umami-compass 0.1.0

package/dist/server.js

@@ -0,0 +1,100 @@
+import { McpServer } from "@modelcontextprotocol/sdk/server/mcp.js";
+import { z } from "zod";
+import { UmamiClient } from "./api/client.js";
+import { toSafeError } from "./api/errors.js";
+import { coreModule } from "./mcp/modules/core.js";
+import { eventsModule } from "./mcp/modules/events.js";
+import { heatmapsModule } from "./mcp/modules/heatmaps.js";
+import { performanceModule } from "./mcp/modules/performance.js";
+import { replayModule } from "./mcp/modules/replay.js";
+import { reportsModule } from "./mcp/modules/reports.js";
+import { revenueModule } from "./mcp/modules/revenue.js";
+import { sessionsModule } from "./mcp/modules/sessions.js";
+import { assertModuleAllowed, READ_ONLY_POLICY, } from "./mcp/tool-module.js";
+import { VERSION } from "./version.js";
+export const BUILTIN_MODULES = [
+    coreModule,
+    eventsModule,
+    sessionsModule,
+    performanceModule,
+    reportsModule,
+    revenueModule,
+    replayModule,
+    heatmapsModule,
+];
+export function createServer(options) {
+    const server = new McpServer({
+        name: "umami-compass",
+        title: "Umami Compass",
+        version: VERSION,
+        websiteUrl: "https://github.com/webcredo/umami-compass",
+    }, {
+        instructions: "Secure, read-only Umami Analytics access. Start with list_websites, use bounded time ranges, and request only the dimensions needed for the analysis. Performance, saved reports, session, revenue, heatmap and replay data may require separate Umami permissions. Minimize sensitive data entering model context. No tool in this release changes Umami state.",
+    });
+    const client = new UmamiClient(options.config, options.fetch);
+    const policy = options.accessPolicy ?? READ_ONLY_POLICY;
+    const modules = options.modules ?? BUILTIN_MODULES;
+    for (const module of modules) {
+        if (!options.config.toolsets.has(module.id))
+            continue;
+        assertModuleAllowed(module, policy);
+        module.register(server, { client, config: options.config });
+    }
+    server.registerResource("websites", "umami://websites", {
+        title: "Visible Umami websites",
+        description: "Websites visible under the configured identity and optional allowlist.",
+        mimeType: "application/json",
+    }, async (uri, extra) => {
+        try {
+            const websites = await client.listWebsites({ page: 1, pageSize: 100 }, extra.signal);
+            return {
+                contents: [
+                    {
+                        uri: uri.href,
+                        mimeType: "application/json",
+                        text: JSON.stringify(websites),
+                    },
+                ],
+            };
+        }
+        catch (error) {
+            throw new Error(toSafeError(error).message);
+        }
+    });
+    server.registerPrompt("analytics_report", {
+        title: "Analyze an Umami website",
+        description: "A safe workflow for producing an evidence-based analytics report.",
+        argsSchema: {
+            websiteId: z
+                .string()
+                .uuid()
+                .optional()
+                .describe("Optional Umami website UUID; list websites first if omitted."),
+            objective: z
+                .string()
+                .max(2_000)
+                .optional()
+                .describe("The decision or question the report should support."),
+        },
+    }, ({ websiteId, objective }) => ({
+        messages: [
+            {
+                role: "user",
+                content: {
+                    type: "text",
+                    text: [
+                        `Analyze ${websiteId ? `website ${websiteId}` : "the relevant Umami website"}.`,
+                        objective
+                            ? `Objective: ${objective}.`
+                            : "Clarify the reporting objective before querying.",
+                        "Confirm an explicit time range and timezone.",
+                        "Use aggregate stats and pageviews first, then only the smallest necessary metric, event, or session breakdown.",
+                        "State the queried period, filters, evidence, uncertainty, and recommended next actions.",
+                    ].join(" "),
+                },
+            },
+        ],
+    }));
+    return server;
+}
+//# sourceMappingURL=server.js.map

package/dist/server.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"server.js","sourceRoot":"","sources":["../src/server.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,SAAS,EAAE,MAAM,yCAAyC,CAAC;AACpE,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AACxB,OAAO,EAAc,WAAW,EAAE,MAAM,iBAAiB,CAAC;AAC1D,OAAO,EAAE,WAAW,EAAE,MAAM,iBAAiB,CAAC;AAE9C,OAAO,EAAE,UAAU,EAAE,MAAM,uBAAuB,CAAC;AACnD,OAAO,EAAE,YAAY,EAAE,MAAM,yBAAyB,CAAC;AACvD,OAAO,EAAE,cAAc,EAAE,MAAM,2BAA2B,CAAC;AAC3D,OAAO,EAAE,iBAAiB,EAAE,MAAM,8BAA8B,CAAC;AACjE,OAAO,EAAE,YAAY,EAAE,MAAM,yBAAyB,CAAC;AACvD,OAAO,EAAE,aAAa,EAAE,MAAM,0BAA0B,CAAC;AACzD,OAAO,EAAE,aAAa,EAAE,MAAM,0BAA0B,CAAC;AACzD,OAAO,EAAE,cAAc,EAAE,MAAM,2BAA2B,CAAC;AAC3D,OAAO,EAEL,mBAAmB,EACnB,gBAAgB,GAEjB,MAAM,sBAAsB,CAAC;AAC9B,OAAO,EAAE,OAAO,EAAE,MAAM,cAAc,CAAC;AAEvC,MAAM,CAAC,MAAM,eAAe,GAA0B;IACpD,UAAU;IACV,YAAY;IACZ,cAAc;IACd,iBAAiB;IACjB,aAAa;IACb,aAAa;IACb,YAAY;IACZ,cAAc;CACf,CAAC;AASF,MAAM,UAAU,YAAY,CAAC,OAA4B;IACvD,MAAM,MAAM,GAAG,IAAI,SAAS,CAC1B;QACE,IAAI,EAAE,eAAe;QACrB,KAAK,EAAE,eAAe;QACtB,OAAO,EAAE,OAAO;QAChB,UAAU,EAAE,2CAA2C;KACxD,EACD;QACE,YAAY,EACV,kWAAkW;KACrW,CACF,CAAC;IACF,MAAM,MAAM,GAAG,IAAI,WAAW,CAAC,OAAO,CAAC,MAAM,EAAE,OAAO,CAAC,KAAK,CAAC,CAAC;IAC9D,MAAM,MAAM,GAAG,OAAO,CAAC,YAAY,IAAI,gBAAgB,CAAC;IACxD,MAAM,OAAO,GAAG,OAAO,CAAC,OAAO,IAAI,eAAe,CAAC;IAEnD,KAAK,MAAM,MAAM,IAAI,OAAO,EAAE,CAAC;QAC7B,IAAI,CAAC,OAAO,CAAC,MAAM,CAAC,QAAQ,CAAC,GAAG,CAAC,MAAM,CAAC,EAAE,CAAC;YAAE,SAAS;QACtD,mBAAmB,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;QACpC,MAAM,CAAC,QAAQ,CAAC,MAAM,EAAE,EAAE,MAAM,EAAE,MAAM,EAAE,OAAO,CAAC,MAAM,EAAE,CAAC,CAAC;IAC9D,CAAC;IAED,MAAM,CAAC,gBAAgB,CACrB,UAAU,EACV,kBAAkB,EAClB;QACE,KAAK,EAAE,wBAAwB;QAC/B,WAAW,EAAE,wEAAwE;QACrF,QAAQ,EAAE,kBAAkB;KAC7B,EACD,KAAK,EAAE,GAAG,EAAE,KAAK,EAAE,EAAE;QACnB,IAAI,CAAC;YACH,MAAM,QAAQ,GAAG,MAAM,MAAM,CAAC,YAAY,CAAC,EAAE,IAAI,EAAE,CAAC,EAAE,QAAQ,EAAE,GAAG,EAAE,EAAE,KAAK,CAAC,MAAM,CAAC,CAAC;YACrF,OAAO;gBACL,QAAQ,EAAE;oBACR;wBACE,GAAG,EAAE,GAAG,CAAC,IAAI;wBACb,QAAQ,EAAE,kBAAkB;wBAC5B,IAAI,EAAE,IAAI,CAAC,SAAS,CAAC,QAAQ,CAAC;qBAC/B;iBACF;aACF,CAAC;QACJ,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,MAAM,IAAI,KAAK,CAAC,WAAW,CAAC,KAAK,CAAC,CAAC,OAAO,CAAC,CAAC;QAC9C,CAAC;IACH,CAAC,CACF,CAAC;IAEF,MAAM,CAAC,cAAc,CACnB,kBAAkB,EAClB;QACE,KAAK,EAAE,0BAA0B;QACjC,WAAW,EAAE,mEAAmE;QAChF,UAAU,EAAE;YACV,SAAS,EAAE,CAAC;iBACT,MAAM,EAAE;iBACR,IAAI,EAAE;iBACN,QAAQ,EAAE;iBACV,QAAQ,CAAC,8DAA8D,CAAC;YAC3E,SAAS,EAAE,CAAC;iBACT,MAAM,EAAE;iBACR,GAAG,CAAC,KAAK,CAAC;iBACV,QAAQ,EAAE;iBACV,QAAQ,CAAC,qDAAqD,CAAC;SACnE;KACF,EACD,CAAC,EAAE,SAAS,EAAE,SAAS,EAAE,EAAE,EAAE,CAAC,CAAC;QAC7B,QAAQ,EAAE;YACR;gBACE,IAAI,EAAE,MAAM;gBACZ,OAAO,EAAE;oBACP,IAAI,EAAE,MAAM;oBACZ,IAAI,EAAE;wBACJ,WAAW,SAAS,CAAC,CAAC,CAAC,WAAW,SAAS,EAAE,CAAC,CAAC,CAAC,4BAA4B,GAAG;wBAC/E,SAAS;4BACP,CAAC,CAAC,cAAc,SAAS,GAAG;4BAC5B,CAAC,CAAC,kDAAkD;wBACtD,8CAA8C;wBAC9C,gHAAgH;wBAChH,yFAAyF;qBAC1F,CAAC,IAAI,CAAC,GAAG,CAAC;iBACZ;aACF;SACF;KACF,CAAC,CACH,CAAC;IAEF,OAAO,MAAM,CAAC;AAChB,CAAC"}

package/dist/time.d.ts

@@ -0,0 +1,6 @@
+export type TimeInput = number | string;
+export declare function parseTimeRange(start: TimeInput, end: TimeInput, maxRangeDays: number): {
+    startAt: number;
+    endAt: number;
+};
+//# sourceMappingURL=time.d.ts.map

package/dist/time.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"time.d.ts","sourceRoot":"","sources":["../src/time.ts"],"names":[],"mappings":"AAEA,MAAM,MAAM,SAAS,GAAG,MAAM,GAAG,MAAM,CAAC;AAgDxC,wBAAgB,cAAc,CAC5B,KAAK,EAAE,SAAS,EAChB,GAAG,EAAE,SAAS,EACd,YAAY,EAAE,MAAM,GACnB;IAAE,OAAO,EAAE,MAAM,CAAC;IAAC,KAAK,EAAE,MAAM,CAAA;CAAE,CAapC"}

package/dist/time.js

@@ -0,0 +1,51 @@
+import { UmamiError } from "./api/errors.js";
+const DATE_ONLY = /^\d{4}-\d{2}-\d{2}$/;
+const HAS_TIMEZONE = /(Z|[+-]\d{2}:?\d{2})$/i;
+function assertCalendarDate(value) {
+    const match = /^(\d{4})-(\d{2})-(\d{2})(?:T|$)/.exec(value);
+    if (!match)
+        return;
+    const [, yearText, monthText, dayText] = match;
+    const year = Number(yearText);
+    const month = Number(monthText);
+    const day = Number(dayText);
+    const date = new Date(Date.UTC(year, month - 1, day));
+    if (date.getUTCFullYear() !== year ||
+        date.getUTCMonth() !== month - 1 ||
+        date.getUTCDate() !== day) {
+        throw new UmamiError("VALIDATION_ERROR", "The supplied date or timestamp is invalid.");
+    }
+}
+function parseTimestamp(value, edge) {
+    if (typeof value === "number") {
+        if (!Number.isSafeInteger(value) || value < 0 || !Number.isFinite(new Date(value).getTime())) {
+            throw new UmamiError("VALIDATION_ERROR", "Timestamps must be positive integer milliseconds.");
+        }
+        return value;
+    }
+    const trimmed = value.trim();
+    assertCalendarDate(trimmed);
+    const normalized = DATE_ONLY.test(trimmed)
+        ? `${trimmed}T${edge === "start" ? "00:00:00.000" : "23:59:59.999"}Z`
+        : trimmed;
+    if (!DATE_ONLY.test(trimmed) && !HAS_TIMEZONE.test(trimmed)) {
+        throw new UmamiError("VALIDATION_ERROR", "Date-times must include Z or an explicit UTC offset; date-only values are interpreted in UTC.");
+    }
+    const timestamp = Date.parse(normalized);
+    if (!Number.isFinite(timestamp)) {
+        throw new UmamiError("VALIDATION_ERROR", "The supplied date or timestamp is invalid.");
+    }
+    return timestamp;
+}
+export function parseTimeRange(start, end, maxRangeDays) {
+    const startAt = parseTimestamp(start, "start");
+    const endAt = parseTimestamp(end, "end");
+    if (startAt > endAt) {
+        throw new UmamiError("VALIDATION_ERROR", "start must be earlier than or equal to end.");
+    }
+    if (endAt - startAt > maxRangeDays * 86_400_000) {
+        throw new UmamiError("VALIDATION_ERROR", `The requested range exceeds the configured maximum of ${maxRangeDays} days.`);
+    }
+    return { startAt, endAt };
+}
+//# sourceMappingURL=time.js.map

package/dist/time.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"time.js","sourceRoot":"","sources":["../src/time.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,UAAU,EAAE,MAAM,iBAAiB,CAAC;AAI7C,MAAM,SAAS,GAAG,qBAAqB,CAAC;AACxC,MAAM,YAAY,GAAG,wBAAwB,CAAC;AAE9C,SAAS,kBAAkB,CAAC,KAAa;IACvC,MAAM,KAAK,GAAG,iCAAiC,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;IAC5D,IAAI,CAAC,KAAK;QAAE,OAAO;IACnB,MAAM,CAAC,EAAE,QAAQ,EAAE,SAAS,EAAE,OAAO,CAAC,GAAG,KAAK,CAAC;IAC/C,MAAM,IAAI,GAAG,MAAM,CAAC,QAAQ,CAAC,CAAC;IAC9B,MAAM,KAAK,GAAG,MAAM,CAAC,SAAS,CAAC,CAAC;IAChC,MAAM,GAAG,GAAG,MAAM,CAAC,OAAO,CAAC,CAAC;IAC5B,MAAM,IAAI,GAAG,IAAI,IAAI,CAAC,IAAI,CAAC,GAAG,CAAC,IAAI,EAAE,KAAK,GAAG,CAAC,EAAE,GAAG,CAAC,CAAC,CAAC;IACtD,IACE,IAAI,CAAC,cAAc,EAAE,KAAK,IAAI;QAC9B,IAAI,CAAC,WAAW,EAAE,KAAK,KAAK,GAAG,CAAC;QAChC,IAAI,CAAC,UAAU,EAAE,KAAK,GAAG,EACzB,CAAC;QACD,MAAM,IAAI,UAAU,CAAC,kBAAkB,EAAE,4CAA4C,CAAC,CAAC;IACzF,CAAC;AACH,CAAC;AAED,SAAS,cAAc,CAAC,KAAgB,EAAE,IAAqB;IAC7D,IAAI,OAAO,KAAK,KAAK,QAAQ,EAAE,CAAC;QAC9B,IAAI,CAAC,MAAM,CAAC,aAAa,CAAC,KAAK,CAAC,IAAI,KAAK,GAAG,CAAC,IAAI,CAAC,MAAM,CAAC,QAAQ,CAAC,IAAI,IAAI,CAAC,KAAK,CAAC,CAAC,OAAO,EAAE,CAAC,EAAE,CAAC;YAC7F,MAAM,IAAI,UAAU,CAAC,kBAAkB,EAAE,mDAAmD,CAAC,CAAC;QAChG,CAAC;QACD,OAAO,KAAK,CAAC;IACf,CAAC;IAED,MAAM,OAAO,GAAG,KAAK,CAAC,IAAI,EAAE,CAAC;IAC7B,kBAAkB,CAAC,OAAO,CAAC,CAAC;IAC5B,MAAM,UAAU,GAAG,SAAS,CAAC,IAAI,CAAC,OAAO,CAAC;QACxC,CAAC,CAAC,GAAG,OAAO,IAAI,IAAI,KAAK,OAAO,CAAC,CAAC,CAAC,cAAc,CAAC,CAAC,CAAC,cAAc,GAAG;QACrE,CAAC,CAAC,OAAO,CAAC;IACZ,IAAI,CAAC,SAAS,CAAC,IAAI,CAAC,OAAO,CAAC,IAAI,CAAC,YAAY,CAAC,IAAI,CAAC,OAAO,CAAC,EAAE,CAAC;QAC5D,MAAM,IAAI,UAAU,CAClB,kBAAkB,EAClB,+FAA+F,CAChG,CAAC;IACJ,CAAC;IACD,MAAM,SAAS,GAAG,IAAI,CAAC,KAAK,CAAC,UAAU,CAAC,CAAC;IACzC,IAAI,CAAC,MAAM,CAAC,QAAQ,CAAC,SAAS,CAAC,EAAE,CAAC;QAChC,MAAM,IAAI,UAAU,CAAC,kBAAkB,EAAE,4CAA4C,CAAC,CAAC;IACzF,CAAC;IACD,OAAO,SAAS,CAAC;AACnB,CAAC;AAED,MAAM,UAAU,cAAc,CAC5B,KAAgB,EAChB,GAAc,EACd,YAAoB;IAEpB,MAAM,OAAO,GAAG,cAAc,CAAC,KAAK,EAAE,OAAO,CAAC,CAAC;IAC/C,MAAM,KAAK,GAAG,cAAc,CAAC,GAAG,EAAE,KAAK,CAAC,CAAC;IACzC,IAAI,OAAO,GAAG,KAAK,EAAE,CAAC;QACpB,MAAM,IAAI,UAAU,CAAC,kBAAkB,EAAE,6CAA6C,CAAC,CAAC;IAC1F,CAAC;IACD,IAAI,KAAK,GAAG,OAAO,GAAG,YAAY,GAAG,UAAU,EAAE,CAAC;QAChD,MAAM,IAAI,UAAU,CAClB,kBAAkB,EAClB,yDAAyD,YAAY,QAAQ,CAC9E,CAAC;IACJ,CAAC;IACD,OAAO,EAAE,OAAO,EAAE,KAAK,EAAE,CAAC;AAC5B,CAAC"}

package/dist/version.d.ts

@@ -0,0 +1,2 @@
+export declare const VERSION = "0.1.0";
+//# sourceMappingURL=version.d.ts.map

package/dist/version.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"version.d.ts","sourceRoot":"","sources":["../src/version.ts"],"names":[],"mappings":"AAAA,eAAO,MAAM,OAAO,UAAU,CAAC"}

package/dist/version.js

@@ -0,0 +1,2 @@
+export const VERSION = "0.1.0";
+//# sourceMappingURL=version.js.map

package/dist/version.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"version.js","sourceRoot":"","sources":["../src/version.ts"],"names":[],"mappings":"AAAA,MAAM,CAAC,MAAM,OAAO,GAAG,OAAO,CAAC"}

package/package.json

@@ -0,0 +1,78 @@
+{
+  "name": "umami-compass",
+  "version": "0.1.0",
+  "description": "A secure, read-only MCP server for Umami Analytics 3.2+ — Cloud and self-hosted",
+  "license": "MIT",
+  "author": "webcredo",
+  "homepage": "https://github.com/webcredo/umami-compass#readme",
+  "bugs": {
+    "url": "https://github.com/webcredo/umami-compass/issues"
+  },
+  "repository": {
+    "type": "git",
+    "url": "git+https://github.com/webcredo/umami-compass.git"
+  },
+  "mcpName": "io.github.webcredo/umami-compass",
+  "type": "module",
+  "sideEffects": false,
+  "bin": {
+    "umami-compass": "./dist/cli.js"
+  },
+  "main": "./dist/index.js",
+  "types": "./dist/index.d.ts",
+  "exports": {
+    ".": {
+      "types": "./dist/index.d.ts",
+      "import": "./dist/index.js"
+    }
+  },
+  "files": [
+    "dist",
+    "README.md",
+    "LICENSE",
+    "SECURITY.md",
+    "server.json"
+  ],
+  "scripts": {
+    "build": "tsc -p tsconfig.build.json",
+    "check": "pnpm lint && pnpm typecheck && pnpm test && pnpm build",
+    "dev": "tsx src/cli.ts",
+    "lint": "biome check .",
+    "lint:fix": "biome check --write .",
+    "prepack": "pnpm check",
+    "smoke:package": "node scripts/smoke-package.mjs",
+    "start": "node dist/cli.js",
+    "test": "vitest run",
+    "test:watch": "vitest",
+    "typecheck": "tsc --noEmit"
+  },
+  "engines": {
+    "node": ">=22"
+  },
+  "keywords": [
+    "analytics",
+    "core-web-vitals",
+    "heatmaps",
+    "mcp",
+    "model-context-protocol",
+    "privacy",
+    "self-hosted",
+    "umami"
+  ],
+  "publishConfig": {
+    "access": "public",
+    "provenance": true
+  },
+  "dependencies": {
+    "@modelcontextprotocol/sdk": "^1.29.0",
+    "zod": "^4.4.3"
+  },
+  "devDependencies": {
+    "@biomejs/biome": "^2.4.12",
+    "@types/node": "^22.5.4",
+    "tsx": "^4.21.0",
+    "typescript": "^5.9.3",
+    "vitest": "^4.1.10"
+  },
+  "packageManager": "pnpm@11.9.0"
+}

package/server.json

@@ -0,0 +1,80 @@
+{
+  "$schema": "https://static.modelcontextprotocol.io/schemas/2025-12-11/server.schema.json",
+  "name": "io.github.webcredo/umami-compass",
+  "title": "Umami Compass",
+  "description": "Secure Umami Analytics MCP server for Cloud and self-hosted deployments",
+  "version": "0.1.0",
+  "websiteUrl": "https://github.com/webcredo/umami-compass",
+  "repository": {
+    "url": "https://github.com/webcredo/umami-compass",
+    "source": "github",
+    "id": "1298894734"
+  },
+  "packages": [
+    {
+      "registryType": "npm",
+      "registryBaseUrl": "https://registry.npmjs.org",
+      "identifier": "umami-compass",
+      "version": "0.1.0",
+      "runtimeHint": "npx",
+      "transport": {
+        "type": "stdio"
+      },
+      "environmentVariables": [
+        {
+          "name": "UMAMI_API_KEY",
+          "description": "Umami Cloud or client API key",
+          "isSecret": true,
+          "isRequired": false
+        },
+        {
+          "name": "UMAMI_ACCESS_TOKEN",
+          "description": "Existing self-hosted Bearer token",
+          "isSecret": true,
+          "isRequired": false
+        },
+        {
+          "name": "UMAMI_USERNAME",
+          "description": "Self-hosted Umami username",
+          "isRequired": false
+        },
+        {
+          "name": "UMAMI_PASSWORD",
+          "description": "Self-hosted Umami password",
+          "isSecret": true,
+          "isRequired": false
+        },
+        {
+          "name": "UMAMI_URL",
+          "description": "Self-hosted Umami instance origin",
+          "isRequired": false,
+          "placeholder": "https://analytics.example.com"
+        },
+        {
+          "name": "UMAMI_API_URL",
+          "description": "Optional exact Umami API root for a reverse proxy",
+          "isRequired": false,
+          "placeholder": "https://analytics.example.com/custom/api"
+        },
+        {
+          "name": "UMAMI_WEBSITE_IDS",
+          "description": "Optional comma-separated website UUID allowlist",
+          "isRequired": false
+        },
+        {
+          "name": "UMAMI_TOOLSETS",
+          "description": "Comma-separated toolsets or all",
+          "isRequired": false,
+          "default": "core",
+          "placeholder": "core,events,sessions,performance,reports,revenue,replay,heatmaps"
+        },
+        {
+          "name": "UMAMI_MAX_RESPONSE_BYTES",
+          "description": "Maximum decoded upstream JSON response size in bytes",
+          "isRequired": false,
+          "default": "10485760"
+        }
+      ]
+    }
+  ]
+}