# Userpilot > Userpilot is a product adoption platform with in-app guides, surveys and product analytics for SaaS and mobile apps. Agents query funnels, trends, retention, users and companies through its hosted MCP server, and send or export data through HTTP APIs. - Canonical: https://www.anchorterminal.com/tools/userpilot - Pricing: https://www.anchorterminal.com/tools/userpilot#pricing - Reviews: https://www.anchorterminal.com/tools/userpilot#reviews - Markdown: https://www.anchorterminal.com/tools/userpilot.md (~6,550 tokens) - Slim: https://www.anchorterminal.com/tools/userpilot.min.md (~1,530 tokens, same facts, less prose, for token-sensitive contexts) - JSON: https://www.anchorterminal.com/tools/userpilot.json (this page as data, same URL with Accept: application/json) - Site index for agents: https://www.anchorterminal.com/llms.txt (the key docs and every listing in one file, at most 16 MB, about 4 million tokens: https://www.anchorterminal.com/llms-full.txt) - API: https://www.anchorterminal.com/api/v1/index.json - MCP: https://www.anchorterminal.com/mcp (the whole catalogue as tools, no key) - DNS: dig +short TXT userpilot.grade.anchorterminal.com (the grade as a DNS TXT record, for a sandbox with no HTTP where names still resolve; also top., best.. and .vs.. under the zone, and the same under grade.letme.dev) - Licence: CC BY 4.0, credit Anchor Terminal and link this page (https://www.anchorterminal.com/terms/#data) - Updated: 2026-11-07 ## Overview **Grade B · 64.4/100 · rank #471 of 1486 · #8 in Product analytics & experimentation · not agent-ready · confidence medium** ## Assessment Userpilot's registry-listed MCP server uses OAuth with separate read and write scopes and cannot delete or reach administration, which suits an agent asking analytics questions. Plans start at $299 a month, the HTTP API key is a single environment-wide credential, and legal and retention documents are thin. ## Facts | Field | Value | | --- | --- | | Vendor | Userpilot, Inc. (https://userpilot.com) | | Kind | HTTP API | | Category | Product analytics & experimentation (https://www.anchorterminal.com/categories/product-analytics) | | Transport | HTTP, Streamable HTTP | | Endpoint | `https://mcp.userpilot.io/mcp` | | Auth | OAuth or key · The hosted MCP server uses OAuth 2.0 with PKCE, dynamic client registration and a permission screen. Scopes are data:read (always required), people:read, sessions:read, segments:write, reports:write, feedback:write and offline_access; the connection runs under the user's own role and can't delete or reach administration. The HTTP APIs take one environment API key as `Authorization: Token `, shown on the Environment page; the docs say to contact support to regenerate it. | | Pricing | Paid ($299 / mo) · Starter $299 a month for up to 2,000 MAU with basic trends and funnels; Growth from $849 a month with advanced analytics and the HTTP API; Enterprise by quote with SSO, activity logs and a custom SLA. Bulk export, import and data warehouse sync are add-ons. 14-day free trial with no card required. | | x402 | No · No x402, MPP or L402 in the docs, llms.txt, the MCP docs or the pricing page (checked 2026-11-06). | | Licence | unknown | | Packages | npm: `userpilot` | | MCP registry name | `io.userpilot/mcp` | | Docs | https://docs.userpilot.com/api-references/overview | | llms.txt | https://docs.userpilot.com/llms.txt | | Last release | 2026-10-11 | | npm downloads / week | 235,722 | | Surface listed | The hosted MCP server at mcp.userpilot.io and the HTTP APIs at appex.userpilot.io, read from docs.userpilot.com (llms.txt and Markdown pages), the MCP registry entry and OAuth metadata, userpilot.com pricing, security, terms, privacy and about pages, and status.userpilot.io on 6 November 2026. No account was made and no tool was called | | Product scope | Mainly in-app onboarding flows, checklists, tooltips, surveys and NPS, with product analytics (trends, funnels, retention, paths, dashboards) and session replay. This listing grades the analytics surface an agent reaches | | MCP permissions | Read product data and analytics (required), read user and company profiles, read session replay, write segments, write reports and dashboards, write survey drafts, and stay connected | | HTTP APIs | Real-time identify and track, bulk user and company updates, bulk event import jobs, bulk data export jobs with lookups for properties, segments and tracked feature IDs, and user and company deletion | | Rate limits | 600 a minute per application token for Identify and Track; the MCP docs say rate limits contain runaway use without giving numbers | | Hosting | Mainly AWS with a small Google Cloud footprint, with US Standard, US Enterprise and EU ingestion endpoints on the status page | | Legal entity | Userpilot, Inc., 7200 North MoPac Expressway Suite 300, Austin, Texas, per the privacy policy | | Capabilities | analytics.query, analytics.funnels, analytics.events | | Tags | official, hosted, mcp, remote-mcp, mcp-registry, oauth, llms-txt, no-card, status-page, soc2, closed-source, webhooks, eu-region | | JSON | https://www.anchorterminal.com/api/v1/tools/userpilot.json | ## Score breakdown (methodology v0.7, October 2026 research run) Assessed 2026-11-06 from public evidence against the published checklist (https://www.anchorterminal.com/benchmark/#checklist). Confidence: medium. Performance and Task success pending (no score, not in the total); the total is Σ(score × weight) ÷ 80 over the 7 assessed categories. "This run" is each category's share of the 100 points. | Category | Weight | This run | Score (0–100) | Points | | --- | --- | --- | --- | --- | | Reliability | 16% | 20 | 82 | 16.4 | | Performance | 10% | pending | pending | n/a | | Schema & documentation | 13% | 16.2 | 71 | 11.5 | | Agent ergonomics | 13% | 16.2 | 60 | 9.8 | | Security & auth | 14% | 17.5 | 62 | 10.8 | | Payments & pricing | 10% | 12.5 | 30 | 3.8 | | Task success | 10% | pending | pending | n/a | | Maintenance & community | 7% | 8.8 | 79 | 6.9 | | Transparency & trust (editorial 42, provenance 76) | 7% | 8.8 | 59 | 5.2 | | Negative events | up to −15 | up to −15 | none recorded | 0 | | **Total** | | | | **64.4 → B** | ### Why each score - Reliability 82 (checked 2026-11-06): Graded on the hosted service with the hosted lines. Better Stack status page at status.userpilot.io with components for ingestion in three regions, the SDKs, the web application APIs and the website (20). From August to November 2026 the page shows only scheduled maintenance windows of two to four hours, with no incidents; the MCP server isn't a component (30). 600 requests a minute per token for the real-time APIs, but no numbers for MCP or export (12 of 15). 429 documented with exponential backoff guidance; no Retry-After or idempotency guidance (10 of 15). The SLA is a custom Enterprise contract term, not published (0). The MCP server is 1.0.0 in the registry with no beta label (10). 20+30+12+10+0+10 = 82. - Performance: Pending. Latency is measured per call by our probes, which haven't run yet, so this run doesn't score it. Its weight is shared across the assessed categories until the first probe window closes. - Schema & documentation 71 (checked 2026-11-06): Every API reference page embeds an OpenAPI 3.0 definition, though no standalone spec file was found (20 of 25). llms.txt and Markdown versions of every page (10). Endpoint pages state their purpose and the MCP docs say what each permission allows; the MCP tool definitions weren't read because that needs a session (12 of 20). Request bodies are typed, mostly as strings and string arrays with few enums (9 of 15). An error reference covers 400, 401, 422 and 429 with causes, and pages carry examples (12 of 15). /v1 paths and dated SDK release notes; no API changelog was found (8 of 15). 20+10+12+9+12+8 = 71. - Agent ergonomics 60 (checked 2026-11-06): The tool count isn't published; the docs say the assistant can search hundreds of extra read-only operations on demand, which reads as dynamic loading. Without the list we give the middle band (15 of 25). Export jobs filter by date range, users, events and segments, and job lists paginate (14 of 20). A documented error reference (13 of 20). No deletes or admin through MCP by design; annotations weren't readable and no idempotency keys were found (10 of 20). The HTTP APIs have no official server-side SDK; client SDKs for web and six mobile frameworks (8 of 15). 15+14+13+10+8 = 60. - Security & auth 62 (checked 2026-11-06): The MCP server uses OAuth with PKCE, dynamic client registration, revocation, separate read and write scopes and the user's own role. The HTTP API key is one per environment with many privileges and is regenerated through support. Averaged over both surfaces (22 of 30). Write scopes are optional, profile and replay data need their own scopes, and deletes and administration are unavailable through MCP (19 of 20). Profiles, survey answers and event properties come from end users, and no prompt-injection guidance was found beyond a note that the AI provider processes the data (3 of 15). Access and Activity Logs exist, on Enterprise per the pricing page (9 of 15). SOC 2 Type II with the report on request and penetration tests by certified auditors. No security.txt, disclosure policy or bug bounty (9 of 20). 22+19+3+9+9 = 62. - Payments & pricing 30 (checked 2026-11-06): No x402, MPP or L402 (0). Plan prices are public ($299 and from $849 a month), with no per-unit prices (10). 14-day free trial with no card required (20). Signup and OAuth approval happen in a browser (0). 0+10+20+0 = 30. - Task success: Pending. Task success needs the category task suites run through each tool, which haven't run yet, so this run doesn't score it. Its weight is shared across the assessed categories until then. A data provider's data-quality score is published on its listing now and becomes half of this category when it's scored. - Maintenance & community 79 (checked 2026-11-06): io.userpilot/mcp 1.0.0 was published to the registry on 11 October 2026 (30). The iOS SDK alone has dated releases on 6 August, 2 September, 27 September and 2 October 2026 (20). A closed service with no public API changelog, support by email and chat (8 of 25). Verified io.userpilot namespace in the official MCP registry (15). Client SDKs are current; there is nothing else public to inspect (6 of 10). 30+20+8+15+6 = 79. - Transparency & trust 59 (checked 2026-11-06): A closed service with terms dated 23 April 2024 (15 of 30). The privacy policy of 11 March 2025 names a DPO and two sub-processors (AWS and Cloudflare), while the security page names AWS, Google Cloud and Stripe. The DPA is on request and no customer-data retention period is stated (14 of 30). No deprecation policy or dated API notices found (3 of 20). Sub-processors are named with addresses but not data locations, though an EU ingestion endpoint exists (10 of 20). 15+14+3+10 = 42. Fix list, everything this grade says the listing lacks, the biggest gain first (14 items). What it covers is at https://www.anchorterminal.com/fixes/userpilot.md (JSON https://www.anchorterminal.com/fixes/userpilot.json). The whole list for a coding agent comes from `POST https://www.anchorterminal.com/api/v1/fix-list` with `{"listing": "userpilot", "plan": "read"}`, free while the beta runs ### What we couldn't check - unchecked: the MCP tool list, input schemas and annotations, which need an MCP session - unchecked: MCP rate limits, which the docs mention without numbers - The privacy policy names AWS and Cloudflare as sub-processors while the security page names AWS, Google Cloud and Stripe - firstReleased isn't set because no first-hand launch date was found ### Sources - MCP server docs: (seen 2026-11-06) - MCP registry entry: (seen 2026-11-06) - OAuth metadata: (seen 2026-11-06) - API authentication: (seen 2026-11-06) - real-time API limits: (seen 2026-11-06) - export job reference: (seen 2026-11-06) - error reference: (seen 2026-11-06) - status page: (seen 2026-11-06) - pricing: (seen 2026-11-06) - security page: (seen 2026-11-06) - privacy policy: (seen 2026-11-06) - terms: (seen 2026-11-06) - iOS SDK release notes: (seen 2026-11-06) ## Score history Every move of a score since the listing was graded, newest first, with its cause. A score can't move without an entry here. JSON: https://www.anchorterminal.com/api/v1/tools/userpilot/history.json - 2026-11-06: graded 64.4 B (methodology 0.7) ## Who's behind it (provenance 76/100, checked 2026-11-06) | Check | Finding | Points | | --- | --- | --- | | Legal entity named | Userpilot, Inc. | 20/20 | | Domain age | userpilot.com, registered 2011-01-08 (15 years) | 15/15 | | Endpoint on the vendor's domain | mcp.userpilot.io is not on userpilot.com | 0/15 | | Terms of service | read, states 6 of the 7 things a reader expects, and has 1 clause that costs points | 7.1/10 | | Privacy policy | read, states 8 of the 8 things a reader expects | 10/10 | | Status page | status.userpilot.io | 10/10 | | Changelog | published | 10/10 | | security.txt | not found | 0/10 | | People named | 2 named with their role, 2 with a public profile | 10/10 | | Support route | a support address, help pages | 5/5 | The MCP server and APIs are on userpilot.io; the website and legal pages are on userpilot.com. The terms were last updated on 23 April 2024 and the privacy policy on 11 March 2025, which names a DPO and Userpilot, Inc. in Austin, Texas. docs.userpilot.com/robots.txt carries Content-Signal ai-train=yes, search=yes, ai-input=yes. userpilot.com/robots.txt disallows only search paths. userpilot.com/.well-known/security.txt returned 404, and the security page names no disclosure policy or bug bounty. RDAP gives userpilot.com a registration date of 8 January 2011. ### Terms and privacy, as read A reading by a fixed set of rules, each answered with the vendor's own sentence. Not legal advice. **Terms of service** (https://userpilot.com/terms-of-use/), read 2026-11-06, dated 2024-04-23, states 6 of the 7 things a reader expects. - To know. Says the terms or the service can change without notice (costs points). "Userpilot reserves the right to modify, suspend or discontinue, temporarily or permanently, the website/app or any service to which it connects, with or without notice and without liability to you." - To know. Says access can be ended without notice or for any reason. "Userpilot reserves the right to modify, suspend or discontinue, temporarily or permanently, the website/app or any service to which it connects, with or without notice and without liability to you." - To know. Requires arbitration or waives class actions. "Binding Arbitration" - Gives the date it was last updated. Last updated 2024-04-23. - States a limit on its liability. Rules out indirect and consequential losses, with no cap named in this sentence. - Says how changes to the terms are announced. Changes are posted, with no other notice named. - Not found in the text. Refers to a service level or uptime commitment. **Privacy policy** (https://userpilot.com/privacy-policy/), read 2026-11-06, dated 2025-03-11, states 8 of the 8 things a reader expects. - Gives the date it was last updated. Last updated 2025-03-11. - Says how long data is kept. For as long as needed, with no period named. - Gives a privacy contact. Gives an email address, hidden from our reader by the page. - Says where data is transferred or stored. Relies on the Data Privacy Framework. ## Humans behind the project (researched 2026-11-06 from public pages, not part of the grade) ### Key people - Yazan Sehwail, CEO & Co-Founder. LinkedIn: https://www.linkedin.com/in/yazan-sehwail/ - Thabet Gharabah, CTO. LinkedIn: https://www.linkedin.com/in/thabetibrahim/ - Note: Userpilot's about page names Yazan Sehwail as CEO & Co-Founder and Thabet Gharabah as CTO, each with a LinkedIn link, among a wider leadership team. The privacy policy names Userpilot, Inc. in Austin, Texas, and its DPO. userpilot.com and its blog sitemap have no funding post. Techloy's report of 6 September 2022 says Userpilot raised a $4.6 million seed round led by Silicon Badia, with ScOp Ventures and 500 Global, after a $1.2 million pre-seed the year before whose investors it doesn't name. TechCrunch's report of the same round wasn't used, since techcrunch.com's robots.txt shuts out Anthropic's crawlers. No source states a total raised or a valuation. - Userpilot, Inc.: LinkedIn https://www.linkedin.com/company/teamuserpilot X https://x.com/teamuserpilot ### Ownership and investors - Backed by: Silicon Badia, ScOp Ventures, 500 Global ### Getting support - Support email: support@userpilot.com - Help: https://docs.userpilot.com - Help: https://status.userpilot.io - Sources: https://userpilot.com/about/, https://userpilot.com/privacy-policy/, https://docs.userpilot.com/api-references/authentication.md, https://www.techloy.com/product-led-growth-platform-for-saas-companies-userpilot-bags-4-6-million/ ## Live (updated 2026-11-07 17:50 UTC) - Right now: up, HTTP 405, 479 ms, checked 2026-11-07 17:50 UTC (get on `https://mcp.userpilot.io/mcp`) - Uptime 24h 100.0% (195 probes) · 30 days 100.0% (195 probes) · p50 493 ms · p95 585 ms - Vendor status page: not read, no machine-readable status found - npm `userpilot` 1.4.3 - security.txt: none - Watching changelog - Watching privacy - Watching terms - Tools: the endpoint asks for credentials before listing them (checked 2026-11-07 01:48 UTC) - Always current: https://www.anchorterminal.com/api/v1/live/userpilot.json ## Probe metrics Not measured yet. Our benchmark probes haven't run, so there's no availability, latency or error rate from a run and Performance is pending. Live uptime, where we poll the endpoint, is under Live and doesn't change the score. ## Prices | Item | Price | Unit | Note | | --- | --- | --- | --- | | Starter plan | $299 | per month (plan) | Up to 2,000 MAU | | Growth plan | $849 | per month (plan) | Starting price; includes advanced product analytics and the HTTP API | Across all listings: https://www.anchorterminal.com/prices/index.md ## Strengths - Hosted MCP server in the official registry as io.userpilot/mcp, with OAuth and PKCE - Scopes split reads of analytics, profiles and session replay from writes of segments, reports and survey drafts - No delete, publish or administration actions are reachable through MCP - Status page with three ingestion regions and no incidents from August to November 2026 - llms.txt and Markdown docs, with OpenAPI 3.0 on each API reference page ## Weaknesses - Plans start at $299 a month, and the HTTP API needs Growth from $849 - The HTTP API uses one environment-wide key that support has to regenerate - The MCP tool list and its rate limits aren't published - No security.txt, disclosure policy or bug bounty found - The privacy policy and security page name different sub-processors ## Before you call it (notes for agents) 1. Ask for only the scopes the task needs; profile and session replay reads are separate grants 2. Expect survey writes to stay drafts that a person reviews and publishes in Userpilot 3. Refresh the connector's tool list after Userpilot adds tools, since clients cache it 4. Back off exponentially on 429 from Identify and Track, which allow 600 requests a minute 5. Use the bulk export job API for raw events rather than looping over analytics tools ## Connect Claude Code: ```bash claude mcp add --transport http userpilot https://mcp.userpilot.io/mcp ``` MCP client configuration: ```json { "mcpServers": { "userpilot": { "url": "https://mcp.userpilot.io/mcp" } } } ``` Through letme: https://letme.dev/userpilot. letme answers with the pick and how to call it direct. How it works: https://www.anchorterminal.com/letme/index.md ## Similar tools Ranked by shared capabilities, then score. Same-category tools with no shared capability key are listed last. | Tool | Grade | Score | Rank | Shared capabilities | x402 | Markdown | | --- | --- | --- | --- | --- | --- | --- | | Amplitude | B | 69.3 | 249 | analytics.query, analytics.funnels, analytics.events | no | https://www.anchorterminal.com/tools/amplitude.md | | PostHog | B | 67.4 | 327 | analytics.query, analytics.events, analytics.funnels | no | https://www.anchorterminal.com/tools/posthog.md | | Fullstory | B | 63.3 | 519 | analytics.query, analytics.events, analytics.funnels | no | https://www.anchorterminal.com/tools/fullstory.md | | Mixpanel | B | 62 | 577 | analytics.query, analytics.funnels, analytics.events | no | https://www.anchorterminal.com/tools/mixpanel.md | | Matomo | C | 61.7 | 594 | analytics.query, analytics.events, analytics.funnels | no | https://www.anchorterminal.com/tools/matomo.md | | OpenPanel | C | 61 | 628 | analytics.query, analytics.events, analytics.funnels | no | https://www.anchorterminal.com/tools/openpanel.md | ## Panel reviews (0) Reviewed by the Anchor panel (https://www.anchorterminal.com/reviewers/index.md): . Desk reviews, written from public documentation, pricing, terms, source and status history on 1 October 2026. No calls made. For a desk review, the outcome says whether the reviewer's questions could be answered from public material: success, partial or failure. How reviews work: https://www.anchorterminal.com/reviews/how-it-works.md ## Notable - Published in the official MCP registry as io.userpilot/mcp 1.0.0 on 11 October 2026, remote at https://mcp.userpilot.io/mcp (source: ) - The MCP connection can't delete anything, publish content or touch billing, team or account settings; write permissions cover segments, reports, dashboards and survey drafts only (source: ) - The assistant can search hundreds of additional read-only operations when a question needs them, so not every operation is a listed tool (source: ) - Identify and Track real-time APIs are limited to 600 requests a minute per application token, with 429 and exponential backoff guidance (source: ) - Each API reference page embeds its OpenAPI 3.0 definition, servers at appex.userpilot.io (source: ) - The status page at status.userpilot.io shows only scheduled maintenance between August and November 2026; the MCP server is not a listed component (source: ) - #8 of 18 in Best product analytics and experimentation tools for AI agents: https://www.anchorterminal.com/best/product-analytics/index.md - All 153 product analytics comparisons: https://www.anchorterminal.com/compare/product-analytics/index.md ## Compare - [Amplitude vs Userpilot](https://www.anchorterminal.com/compare/amplitude-vs-userpilot.md): B 69.3 vs B 64.4 - [Basedash MCP vs Userpilot](https://www.anchorterminal.com/compare/basedash-mcp-vs-userpilot.md): C 61.1 vs B 64.4 - [Countly vs Userpilot](https://www.anchorterminal.com/compare/countly-vs-userpilot.md): E 38.8 vs B 64.4 - [Fullstory vs Userpilot](https://www.anchorterminal.com/compare/fullstory-vs-userpilot.md): B 63.3 vs B 64.4 - [GrowthBook vs Userpilot](https://www.anchorterminal.com/compare/growthbook-vs-userpilot.md): B 68.6 vs B 64.4 - [Matomo vs Userpilot](https://www.anchorterminal.com/compare/matomo-vs-userpilot.md): C 61.7 vs B 64.4 - [Mixpanel vs Userpilot](https://www.anchorterminal.com/compare/mixpanel-vs-userpilot.md): B 62 vs B 64.4 - [Mostly Good Metrics vs Userpilot](https://www.anchorterminal.com/compare/mostly-good-metrics-vs-userpilot.md): E 41.7 vs B 64.4 - [OpenPanel vs Userpilot](https://www.anchorterminal.com/compare/openpanel-vs-userpilot.md): C 61 vs B 64.4 - [Optimizely Experimentation vs Userpilot](https://www.anchorterminal.com/compare/optimizely-vs-userpilot.md): B 64.9 vs B 64.4 - [Pendo vs Userpilot](https://www.anchorterminal.com/compare/pendo-vs-userpilot.md): E 44 vs B 64.4 - [PostHog vs Userpilot](https://www.anchorterminal.com/compare/posthog-vs-userpilot.md): B 67.4 vs B 64.4 - [Statsig vs Userpilot](https://www.anchorterminal.com/compare/statsig-vs-userpilot.md): BB 72.4 vs B 64.4 - [Userpilot vs Woopra](https://www.anchorterminal.com/compare/userpilot-vs-woopra.md): B 64.4 vs E 44.4 - [Heap vs Userpilot](https://www.anchorterminal.com/compare/heap-vs-userpilot.md): D 48.2 vs B 64.4 ## Verify this listing For the vendor. The badge or a plain link to this page verifies the listing, from a page on userpilot.com or one of its subdomains. It shows the listing is the vendor's and that the vendor knows it's here, and it never changes a grade, rank or review. The vendor sends the page's address to `POST https://www.anchorterminal.com/api/v1/verify` as `{"slug": "userpilot", "url": "…"}`, or calls the `verify_listing` tool at https://www.anchorterminal.com/mcp. We fetch the page once, then again every week; two failed checks in a row and the verification lapses, and a later pass restores it. What we check: https://www.anchorterminal.com/builders/index.md#verify HTML badge: ```html Userpilot on Anchor Terminal ``` Markdown badge, for a README: ```markdown [![Userpilot on Anchor Terminal](https://www.anchorterminal.com/badges/userpilot.svg)](https://www.anchorterminal.com/tools/userpilot) ``` Plain link: ```html Userpilot on Anchor Terminal ``` ## Share this listing For the vendor. Sharing assets for social media, two PNGs of 1200 × 630 that say Userpilot is listed on Anchor Terminal, with the vendor's logo and this page's address and no grade or score. - Dark: https://www.anchorterminal.com/assets/share/userpilot-dark.png - Light: https://www.anchorterminal.com/assets/share/userpilot-light.png --- Query this catalogue directly over MCP: https://www.anchorterminal.com/mcp (Streamable HTTP, no key). How: https://www.anchorterminal.com/agents/#mcp