Krystalview MCP Server

KrystalView MCP Server

Give your AI agents direct access to website analytics. Query visitor sessions, investigate UX friction, analyze conversion funnels, review campaigns and errors, and get anomaly alerts — all from Claude, Cursor, or any MCP-compatible client.

Connection Options

Hosted Remote MCP

Use this when your client supports remote MCP servers or connector-style OAuth. No local package install is required.

During OAuth, KrystalView asks the signed-in user to choose the site the MCP client can read. The issued token is read-only and scoped to that site. The hosted OAuth server supports dynamic client registration, authorization code + PKCE, resource indicators, refresh-token rotation, and token revocation.

For clients that support custom headers instead of OAuth, the hosted endpoint also accepts a KrystalView read API key as either:

Authorization: Bearer kv_live_...

or:

X-API-Key: kv_live_...

Local stdio MCP Package

Use this when your MCP client runs local stdio servers, such as Claude Desktop, Claude Code, Cursor, or similar developer tools.

Install

pip install krystalview-mcp

Configure

Generate an API key in your KrystalView console under Settings > API Keys.

Claude Desktop

Add to your claude_desktop_config.json:

{
  "mcpServers": {
    "krystalview": {
      "command": "krystalview-mcp",
      "env": {
        "KRYSTALVIEW_API_KEY": "your-api-key-here"
      }
    }
  }
}

Claude Code

claude mcp add krystalview -- krystalview-mcp
# Then set your API key:
export KRYSTALVIEW_API_KEY="your-api-key-here"

Cursor

Add to your MCP settings:

{
  "krystalview": {
    "command": "krystalview-mcp",
    "env": {
      "KRYSTALVIEW_API_KEY": "your-api-key-here"
    }
  }
}

Available Tools

Example Prompts

Once connected, try asking your AI assistant:

• "How's my site performing this week?"
• "Show me frustrated mobile users from the last 24 hours"
• "Why did our traffic drop yesterday?"
• "Where are users dropping off in the checkout funnel?"
• "Find sessions with rage clicks on the pricing page"
• "Which campaigns are driving the most high-friction sessions?"
• "Show me unresolved browser errors with sample session IDs"
• "Are there any anomalies I should know about?"

Environment Variables

Rate Limits

API keys have configurable rate limits (default: 60 requests per minute). Rate limit headers are included in every response. If you hit the limit, the server returns a clear error with retry timing.

Security

• API keys are scoped to a single site — agents can only access data for the site the key was created for
• OAuth tokens issued by the hosted MCP endpoint are read-only and scoped to the selected site
• Hosted OAuth supports refresh-token rotation and token revocation
• Browser-originating MCP/OAuth requests are checked against explicit trusted origins
• Tools are read-only
• All requests use HTTPS
• Keys can be rotated or revoked in the KrystalView console
• The local stdio package stores no data — it proxies directly to the KrystalView API

License

MIT