KrystalView MCP Server

Give your AI agents direct access to website analytics. Query visitor sessions, investigate UX friction, analyze conversion funnels, review campaigns and errors, and get anomaly alerts — all from Claude, Cursor, or any MCP-compatible client.

Connection Options

Hosted Remote MCP

Use this when your client supports remote MCP servers or connector-style OAuth. No local package install is required.

Field	Value
Endpoint	https://krystalview.com/mcp
Transport	streamable-http
Authentication	OAuth authorization code + PKCE
OAuth metadata	https://krystalview.com/.well-known/oauth-authorization-server
Protected resource metadata	https://krystalview.com/.well-known/oauth-protected-resource

During OAuth, KrystalView asks the signed-in user to choose the site the MCP client can read. The issued token is read-only and scoped to that site. The hosted OAuth server supports dynamic client registration, authorization code + PKCE, resource indicators, refresh-token rotation, and token revocation.

For clients that support custom headers instead of OAuth, the hosted endpoint also accepts a KrystalView read API key as either:

Authorization: Bearer kv_live_...

or:

X-API-Key: kv_live_...

Local stdio MCP Package

Use this when your MCP client runs local stdio servers, such as Claude Desktop, Claude Code, Cursor, or similar developer tools.

Install

pip install krystalview-mcp

Configure

Generate an API key in your KrystalView console under Settings > API Keys.

Claude Desktop

Add to your claude_desktop_config.json:

{
  "mcpServers": {
    "krystalview": {
      "command": "krystalview-mcp",
      "env": {
        "KRYSTALVIEW_API_KEY": "your-api-key-here"
      }
    }
  }
}

Claude Code

claude mcp add krystalview -- krystalview-mcp
# Then set your API key:
export KRYSTALVIEW_API_KEY="your-api-key-here"

Cursor

Add to your MCP settings:

{
  "krystalview": {
    "command": "krystalview-mcp",
    "env": {
      "KRYSTALVIEW_API_KEY": "your-api-key-here"
    }
  }
}

Available Tools

Tool	Description
get_sessions	List/search visitor sessions with filters (device, location, friction, rage clicks)
get_session_detail	Deep dive into a specific session — full timeline, events, navigation path
get_site_stats	Aggregate performance metrics — sessions, friction, devices, top pages
get_scroll_depth	Scroll-depth buckets for a specific page path
get_live_visitors	Currently active visitor count and recent live sessions
get_anomalies	AI-detected anomalies with explanations (traffic spikes/drops, friction surges)
get_funnels	List defined conversion funnels
get_funnel_analysis	Step-by-step funnel conversion rates and drop-off analysis
get_campaign_summary	UTM campaign attribution summary
get_campaign_sessions	Visitor sessions from a specific campaign
get_campaign_roas	Paid campaign spend, conversions, and ROAS where connected
get_errors	Aggregated client-side browser errors
get_notifications	Recent KrystalView notifications and insights

Example Prompts

Once connected, try asking your AI assistant:

• "How's my site performing this week?"
• "Show me frustrated mobile users from the last 24 hours"
• "Why did our traffic drop yesterday?"
• "Where are users dropping off in the checkout funnel?"
• "Find sessions with rage clicks on the pricing page"
• "Which campaigns are driving the most high-friction sessions?"
• "Show me unresolved browser errors with sample session IDs"
• "Are there any anomalies I should know about?"

Environment Variables

Variable	Required	Default	Description
KRYSTALVIEW_API_KEY	Yes	—	Your KrystalView API key
KRYSTALVIEW_BASE_URL	No	https://krystalview.com/api	API base URL
KRYSTALVIEW_TIMEOUT	No	15	Request timeout in seconds

Rate Limits

API keys have configurable rate limits (default: 60 requests per minute). Rate limit headers are included in every response. If you hit the limit, the server returns a clear error with retry timing.

Security

• API keys are scoped to a single site — agents can only access data for the site the key was created for
• OAuth tokens issued by the hosted MCP endpoint are read-only and scoped to the selected site
• Hosted OAuth supports refresh-token rotation and token revocation
• Browser-originating MCP/OAuth requests are checked against explicit trusted origins
• Tools are read-only
• All requests use HTTPS
• Keys can be rotated or revoked in the KrystalView console
• The local stdio package stores no data — it proxies directly to the KrystalView API

License

MIT