on each API reference page" ], "weaknesses": [ "Plans start at $299 a month, and the HTTP API needs Growth from $849", "The HTTP API uses one environment-wide key that support has to regenerate", "The MCP tool list and its rate limits aren't published", "No security.txt, disclosure policy or bug bounty found", "The privacy policy and security page name different sub-processors" ], "agentNotes": [ "Ask for only the scopes the task needs; profile and session replay reads are separate grants", "Expect survey writes to stay drafts that a person reviews and publishes in Userpilot", "Refresh the connector's tool list after Userpilot adds tools, since clients cache it", "Back off exponentially on 429 from Identify and Track, which allow 600 requests a minute", "Use the bulk export job API for raw events rather than looping over analytics tools" ], "metrics": { "kind": "remote", "measured": false }, "reviewCount": 0, "avgRating": 0, "history": [ { "basis": "public evidence", "confidence": "medium", "grade": "B", "methodology": "0.7", "pending": [ "performance", "tasks" ], "run": "2026-10-01", "runLabel": "October 2026 research run", "score": 64.4 } ], "editorialScores": { "ergonomics": 60, "maintenance": 79, "payments": 30, "reliability": 82, "schema": 71, "security": 62, "transparency": 42 }, "provenanceScore": 76, "checked": { "categories": { "ergonomics": "2026-11-06", "maintenance": "2026-11-06", "payments": "2026-11-06", "reliability": "2026-11-06", "schema": "2026-11-06", "security": "2026-11-06", "transparency": "2026-11-06" }, "last": "2026-11-06", "oldest": "2026-11-06", "stale": false, "staleAfterDays": 90 }, "scoreHistory": [ { "date": "2026-11-06", "grade": "B", "kind": "listed", "method": "0.7", "score": 64.4 } ] }, "connect": { "claudeCode": "claude mcp add --transport http userpilot https://mcp.userpilot.io/mcp", "config": { "mcpServers": { "userpilot": { "url": "https://mcp.userpilot.io/mcp" } } } }, "letme": { "capability": "https://letme.dev/analytics.query", "tool": "https://letme.dev/userpilot" }, "notable": [ "Published in the official MCP registry as io.userpilot/mcp 1.0.0 on 11 October 2026, remote at https://mcp.userpilot.io/mcp (https://registry.modelcontextprotocol.io/v0/servers?search=userpilot)", "The MCP connection can't delete anything, publish content or touch billing, team or account settings; write permissions cover segments, reports, dashboards and survey drafts only (https://docs.userpilot.com/ai/userpilot-mcp-server.md)", "The assistant can search hundreds of additional read-only operations when a question needs them, so not every operation is a listed tool (https://docs.userpilot.com/ai/userpilot-mcp-server.md)", "Identify and Track real-time APIs are limited to 600 requests a minute per application token, with 429 and exponential backoff guidance (https://docs.userpilot.com/api-references/real-time/overview.md)", "Each API reference page embeds its OpenAPI 3.0 definition, servers at appex.userpilot.io (https://docs.userpilot.com/api-references/endpoints/export/export-job.md)", "The status page at status.userpilot.io shows only scheduled maintenance between August and November 2026; the MCP server is not a listed component (https://status.userpilot.io/)" ], "area": "business", "details": [ { "label": "Surface listed", "value": "The hosted MCP server at mcp.userpilot.io and the HTTP APIs at appex.userpilot.io, read from docs.userpilot.com (llms.txt and Markdown pages), the MCP registry entry and OAuth metadata, userpilot.com pricing, security, terms, privacy and about pages, and status.userpilot.io on 6 November 2026. No account was made and no tool was called" }, { "label": "Product scope", "value": "Mainly in-app onboarding flows, checklists, tooltips, surveys and NPS, with product analytics (trends, funnels, retention, paths, dashboards) and session replay. This listing grades the analytics surface an agent reaches" }, { "label": "MCP permissions", "value": "Read product data and analytics (required), read user and company profiles, read session replay, write segments, write reports and dashboards, write survey drafts, and stay connected" }, { "label": "HTTP APIs", "value": "Real-time identify and track, bulk user and company updates, bulk event import jobs, bulk data export jobs with lookups for properties, segments and tracked feature IDs, and user and company deletion" }, { "label": "Rate limits", "value": "600 a minute per application token for Identify and Track; the MCP docs say rate limits contain runaway use without giving numbers" }, { "label": "Hosting", "value": "Mainly AWS with a small Google Cloud footprint, with US Standard, US Enterprise and EU ingestion endpoints on the status page" }, { "label": "Legal entity", "value": "Userpilot, Inc., 7200 North MoPac Expressway Suite 300, Austin, Texas, per the privacy policy" } ], "unitPrices": [ { "item": "Starter plan", "unit": "month", "usd": 299, "note": "Up to 2,000 MAU" }, { "item": "Growth plan", "unit": "month", "usd": 849, "note": "Starting price; includes advanced product analytics and the HTTP API" } ], "provenance": { "legalEntity": "Userpilot, Inc.", "domain": "userpilot.com", "domainRegistered": "2011-01-08", "endpointOnVendorDomain": false, "terms": "https://userpilot.com/terms-of-use/", "privacy": "https://userpilot.com/privacy-policy/", "statusPage": "https://status.userpilot.io", "changelog": "https://docs.userpilot.com/developer/installation/mobile/ios/mobile-ios-release-notes", "securityTxt": "none", "checked": "2026-11-06", "notes": [ "The MCP server and APIs are on userpilot.io; the website and legal pages are on userpilot.com.", "The terms were last updated on 23 April 2024 and the privacy policy on 11 March 2025, which names a DPO and Userpilot, Inc. in Austin, Texas.", "docs.userpilot.com/robots.txt carries Content-Signal ai-train=yes, search=yes, ai-input=yes. userpilot.com/robots.txt disallows only search paths.", "userpilot.com/.well-known/security.txt returned 404, and the security page names no disclosure policy or bug bounty.", "RDAP gives userpilot.com a registration date of 8 January 2011." ], "score": 76, "checks": [ { "check": "Legal entity named", "value": "Userpilot, Inc.", "points": 20, "max": 20, "state": "ok" }, { "check": "Domain age", "value": "userpilot.com, registered 2011-01-08 (15 years)", "points": 15, "max": 15, "state": "ok" }, { "check": "Endpoint on the vendor's domain", "value": "mcp.userpilot.io is not on userpilot.com", "points": 0, "max": 15, "state": "no" }, { "check": "Terms of service", "value": "read, states 6 of the 7 things a reader expects, and has 1 clause that costs points", "points": 7.1, "max": 10, "state": "part" }, { "check": "Privacy policy", "value": "read, states 8 of the 8 things a reader expects", "points": 10, "max": 10, "state": "ok" }, { "check": "Status page", "value": "status.userpilot.io", "points": 10, "max": 10, "state": "ok" }, { "check": "Changelog", "value": "published", "points": 10, "max": 10, "state": "ok" }, { "check": "security.txt", "value": "not found", "points": 0, "max": 10, "state": "no" }, { "check": "People named", "value": "2 named with their role, 2 with a public profile", "points": 10, "max": 10, "state": "ok" }, { "check": "Support route", "value": "a support address, help pages", "points": 5, "max": 5, "state": "ok" } ], "policies": [ { "kind": "terms", "url": "https://userpilot.com/terms-of-use/", "state": "read", "readAt": "2026-11-06", "statedDate": "2024-04-23", "words": 5405, "points": 7.1, "max": 10, "expected": [ { "key": "terms.date", "label": "Gives the date it was last updated", "found": true, "quote": "Last Updated: April 23rd, 2024", "says": "Last updated 2024-04-23" }, { "key": "terms.law", "label": "Names the governing law or courts", "found": true, "quote": "If any provision of this Agreement is deemed invalid by a court of competent jurisdiction, the invalidity of such provision shall not affect the validity of the remaining provisions of this Agreement, which shall remain in full force and effect." }, { "key": "terms.liability", "label": "States a limit on its liability", "found": true, "quote": "…be liable for any special, incidental, indirect, or consequential damages whatsoever (including, but not limited to, damages for loss of profits, for loss of data or other information, for business interruption, for personal injury, for loss of privacy arising out of or in any way related to the use of or inability to…", "says": "Rules out indirect and consequential losses, with no cap named in this sentence" }, { "key": "terms.termination", "label": "Says how the agreement or account can be ended", "found": true, "quote": "Company may suspend or terminate your Account in accordance with Section 8." }, { "key": "terms.changes", "label": "Says how changes to the terms are announced", "found": true, "quote": "If we decide to change our Terms \u0026 Conditions, we will post those changes on this page, and/or update the Terms \u0026 Conditions modification date below.", "says": "Changes are posted, with no other notice named" }, { "key": "terms.use", "label": "Lists what users may not do", "found": true, "quote": "You agree not to, and you will not permit others to:" }, { "key": "terms.sla", "label": "Refers to a service level or uptime commitment", "found": false } ], "toKnow": [ { "key": "terms.nonotice", "label": "Says the terms or the service can change without notice", "found": true, "quote": "Userpilot reserves the right to modify, suspend or discontinue, temporarily or permanently, the website/app or any service to which it connects, with or without notice and without liability to you.", "costsPoints": true }, { "key": "terms.cutoff", "label": "Says access can be ended without notice or for any reason", "found": true, "quote": "Userpilot reserves the right to modify, suspend or discontinue, temporarily or permanently, the website/app or any service to which it connects, with or without notice and without liability to you." }, { "key": "terms.arbitration", "label": "Requires arbitration or waives class actions", "found": true, "quote": "Binding Arbitration" } ] }, { "kind": "privacy", "url": "https://userpilot.com/privacy-policy/", "state": "read", "readAt": "2026-11-06", "statedDate": "2025-03-11", "words": 3075, "points": 10, "max": 10, "expected": [ { "key": "privacy.date", "label": "Gives the date it was last updated", "found": true, "quote": "Last Updated: March 11, 2025", "says": "Last updated 2025-03-11" }, { "key": "privacy.collected", "label": "Says what personal data is collected", "found": true, "quote": "When You access the Service by or through a mobile device, We may collect certain information automatically, including, but not limited to, the type of mobile device You use, Your mobile device unique ID, the IP address of Your mobile device, Your mobile operating system, the type of mobile Internet browser You use, u…" }, { "key": "privacy.retention", "label": "Says how long data is kept", "found": true, "quote": "The Company will retain Your Personal Data only for as long as is necessary for the purposes set out in this Privacy Policy.", "says": "For as long as needed, with no period named" }, { "key": "privacy.processors", "label": "Says who else receives the data", "found": true, "quote": "Service Provider means any natural or legal person who processes the data on behalf of the Company." }, { "key": "privacy.sale", "label": "Says whether personal data is sold or shared for advertising", "found": true, "quote": "If the Company is involved in a merger, acquisition or asset sale, Your Personal Data may be transferred." }, { "key": "privacy.rights", "label": "Says what rights people have over their data", "found": true, "quote": "You have the right to delete or request that We assist in deleting the Personal Data that We have collected about You." }, { "key": "privacy.contact", "label": "Gives a privacy contact", "found": true, "quote": "If you would like your Data deleted, please contact [email protected] via Email with the request subject as the following:", "says": "Gives an email address, hidden from our reader by the page" }, { "key": "privacy.transfers", "label": "Says where data is transferred or stored", "found": true, "quote": "To learn more about the Data Privacy Framework (DPF) Program, and to view our certification, please visit https://www.dataprivacyframework.gov/", "says": "Relies on the Data Privacy Framework" } ] } ] }, "humans": { "slug": "userpilot", "checked": "2026-11-06", "company": "Userpilot, Inc.", "people": [ { "name": "Yazan Sehwail", "role": "CEO \u0026 Co-Founder", "founder": true, "linkedin": "https://www.linkedin.com/in/yazan-sehwail/", "page": "/people/yazan-sehwail/" }, { "name": "Thabet Gharabah", "role": "CTO", "linkedin": "https://www.linkedin.com/in/thabetibrahim/", "page": "/people/thabet-gharabah/" } ], "peopleNote": "Userpilot's about page names Yazan Sehwail as CEO \u0026 Co-Founder and Thabet Gharabah as CTO, each with a LinkedIn link, among a wider leadership team. The privacy policy names Userpilot, Inc. in Austin, Texas, and its DPO. userpilot.com and its blog sitemap have no funding post. Techloy's report of 6 September 2022 says Userpilot raised a $4.6 million seed round led by Silicon Badia, with ScOp Ventures and 500 Global, after a $1.2 million pre-seed the year before whose investors it doesn't name. TechCrunch's report of the same round wasn't used, since techcrunch.com's robots.txt shuts out Anthropic's crawlers. No source states a total raised or a valuation.", "companySocial": { "linkedin": "https://www.linkedin.com/company/teamuserpilot", "x": "https://x.com/teamuserpilot" }, "support": { "emails": [ "support@userpilot.com" ], "urls": [ "https://docs.userpilot.com", "https://status.userpilot.io" ], "contactEmails": [ "support@userpilot.com" ] }, "sources": [ "https://userpilot.com/about/", "https://userpilot.com/privacy-policy/", "https://docs.userpilot.com/api-references/authentication.md", "https://www.techloy.com/product-led-growth-platform-for-saas-companies-userpilot-bags-4-6-million/" ], "ownership": { "status": "private", "checked": "2026-11-06", "sources": [ "https://userpilot.com/privacy-policy/", "https://www.techloy.com/product-led-growth-platform-for-saas-companies-userpilot-bags-4-6-million/" ] }, "investors": [ { "name": "Silicon Badia", "kind": "vc", "rounds": [ "Seed, September 2022" ], "lead": true, "source": "https://www.techloy.com/product-led-growth-platform-for-saas-companies-userpilot-bags-4-6-million/", "quote": "has raised $4.6 million in its seed funding round led by Silicon Badia, with participation from other investors", "page": "/investors/silicon-badia/" }, { "name": "ScOp Ventures", "kind": "vc", "rounds": [ "Seed, September 2022" ], "source": "https://www.techloy.com/product-led-growth-platform-for-saas-companies-userpilot-bags-4-6-million/", "quote": "ScOp Ventures and 500 Global invested in the seed round funding.", "page": "/investors/scop-ventures/" }, { "name": "500 Global", "kind": "vc", "rounds": [ "Seed, September 2022" ], "url": "https://500.co", "source": "https://www.techloy.com/product-led-growth-platform-for-saas-companies-userpilot-bags-4-6-million/", "quote": "ScOp Ventures and 500 Global invested in the seed round funding.", "page": "/investors/500-global/" } ] }, "pageJsonUrl": "https://www.anchorterminal.com/tools/userpilot.json", "live": { "slug": "userpilot", "probe": { "target": "https://mcp.userpilot.io/mcp", "method": "get", "lastAt": "2026-11-07T17:50:13.720798295Z", "lastOk": true, "lastStatus": 405, "lastMs": 479, "authRequired": false, "uptime24h": 100, "uptime30d": 100, "p50ms24h": 493, "p95ms24h": 585, "samples24h": 195, "samples30d": 195, "days": [ { "date": "2026-11-06", "probes": 13, "ok": 13 }, { "date": "2026-11-07", "probes": 182, "ok": 182 } ] }, "vendorStatus": { "page": "https://status.userpilot.io", "indicator": "unknown", "summary": "no machine-readable status found", "checkedAt": "2026-11-07T04:48:54.858690533Z" }, "versions": [ { "registry": "npm", "name": "userpilot", "version": "1.4.3", "seenAt": "2026-11-07T00:14:26.929507083Z" } ], "npmWeekly": 235722, "securityTxt": { "url": "https://userpilot.com/.well-known/security.txt", "state": "none", "checkedAt": "2026-11-07T16:01:10.604728076Z" }, "llmsTxt": { "url": "https://docs.userpilot.com/llms.txt", "ok": true, "status": 200, "checkedAt": "2026-11-07T15:34:15.247254272Z" }, "pages": [ { "url": "https://docs.userpilot.com/developer/installation/mobile/ios/mobile-ios-release-notes", "kind": "changelog", "status": 200, "checkedAt": "2026-11-07T14:08:32.05689434Z", "changedAt": "0001-01-01T00:00:00Z", "fingerprint": "b489ebf9a491" }, { "url": "https://userpilot.com/privacy-policy/", "kind": "privacy", "status": 200, "checkedAt": "2026-11-07T14:23:01.88432514Z", "changedAt": "0001-01-01T00:00:00Z", "fingerprint": "299f9d9cd275" }, { "url": "https://userpilot.com/terms-of-use/", "kind": "terms", "status": 200, "checkedAt": "2026-11-07T14:23:04.076461926Z", "changedAt": "0001-01-01T00:00:00Z", "fingerprint": "dea374efccdb" } ], "mcpTools": { "url": "https://mcp.userpilot.io/mcp", "checkedAt": "2026-11-07T01:48:55.558250288Z", "status": "auth", "note": "asks for credentials before listing its tools", "changedAt": "2026-11-07T01:48:55.558250288Z" }, "updatedAt": "2026-11-07T17:50:13.720798295Z" } }, "verify": { "accepts": "a page on userpilot.com or one of its subdomains", "badgeUrl": "https://www.anchorterminal.com/badges/userpilot.svg", "body": { "slug": "userpilot", "url": "the page with the badge or the link" }, "docs": "https://www.anchorterminal.com/builders/#verify", "effect": "none, it never changes a grade, rank or review", "endpoint": "https://www.anchorterminal.com/api/v1/verify", "listingUrl": "https://www.anchorterminal.com/tools/userpilot", "mcpTool": "verify_listing", "recheck": "weekly; two failed checks in a row and it lapses, a later pass restores it", "snippets": { "html": "\u003ca href=\"https://www.anchorterminal.com/tools/userpilot\"\u003e\u003cimg src=\"https://www.anchorterminal.com/badges/userpilot.svg\" alt=\"Userpilot on Anchor Terminal\" height=\"20\"\u003e\u003c/a\u003e", "markdown": "[![Userpilot on Anchor Terminal](https://www.anchorterminal.com/badges/userpilot.svg)](https://www.anchorterminal.com/tools/userpilot)", "link": "\u003ca href=\"https://www.anchorterminal.com/tools/userpilot\"\u003eUserpilot on Anchor Terminal\u003c/a\u003e" } } }, "kind": "anchor.page", "links": { "api": "https://www.anchorterminal.com/api/v1/index.json", "html": "https://www.anchorterminal.com/tools/userpilot", "json": "https://www.anchorterminal.com/tools/userpilot.json", "llms": "https://www.anchorterminal.com/llms.txt", "markdown": "https://www.anchorterminal.com/tools/userpilot.md", "mcp": "https://www.anchorterminal.com/mcp", "pricing": "https://www.anchorterminal.com/tools/userpilot#pricing", "reviews": "https://www.anchorterminal.com/tools/userpilot#reviews", "slim": "https://www.anchorterminal.com/tools/userpilot.min.md" }, "markdown": "## Overview\n\n**Grade B · 64.4/100 · rank #471 of 1486 · #8 in Product analytics \u0026 experimentation · not agent-ready · confidence medium**\n\n\n## Assessment\n\nUserpilot's registry-listed MCP server uses OAuth with separate read and write scopes and cannot delete or reach administration, which suits an agent asking analytics questions. Plans start at $299 a month, the HTTP API key is a single environment-wide credential, and legal and retention documents are thin.\n\n## Facts\n\n| Field | Value |\n| --- | --- |\n| Vendor | Userpilot, Inc. (https://userpilot.com) |\n| Kind | HTTP API |\n| Category | Product analytics \u0026 experimentation (https://www.anchorterminal.com/categories/product-analytics) |\n| Transport | HTTP, Streamable HTTP |\n| Endpoint | `https://mcp.userpilot.io/mcp` |\n| Auth | OAuth or key · The hosted MCP server uses OAuth 2.0 with PKCE, dynamic client registration and a permission screen. Scopes are data:read (always required), people:read, sessions:read, segments:write, reports:write, feedback:write and offline_access; the connection runs under the user's own role and can't delete or reach administration. The HTTP APIs take one environment API key as `Authorization: Token \u003ckey\u003e`, shown on the Environment page; the docs say to contact support to regenerate it. |\n| Pricing | Paid ($299 / mo) · Starter $299 a month for up to 2,000 MAU with basic trends and funnels; Growth from $849 a month with advanced analytics and the HTTP API; Enterprise by quote with SSO, activity logs and a custom SLA. Bulk export, import and data warehouse sync are add-ons. 14-day free trial with no card required. |\n| x402 | No · No x402, MPP or L402 in the docs, llms.txt, the MCP docs or the pricing page (checked 2026-11-06). |\n| Licence | unknown |\n| Packages | npm: `userpilot` |\n| MCP registry name | `io.userpilot/mcp` |\n| Docs | https://docs.userpilot.com/api-references/overview |\n| llms.txt | https://docs.userpilot.com/llms.txt |\n| Last release | 2026-10-11 |\n| npm downloads / week | 235,722 |\n| Surface listed | The hosted MCP server at mcp.userpilot.io and the HTTP APIs at appex.userpilot.io, read from docs.userpilot.com (llms.txt and Markdown pages), the MCP registry entry and OAuth metadata, userpilot.com pricing, security, terms, privacy and about pages, and status.userpilot.io on 6 November 2026. No account was made and no tool was called |\n| Product scope | Mainly in-app onboarding flows, checklists, tooltips, surveys and NPS, with product analytics (trends, funnels, retention, paths, dashboards) and session replay. This listing grades the analytics surface an agent reaches |\n| MCP permissions | Read product data and analytics (required), read user and company profiles, read session replay, write segments, write reports and dashboards, write survey drafts, and stay connected |\n| HTTP APIs | Real-time identify and track, bulk user and company updates, bulk event import jobs, bulk data export jobs with lookups for properties, segments and tracked feature IDs, and user and company deletion |\n| Rate limits | 600 a minute per application token for Identify and Track; the MCP docs say rate limits contain runaway use without giving numbers |\n| Hosting | Mainly AWS with a small Google Cloud footprint, with US Standard, US Enterprise and EU ingestion endpoints on the status page |\n| Legal entity | Userpilot, Inc., 7200 North MoPac Expressway Suite 300, Austin, Texas, per the privacy policy |\n| Capabilities | analytics.query, analytics.funnels, analytics.events |\n| Tags | official, hosted, mcp, remote-mcp, mcp-registry, oauth, llms-txt, no-card, status-page, soc2, closed-source, webhooks, eu-region |\n| JSON | https://www.anchorterminal.com/api/v1/tools/userpilot.json |\n\n## Score breakdown (methodology v0.7, October 2026 research run)\n\nAssessed 2026-11-06 from public evidence against the published checklist (https://www.anchorterminal.com/benchmark/#checklist). Confidence: medium. Performance and Task success pending (no score, not in the total); the total is Σ(score × weight) ÷ 80 over the 7 assessed categories. \"This run\" is each category's share of the 100 points.\n\n| Category | Weight | This run | Score (0–100) | Points |\n| --- | --- | --- | --- | --- |\n| Reliability | 16% | 20 | 82 | 16.4 |\n| Performance | 10% | pending | pending | n/a |\n| Schema \u0026 documentation | 13% | 16.2 | 71 | 11.5 |\n| Agent ergonomics | 13% | 16.2 | 60 | 9.8 |\n| Security \u0026 auth | 14% | 17.5 | 62 | 10.8 |\n| Payments \u0026 pricing | 10% | 12.5 | 30 | 3.8 |\n| Task success | 10% | pending | pending | n/a |\n| Maintenance \u0026 community | 7% | 8.8 | 79 | 6.9 |\n| Transparency \u0026 trust (editorial 42, provenance 76) | 7% | 8.8 | 59 | 5.2 |\n| Negative events | up to −15 | up to −15 | none recorded | 0 |\n| **Total** | | | | **64.4 → B** |\n\n### Why each score\n\n- Reliability 82 (checked 2026-11-06): Graded on the hosted service with the hosted lines. Better Stack status page at status.userpilot.io with components for ingestion in three regions, the SDKs, the web application APIs and the website (20). From August to November 2026 the page shows only scheduled maintenance windows of two to four hours, with no incidents; the MCP server isn't a component (30). 600 requests a minute per token for the real-time APIs, but no numbers for MCP or export (12 of 15). 429 documented with exponential backoff guidance; no Retry-After or idempotency guidance (10 of 15). The SLA is a custom Enterprise contract term, not published (0). The MCP server is 1.0.0 in the registry with no beta label (10). 20+30+12+10+0+10 = 82.\n- Performance: Pending. Latency is measured per call by our probes, which haven't run yet, so this run doesn't score it. Its weight is shared across the assessed categories until the first probe window closes.\n- Schema \u0026 documentation 71 (checked 2026-11-06): Every API reference page embeds an OpenAPI 3.0 definition, though no standalone spec file was found (20 of 25). llms.txt and Markdown versions of every page (10). Endpoint pages state their purpose and the MCP docs say what each permission allows; the MCP tool definitions weren't read because that needs a session (12 of 20). Request bodies are typed, mostly as strings and string arrays with few enums (9 of 15). An error reference covers 400, 401, 422 and 429 with causes, and pages carry examples (12 of 15). /v1 paths and dated SDK release notes; no API changelog was found (8 of 15). 20+10+12+9+12+8 = 71.\n- Agent ergonomics 60 (checked 2026-11-06): The tool count isn't published; the docs say the assistant can search hundreds of extra read-only operations on demand, which reads as dynamic loading. Without the list we give the middle band (15 of 25). Export jobs filter by date range, users, events and segments, and job lists paginate (14 of 20). A documented error reference (13 of 20). No deletes or admin through MCP by design; annotations weren't readable and no idempotency keys were found (10 of 20). The HTTP APIs have no official server-side SDK; client SDKs for web and six mobile frameworks (8 of 15). 15+14+13+10+8 = 60.\n- Security \u0026 auth 62 (checked 2026-11-06): The MCP server uses OAuth with PKCE, dynamic client registration, revocation, separate read and write scopes and the user's own role. The HTTP API key is one per environment with many privileges and is regenerated through support. Averaged over both surfaces (22 of 30). Write scopes are optional, profile and replay data need their own scopes, and deletes and administration are unavailable through MCP (19 of 20). Profiles, survey answers and event properties come from end users, and no prompt-injection guidance was found beyond a note that the AI provider processes the data (3 of 15). Access and Activity Logs exist, on Enterprise per the pricing page (9 of 15). SOC 2 Type II with the report on request and penetration tests by certified auditors. No security.txt, disclosure policy or bug bounty (9 of 20). 22+19+3+9+9 = 62.\n- Payments \u0026 pricing 30 (checked 2026-11-06): No x402, MPP or L402 (0). Plan prices are public ($299 and from $849 a month), with no per-unit prices (10). 14-day free trial with no card required (20). Signup and OAuth approval happen in a browser (0). 0+10+20+0 = 30.\n- Task success: Pending. Task success needs the category task suites run through each tool, which haven't run yet, so this run doesn't score it. Its weight is shared across the assessed categories until then. A data provider's data-quality score is published on its listing now and becomes half of this category when it's scored.\n- Maintenance \u0026 community 79 (checked 2026-11-06): io.userpilot/mcp 1.0.0 was published to the registry on 11 October 2026 (30). The iOS SDK alone has dated releases on 6 August, 2 September, 27 September and 2 October 2026 (20). A closed service with no public API changelog, support by email and chat (8 of 25). Verified io.userpilot namespace in the official MCP registry (15). Client SDKs are current; there is nothing else public to inspect (6 of 10). 30+20+8+15+6 = 79.\n- Transparency \u0026 trust 59 (checked 2026-11-06): A closed service with terms dated 23 April 2024 (15 of 30). The privacy policy of 11 March 2025 names a DPO and two sub-processors (AWS and Cloudflare), while the security page names AWS, Google Cloud and Stripe. The DPA is on request and no customer-data retention period is stated (14 of 30). No deprecation policy or dated API notices found (3 of 20). Sub-processors are named with addresses but not data locations, though an EU ingestion endpoint exists (10 of 20). 15+14+3+10 = 42.\n\nFix list, everything this grade says the listing lacks, the biggest gain first (14 items). What it covers is at https://www.anchorterminal.com/fixes/userpilot.md (JSON https://www.anchorterminal.com/fixes/userpilot.json). The whole list for a coding agent comes from `POST https://www.anchorterminal.com/api/v1/fix-list` with `{\"listing\": \"userpilot\", \"plan\": \"read\"}`, free while the beta runs\n\n### What we couldn't check\n\n- unchecked: the MCP tool list, input schemas and annotations, which need an MCP session\n- unchecked: MCP rate limits, which the docs mention without numbers\n- The privacy policy names AWS and Cloudflare as sub-processors while the security page names AWS, Google Cloud and Stripe\n- firstReleased isn't set because no first-hand launch date was found\n\n### Sources\n\n- MCP server docs: \u003chttps://docs.userpilot.com/ai/userpilot-mcp-server.md\u003e (seen 2026-11-06)\n- MCP registry entry: \u003chttps://registry.modelcontextprotocol.io/v0/servers?search=userpilot\u003e (seen 2026-11-06)\n- OAuth metadata: \u003chttps://mcp.userpilot.io/.well-known/oauth-authorization-server\u003e (seen 2026-11-06)\n- API authentication: \u003chttps://docs.userpilot.com/api-references/authentication.md\u003e (seen 2026-11-06)\n- real-time API limits: \u003chttps://docs.userpilot.com/api-references/real-time/overview.md\u003e (seen 2026-11-06)\n- export job reference: \u003chttps://docs.userpilot.com/api-references/endpoints/export/export-job.md\u003e (seen 2026-11-06)\n- error reference: \u003chttps://docs.userpilot.com/reference/errors.md\u003e (seen 2026-11-06)\n- status page: \u003chttps://status.userpilot.io/\u003e (seen 2026-11-06)\n- pricing: \u003chttps://userpilot.com/pricing/\u003e (seen 2026-11-06)\n- security page: \u003chttps://userpilot.com/security/\u003e (seen 2026-11-06)\n- privacy policy: \u003chttps://userpilot.com/privacy-policy/\u003e (seen 2026-11-06)\n- terms: \u003chttps://userpilot.com/terms-of-use/\u003e (seen 2026-11-06)\n- iOS SDK release notes: \u003chttps://docs.userpilot.com/developer/installation/mobile/ios/mobile-ios-release-notes.md\u003e (seen 2026-11-06)\n\n## Score history\n\nEvery move of a score since the listing was graded, newest first, with its cause. A score can't move without an entry here. JSON: https://www.anchorterminal.com/api/v1/tools/userpilot/history.json\n\n- 2026-11-06: graded 64.4 B (methodology 0.7)\n\n## Who's behind it (provenance 76/100, checked 2026-11-06)\n\n| Check | Finding | Points |\n| --- | --- | --- |\n| Legal entity named | Userpilot, Inc. | 20/20 |\n| Domain age | userpilot.com, registered 2011-01-08 (15 years) | 15/15 |\n| Endpoint on the vendor's domain | mcp.userpilot.io is not on userpilot.com | 0/15 |\n| Terms of service | read, states 6 of the 7 things a reader expects, and has 1 clause that costs points | 7.1/10 |\n| Privacy policy | read, states 8 of the 8 things a reader expects | 10/10 |\n| Status page | status.userpilot.io | 10/10 |\n| Changelog | published | 10/10 |\n| security.txt | not found | 0/10 |\n| People named | 2 named with their role, 2 with a public profile | 10/10 |\n| Support route | a support address, help pages | 5/5 |\n\nThe MCP server and APIs are on userpilot.io; the website and legal pages are on userpilot.com.\n\nThe terms were last updated on 23 April 2024 and the privacy policy on 11 March 2025, which names a DPO and Userpilot, Inc. in Austin, Texas.\n\ndocs.userpilot.com/robots.txt carries Content-Signal ai-train=yes, search=yes, ai-input=yes. userpilot.com/robots.txt disallows only search paths.\n\nuserpilot.com/.well-known/security.txt returned 404, and the security page names no disclosure policy or bug bounty.\n\nRDAP gives userpilot.com a registration date of 8 January 2011.\n\n### Terms and privacy, as read\n\nA reading by a fixed set of rules, each answered with the vendor's own sentence. Not legal advice.\n\n**Terms of service** (https://userpilot.com/terms-of-use/), read 2026-11-06, dated 2024-04-23, states 6 of the 7 things a reader expects.\n\n- To know. Says the terms or the service can change without notice (costs points). \"Userpilot reserves the right to modify, suspend or discontinue, temporarily or permanently, the website/app or any service to which it connects, with or without notice and without liability to you.\"\n- To know. Says access can be ended without notice or for any reason. \"Userpilot reserves the right to modify, suspend or discontinue, temporarily or permanently, the website/app or any service to which it connects, with or without notice and without liability to you.\"\n- To know. Requires arbitration or waives class actions. \"Binding Arbitration\"\n- Gives the date it was last updated. Last updated 2024-04-23.\n- States a limit on its liability. Rules out indirect and consequential losses, with no cap named in this sentence.\n- Says how changes to the terms are announced. Changes are posted, with no other notice named.\n- Not found in the text. Refers to a service level or uptime commitment.\n\n**Privacy policy** (https://userpilot.com/privacy-policy/), read 2026-11-06, dated 2025-03-11, states 8 of the 8 things a reader expects.\n\n- Gives the date it was last updated. Last updated 2025-03-11.\n- Says how long data is kept. For as long as needed, with no period named.\n- Gives a privacy contact. Gives an email address, hidden from our reader by the page.\n- Says where data is transferred or stored. Relies on the Data Privacy Framework.\n\n## Humans behind the project (researched 2026-11-06 from public pages, not part of the grade)\n\n### Key people\n\n- Yazan Sehwail, CEO \u0026 Co-Founder. LinkedIn: https://www.linkedin.com/in/yazan-sehwail/\n- Thabet Gharabah, CTO. LinkedIn: https://www.linkedin.com/in/thabetibrahim/\n- Note: Userpilot's about page names Yazan Sehwail as CEO \u0026 Co-Founder and Thabet Gharabah as CTO, each with a LinkedIn link, among a wider leadership team. The privacy policy names Userpilot, Inc. in Austin, Texas, and its DPO. userpilot.com and its blog sitemap have no funding post. Techloy's report of 6 September 2022 says Userpilot raised a $4.6 million seed round led by Silicon Badia, with ScOp Ventures and 500 Global, after a $1.2 million pre-seed the year before whose investors it doesn't name. TechCrunch's report of the same round wasn't used, since techcrunch.com's robots.txt shuts out Anthropic's crawlers. No source states a total raised or a valuation.\n- Userpilot, Inc.: LinkedIn https://www.linkedin.com/company/teamuserpilot X https://x.com/teamuserpilot\n\n### Ownership and investors\n\n- Backed by: Silicon Badia, ScOp Ventures, 500 Global\n\n### Getting support\n\n- Support email: support@userpilot.com\n- Help: https://docs.userpilot.com\n- Help: https://status.userpilot.io\n- Sources: https://userpilot.com/about/, https://userpilot.com/privacy-policy/, https://docs.userpilot.com/api-references/authentication.md, https://www.techloy.com/product-led-growth-platform-for-saas-companies-userpilot-bags-4-6-million/\n\n## Live (updated 2026-11-07 17:50 UTC)\n\n- Right now: up, HTTP 405, 479 ms, checked 2026-11-07 17:50 UTC (get on `https://mcp.userpilot.io/mcp`)\n- Uptime 24h 100.0% (195 probes) · 30 days 100.0% (195 probes) · p50 493 ms · p95 585 ms\n- Vendor status page: not read, no machine-readable status found\n- npm `userpilot` 1.4.3\n- security.txt: none\n- Watching changelog \u003chttps://docs.userpilot.com/developer/installation/mobile/ios/mobile-ios-release-notes\u003e\n- Watching privacy \u003chttps://userpilot.com/privacy-policy/\u003e\n- Watching terms \u003chttps://userpilot.com/terms-of-use/\u003e\n- Tools: the endpoint asks for credentials before listing them (checked 2026-11-07 01:48 UTC)\n- Always current: https://www.anchorterminal.com/api/v1/live/userpilot.json\n\n## Probe metrics\n\nNot measured yet. Our benchmark probes haven't run, so there's no availability, latency or error rate from a run and Performance is pending. Live uptime, where we poll the endpoint, is under Live and doesn't change the score.\n\n## Prices\n\n| Item | Price | Unit | Note |\n| --- | --- | --- | --- |\n| Starter plan | $299 | per month (plan) | Up to 2,000 MAU |\n| Growth plan | $849 | per month (plan) | Starting price; includes advanced product analytics and the HTTP API |\n\nAcross all listings: https://www.anchorterminal.com/prices/index.md\n\n## Strengths\n\n- Hosted MCP server in the official registry as io.userpilot/mcp, with OAuth and PKCE\n- Scopes split reads of analytics, profiles and session replay from writes of segments, reports and survey drafts\n- No delete, publish or administration actions are reachable through MCP\n- Status page with three ingestion regions and no incidents from August to November 2026\n- llms.txt and Markdown docs, with OpenAPI 3.0 on each API reference page\n\n## Weaknesses\n\n- Plans start at $299 a month, and the HTTP API needs Growth from $849\n- The HTTP API uses one environment-wide key that support has to regenerate\n- The MCP tool list and its rate limits aren't published\n- No security.txt, disclosure policy or bug bounty found\n- The privacy policy and security page name different sub-processors\n\n\n\n## Before you call it (notes for agents)\n\n1. Ask for only the scopes the task needs; profile and session replay reads are separate grants\n2. Expect survey writes to stay drafts that a person reviews and publishes in Userpilot\n3. Refresh the connector's tool list after Userpilot adds tools, since clients cache it\n4. Back off exponentially on 429 from Identify and Track, which allow 600 requests a minute\n5. Use the bulk export job API for raw events rather than looping over analytics tools\n\n## Connect\n\nClaude Code:\n\n```bash\nclaude mcp add --transport http userpilot https://mcp.userpilot.io/mcp\n```\n\nMCP client configuration:\n\n```json\n{\n \"mcpServers\": {\n \"userpilot\": {\n \"url\": \"https://mcp.userpilot.io/mcp\"\n }\n }\n}\n```\n\nThrough letme: https://letme.dev/userpilot. letme answers with the pick and how to call it direct. How it works: https://www.anchorterminal.com/letme/index.md\n\n## Similar tools\n\nRanked by shared capabilities, then score. Same-category tools with no shared capability key are listed last.\n\n| Tool | Grade | Score | Rank | Shared capabilities | x402 | Markdown |\n| --- | --- | --- | --- | --- | --- | --- |\n| Amplitude | B | 69.3 | 249 | analytics.query, analytics.funnels, analytics.events | no | https://www.anchorterminal.com/tools/amplitude.md |\n| PostHog | B | 67.4 | 327 | analytics.query, analytics.events, analytics.funnels | no | https://www.anchorterminal.com/tools/posthog.md |\n| Fullstory | B | 63.3 | 519 | analytics.query, analytics.events, analytics.funnels | no | https://www.anchorterminal.com/tools/fullstory.md |\n| Mixpanel | B | 62 | 577 | analytics.query, analytics.funnels, analytics.events | no | https://www.anchorterminal.com/tools/mixpanel.md |\n| Matomo | C | 61.7 | 594 | analytics.query, analytics.events, analytics.funnels | no | https://www.anchorterminal.com/tools/matomo.md |\n| OpenPanel | C | 61 | 628 | analytics.query, analytics.events, analytics.funnels | no | https://www.anchorterminal.com/tools/openpanel.md |\n\n## Panel reviews (0)\n\nReviewed by the Anchor panel (https://www.anchorterminal.com/reviewers/index.md): .\n\nDesk reviews, written from public documentation, pricing, terms, source and status history on 1 October 2026. No calls made. For a desk review, the outcome says whether the reviewer's questions could be answered from public material: success, partial or failure. How reviews work: https://www.anchorterminal.com/reviews/how-it-works.md\n\n## Notable\n\n- Published in the official MCP registry as io.userpilot/mcp 1.0.0 on 11 October 2026, remote at https://mcp.userpilot.io/mcp (source: \u003chttps://registry.modelcontextprotocol.io/v0/servers?search=userpilot\u003e)\n- The MCP connection can't delete anything, publish content or touch billing, team or account settings; write permissions cover segments, reports, dashboards and survey drafts only (source: \u003chttps://docs.userpilot.com/ai/userpilot-mcp-server.md\u003e)\n- The assistant can search hundreds of additional read-only operations when a question needs them, so not every operation is a listed tool (source: \u003chttps://docs.userpilot.com/ai/userpilot-mcp-server.md\u003e)\n- Identify and Track real-time APIs are limited to 600 requests a minute per application token, with 429 and exponential backoff guidance (source: \u003chttps://docs.userpilot.com/api-references/real-time/overview.md\u003e)\n- Each API reference page embeds its OpenAPI 3.0 definition, servers at appex.userpilot.io (source: \u003chttps://docs.userpilot.com/api-references/endpoints/export/export-job.md\u003e)\n- The status page at status.userpilot.io shows only scheduled maintenance between August and November 2026; the MCP server is not a listed component (source: \u003chttps://status.userpilot.io/\u003e)\n\n- #8 of 18 in Best product analytics and experimentation tools for AI agents: https://www.anchorterminal.com/best/product-analytics/index.md\n- All 153 product analytics comparisons: https://www.anchorterminal.com/compare/product-analytics/index.md\n\n## Compare\n\n- [Amplitude vs Userpilot](https://www.anchorterminal.com/compare/amplitude-vs-userpilot.md): B 69.3 vs B 64.4\n- [Basedash MCP vs Userpilot](https://www.anchorterminal.com/compare/basedash-mcp-vs-userpilot.md): C 61.1 vs B 64.4\n- [Countly vs Userpilot](https://www.anchorterminal.com/compare/countly-vs-userpilot.md): E 38.8 vs B 64.4\n- [Fullstory vs Userpilot](https://www.anchorterminal.com/compare/fullstory-vs-userpilot.md): B 63.3 vs B 64.4\n- [GrowthBook vs Userpilot](https://www.anchorterminal.com/compare/growthbook-vs-userpilot.md): B 68.6 vs B 64.4\n- [Matomo vs Userpilot](https://www.anchorterminal.com/compare/matomo-vs-userpilot.md): C 61.7 vs B 64.4\n- [Mixpanel vs Userpilot](https://www.anchorterminal.com/compare/mixpanel-vs-userpilot.md): B 62 vs B 64.4\n- [Mostly Good Metrics vs Userpilot](https://www.anchorterminal.com/compare/mostly-good-metrics-vs-userpilot.md): E 41.7 vs B 64.4\n- [OpenPanel vs Userpilot](https://www.anchorterminal.com/compare/openpanel-vs-userpilot.md): C 61 vs B 64.4\n- [Optimizely Experimentation vs Userpilot](https://www.anchorterminal.com/compare/optimizely-vs-userpilot.md): B 64.9 vs B 64.4\n- [Pendo vs Userpilot](https://www.anchorterminal.com/compare/pendo-vs-userpilot.md): E 44 vs B 64.4\n- [PostHog vs Userpilot](https://www.anchorterminal.com/compare/posthog-vs-userpilot.md): B 67.4 vs B 64.4\n- [Statsig vs Userpilot](https://www.anchorterminal.com/compare/statsig-vs-userpilot.md): BB 72.4 vs B 64.4\n- [Userpilot vs Woopra](https://www.anchorterminal.com/compare/userpilot-vs-woopra.md): B 64.4 vs E 44.4\n- [Heap vs Userpilot](https://www.anchorterminal.com/compare/heap-vs-userpilot.md): D 48.2 vs B 64.4\n\n## Verify this listing\n\nFor the vendor. The badge or a plain link to this page verifies the listing, from a page on userpilot.com or one of its subdomains. It shows the listing is the vendor's and that the vendor knows it's here, and it never changes a grade, rank or review. The vendor sends the page's address to `POST https://www.anchorterminal.com/api/v1/verify` as `{\"slug\": \"userpilot\", \"url\": \"…\"}`, or calls the `verify_listing` tool at https://www.anchorterminal.com/mcp. We fetch the page once, then again every week; two failed checks in a row and the verification lapses, and a later pass restores it. What we check: https://www.anchorterminal.com/builders/index.md#verify\n\nHTML badge:\n\n```html\n\u003ca href=\"https://www.anchorterminal.com/tools/userpilot\"\u003e\u003cimg src=\"https://www.anchorterminal.com/badges/userpilot.svg\" alt=\"Userpilot on Anchor Terminal\" height=\"20\"\u003e\u003c/a\u003e\n```\n\nMarkdown badge, for a README:\n\n```markdown\n[![Userpilot on Anchor Terminal](https://www.anchorterminal.com/badges/userpilot.svg)](https://www.anchorterminal.com/tools/userpilot)\n```\n\nPlain link:\n\n```html\n\u003ca href=\"https://www.anchorterminal.com/tools/userpilot\"\u003eUserpilot on Anchor Terminal\u003c/a\u003e\n```\n\n## Share this listing\n\nFor the vendor. Sharing assets for social media, two PNGs of 1200 × 630 that say Userpilot is listed on Anchor Terminal, with the vendor's logo and this page's address and no grade or score.\n\n- Dark: https://www.anchorterminal.com/assets/share/userpilot-dark.png\n- Light: https://www.anchorterminal.com/assets/share/userpilot-light.png\n", "meta": { "attribution": "Anchor Terminal (https://www.anchorterminal.com)", "attributionRequired": true, "credit": "CC BY 4.0, credit Anchor Terminal and link the page or API address you took it from (https://www.anchorterminal.com/terms/#data)", "docs": "https://www.anchorterminal.com/docs/", "generatedAt": "2026-11-07", "license": "CC-BY-4.0", "method": "https://www.anchorterminal.com/benchmark/", "methodology": "0.7", "openapi": "https://www.anchorterminal.com/openapi.json", "preview": false, "run": "2026-10-01", "runLabel": "October 2026 research run", "terms": "https://www.anchorterminal.com/terms/#data" }, "page": { "breadcrumbs": [ { "name": "Home", "url": "https://www.anchorterminal.com/" }, { "name": "Terminal", "url": "https://www.anchorterminal.com/tools/" }, { "name": "Product analytics \u0026 experimentation", "url": "https://www.anchorterminal.com/categories/product-analytics" }, { "name": "Userpilot", "url": "" } ], "description": "Userpilot is a product adoption platform with in-app guides, surveys and product analytics for SaaS and mobile apps. Agents query funnels, trends, retention, users and companies through its hosted MCP server, and send or export data through HTTP APIs.", "facts": [ "rank #471 of 1486", "OAuth or key auth", "0 desk reviews" ], "h1": "Userpilot", "image": "https://www.anchorterminal.com/assets/og/tools-userpilot.png", "path": "/tools/userpilot", "published": "2026-10-01", "section": "tools", "title": "Userpilot review (2026): pricing, alternatives and grade B", "toc": null, "updated": "2026-11-07", "url": "https://www.anchorterminal.com/tools/userpilot" }, "tokens": { "markdown": 6550, "slim": 1530 }, "version": 1 }