Watchlist tracking
Reviewed for relevance and future tracking value.
MCP100 Assessment
Watchlist / Tracking
Why we’re tracking it
Follow-up value is specific to PostHog MCP analytics for tool usage and client identity across server pods: Do stateless session identifiers and sampling preserve correlation without exposing unnecessary client data?
Reviewed · Documentation review; complete setup workflow not independently tested
Best fit
Instrumenting and operating PostHog-aware MCP services
What we know
Official PostHog package for MCP analytics instrumentation and stateless/multi-pod deployment support.
Maintenance / activity evidence
- @posthog/mcp 0.22.0 published 2026-10-05T13:05:57.812Z
Tracking evidence observed Oct 5, 2026. These dated signals do not establish current maintenance. Reviewed enrichment confidence: medium.
Verification gaps / watch-outs
- Installation and comprehensive security have not been independently audited.
- Depends on PostHog/project integration. Writes: Event/telemetry ingestion; exact MCP tool writes unresolved.
- Authentication not yet verified.
- Sensitive access: Analytics/event data
- Treat instrumentation payloads as potentially sensitive; verify exact project token/auth behavior before enabling broadly.
Full authority, access and evidence limits are available in Review context and Access & risk.
Popularity
· 773.2k package downloads / 30 days
Downloads observed Sep 25, 2026.
30-day package downloads intentionally left null because the package-stats provider ran out of credits during Batch 3 QA.
30-day package downloads intentionally left null because the package-stats provider ran out of credits during Batch 3 QA.
All limitations / Review context
Do stateless session identifiers and sampling preserve correlation without exposing unnecessary client data?
The bounded review of the publisher's documented PostHog MCP analytics for tool usage and client identity across server pods and release notices identified no disclosed material condition preventing an accurately scoped public tracking entry. The resource's operational permissions remain uncertainty; this assessment does not certify installation safety.
- Treat instrumentation payloads as potentially sensitive; verify exact project token/auth behavior before enabling broadly.
- Depends on PostHog/project integration.
- MCP analytics/event data may be sent to PostHog.
- Reviewed write actions: Event/telemetry ingestion; exact MCP tool writes unresolved
- Sensitive access: Analytics/event data
- Installation, client compatibility and comprehensive security have not been independently audited. Authentication and access depend on the configured services.
- Runtime behavior, dependencies and undisclosed vulnerabilities were not independently audited.
- Documented tool authority and any remote data handling must be checked before installation or use.
- Tool inventory, client matrix and permissions completeness were not requirements for this Radar tracking review.
- Repository identity
- Exact tool/auth model
- Cost
- The package page did not establish the complete tool/auth surface in this audit.
Original activity observations
- @posthog/mcp 0.22.0 published 2026-10-05T13:05:57.812Z
Technical identity
npm/@posthog/mcp- Exact implementation source
- https://www.npmjs.com/package/@posthog/mcp ↗
- Reviewed resource type
- MCP Server
- Package identity
- @posthog/mcp
Evidence & Sources
- Evidence basis
- Recorded source evidence
- Setup runtime verification
- Not independently runtime-tested by MCP100 for this setup workflow.
Reviewed · Latest source observation
- Package registry ↗
@posthog/mcp
Recorded package identity, distribution or download evidence.
Includes references whose attribution is not established.
- Repository document ↗
posthog/posthog-js
Recorded repository material and project history.
Setup · Watchlist
Install & Agents
Publisher instructions.
Source evidence observed .
Additional setup details required — see the specific gaps below.
Install SDK / application integration
Publisher instructionsDeveloper library/integration. Install in an application; not a plug-and-play MCP Server. Review publisher README. Not a standalone local MCP server; application integration required.
publisher documented install or connection · Publisher instructions
npm install @posthog/mcpConfigure / authenticate
MCP100 setup guide@posthog/mcp package contains PostHog MCP SDK / server internals. README documents PostHogMCP application integration; do not claim it exposes a standalone npx server.
Check connection
Suggested checkThis published package is an instrumentation integration/SDK for MCP servers, not necessarily a standalone npx server. Initialize in an application test and inspect PostHog event dispatch without posting real user data. SDK/plugin validation means app import/initialization or feature availability, not an MCP client tools/list test unless the consuming app actually exposes a server.
Remove / uninstall / revoke
MCP100 setup guideIf @posthog/mcp is used as an SDK/application dependency, remove its application imports and run `npm uninstall @posthog/mcp`; unregister a separately configured hosted PostHog MCP connector only if that specific connector exists. A package dependency is not automatically a standalone MCP Server.
MCP client unregister, stopping hosted processes, package uninstall, OAuth disconnect and token revocation are distinct actions.
A claude mcp remove command is only valid for Claude Code when the local registration actually has that name. Other MCP hosts require their own UI/config cleanup.
Separate credential guidance / limitations: @posthog/mcp is an instrumentation SDK using POSTHOG_PROJECT_TOKEN, not a standalone account-owning server. PostHog project token is not the same as personal API key; PostHog manages its keys and leaked token rotations under the product, not this package.
Package / application cleanup · matching installation environment · MCP100 composed guide
npm uninstall @posthog/mcp
Official Documentation & Sources
What it does
Official PostHog package for MCP analytics instrumentation and stateless/multi-pod deployment support.
- Capability
- Data & Databases
- Resource type
- MCP Server
- Industry
- Software & Technology
- Best fit
- Instrumenting and operating PostHog-aware MCP services
Representative uses
- Instrument MCP events
- Support stateless/multi-pod MCP deployments
Limitations
- The package page did not establish the complete tool/auth surface in this audit.
Reviewed access
Access & risk
Review the exact access boundary before connecting this MCP to accounts, credentials, or sensitive data.
- Authentication
- Not documented in the reviewed sources
- Permissions
- Depends on PostHog/project integration.
- Data handling
- MCP analytics/event data may be sent to PostHog.
- Cost
- Not documented in the reviewed sources
- Risk and cautions
- Treat instrumentation payloads as potentially sensitive; verify exact project token/auth behavior before enabling broadly.
Access scope and cautions
- Write actions
- Event/telemetry ingestion; exact MCP tool writes unresolved
- Sensitive access
- Analytics/event data
- Risk level
- moderate
FAQ
Based on reviewed evidence as of 2026-10-06. Watchlist tracking is not a recommendation or a security certification.
Which tasks are documented for this implementation?
What setup information is documented?
Can it modify data or perform write operations?
What data-handling boundary should I consider?
What limitations and risks should I check before use?
Is this an official MCP?
PostHog is listed as First-party MCP in MCP100’s current evidence.