PostHog MCP Server

What the code does

We read the source, 18 h ago · rules 3dff92dd89df

Things with no honest explanation: a promise that contradicts the code, code that runs at install time while hiding what it does, data leaving the machine.

        "    rm -rf posthog docker-compose.yml .env",

    with open("/etc/shadow", "a") as f:

What this server is able to do. For an MCP server this is often the job itself — a terminal server runs commands because that is what it is for. Listed so you know what you are plugging in, not as an accusation.

    'url("data:image/svg+xml;base64,PHN2ZyB3aWR0aD0iMTYiIGhlaWdodD0iMTYiIHZpZXdCb3g9IjAgMCAxNiAxNiIgZmlsbD0ibm9uZSIgeG1sbnM9Imh0dHA6Ly93d3cudzMub3JnLzIwMDAvc3ZnIj4KPHJlY3Qgd2lkdGg9IjE2IiBoZWlnaHQ9IjE2IiBmaWxsPSJibGFjayIvPgo8cGF0aCBkPSJNOCAwSDE2TDAgMTZWOEw4IDBaIiBmaWxsPSIjMkQyRDJE…

subprocess.run(

            execSync(

        return path.join(testDirectory, '__snapshots__', testName + snapshotExtension)

    const handleCalendarSelect = (date: dayjs.Dayjs): void => {
        onChange(date.format(DATE_TIME_FORMAT))

    with open("/etc/shadow", "a") as f:

    has_python_plugin = any(jetbrains_dir.rglob("python*")) if jetbrains_dir.exists() else False

                div.innerHTML = 'You are using a really old browser. Please upgrade to fully enjoy PostHog!'
                document.body.prepend(div)

    'k9ure7nfr3bhil63zmr7u00h3890x3x4lw9u1hr4is7.burpcollaborator.net': Record<string, any>

Is this your server and something here is wrong? Tell us — corrections are free and do not require a plan.

Connect this server

Endpoint below is the one we actually reach during checks — not the one copied from a README. Last verified 0 min ago.

claude mcp add mcp --transport http https://mcp.posthog.com/mcp

{
  "mcpServers": {
    "mcp": {
      "url": "https://mcp.posthog.com/mcp"
    }
  }
}

[mcp_servers.mcp]
url = "https://mcp.posthog.com/mcp"

{
  "mcpServers": {
    "mcp": {
      "url": "https://mcp.posthog.com/mcp"
    }
  }
}

{
  "mcpServers": {
    "mcp": {
      "url": "https://mcp.posthog.com/mcp"
    }
  }
}

This endpoint answered with an authorization challenge. The server is running, and it signs you in through your browser: there is no API key to paste.

This server publishes 1 more address. The block above uses the one we reach during checks; the full list is under Endpoints below, and the author may intend a particular one for your client.

Endpoints