Our grade: 4 checks
Based on public data, not a full audit. See how we grade. Something changed? Request a re-grade.
Community rating
-
No community reviews yet
Ran this server? Tell others if you would trust it in production. Reviews are separate from our grade.
Write a reviewWhy it got an A
PostHog's own server, now kept in the main PostHog repository (the old PostHog/mcp repo is archived). It runs as a hosted endpoint you connect to over HTTPS, signing in with OAuth or a personal API key made from PostHog's MCP Server preset, and it proxies to your project rather than storing your analytics data. Very active, with 35 people committing in the 90 days before this check and no advisory against the MCP code, so it earns full marks. Main caution: it is not read-only. Tools can create and update feature flags, experiments and other project settings, and some can delete, and a flag change can switch a feature on or off for real users, so limit the API key's scopes to read access and approve write calls by hand. Your queries and results pass through PostHog's US or EU cloud (use mcp-eu.posthog.com for EU projects). Self-hosted PostHog works by setting a base URL on a locally run copy. The separate Claude Code plugin can optionally send your Claude Code sessions to PostHog, but only if you set a flag and a project key; it is off by default.
How to connect
{
"mcpServers": {
"posthog": {
"command": "npx",
"args": [
"-y",
"mcp-remote@latest",
"https://mcp.posthog.com/mcp",
"--header",
"Authorization:${POSTHOG_AUTH_HEADER}"
],
"env": {
"POSTHOG_AUTH_HEADER": "Bearer {INSERT_YOUR_PERSONAL_API_KEY_HERE}"
}
}
}
}Is PostHog MCP Server safe?
Is PostHog MCP Server safe to use?
PostHog MCP Server grades A: all four checks are at full marks. Strong public trust signals. It is still not a full audit, so give it the narrowest access that works.
Does PostHog MCP Server have known vulnerabilities?
Not in our current data: it has no open CVEs or advisories. We re-check as new ones are published.
Does PostHog MCP Server support authentication?
Yes. It requires a login, so access can be tied to a person or a scoped key.
Alternatives in Developer Tools
- A Appwrite MCP ServerOfficial Appwrite server that exposes databases, users, functions, teams and storage as tools, hosted with OAuth or run locally with a project API key.
- A Atlassian Rovo MCP ServerOfficial hosted Atlassian server for Jira, Confluence, Jira Service Management, Compass, Bitbucket, Loom, Goals, Projects, and Teams, with OAuth 2.1 sign-in.
- A Buildkite MCP ServerOfficial Buildkite server for pipelines, builds, jobs, logs, annotations, and Test Engine data, hosted or local.
- A Dynatrace Remote MCP ServerDynatrace's hosted MCP server, running inside your Dynatrace SaaS environment, to run and explain DQL, look into problems, vulnerabilities and Kubernetes events, and forecast time series.
- A GitHub MCP ServerOfficial GitHub server for repos, issues, pull requests, Actions, and code security, hosted or local.
Embed this badge
[](https://trustedmcp.io/servers/posthog-mcp)<a href="https://trustedmcp.io/servers/posthog-mcp"><img src="https://trustedmcp.io/badge/posthog-mcp.svg" alt="TrustedMCP grade A" height="80"></a>Community reviews
No published community reviews yet.
Write a review
Ran this server? Tell other teams how it went. You get one review per server. We email you a link to confirm it, then an editor checks it before it goes up. We never show your email.