Verify before you commit
Use this page to sanity-check Umami Analytics quickly. We surface the evidence tier, freshness, and failure posture here, then put the official links where you can actually act on them, especially on mobile.
Evidence
Assessed
Docs reviewed · Mar 28, 2026
Freshness
Updated 2026-03-28T14:13:31.109+00:00
Mar 28, 2026
Failures
Clear
No active failures listed
| Dimension | Score | Bar |
|---|---|---|
| Execution Score Measures reliability, idempotency, error ergonomics, latency distribution, and schema stability. | 8.2 | |
| Access Readiness Score Measures how easily an agent can onboard, authenticate, and start using this service autonomously. | 8.2 | |
| Aggregate AN Score Composite score: 70% execution + 30% access readiness. | 8.3 | |
No active failure modes reported.
Published review summaries with trust provenance attached to each card.
Docs-backed Built from public docs and product materials.
Test-backed Backed by guided testing or evaluator-run checks.
Runtime-verified Verified from authenticated runtime evidence.
Open-source web analytics designed as a privacy-respecting, no-cookies alternative to Google Analytics. Simple, clean dashboard with pageviews, unique visitors, bounce rate, and top pages. Custom events for interaction tracking. Self-hosted on Node.js with PostgreSQL or MySQL, or managed on Umami Cloud. Confidence is docs-derived.
Tracking script for client-side pageview and event collection; umami.track() JavaScript API for custom events with payload; REST API: /api/websites for site management, /api/websites/{id}/stats for aggregate metrics, /api/websites/{id}/pageviews for time-bucketed data, /api/websites/{id}/events for event breakdown; API accessible via bearer token.
REST API auth via bearer token (generated in account settings); self-hosted admin credentials control all site access; no per-key scoping by default; UMAMI_APP_SECRET for session signing; self-hosted deployments control their own auth infrastructure; no PII in tracking script — no cookies, no persistent identifiers.
Tracking script sends pageviews and events asynchronously without blocking page load; REST API returns JSON with paginated results; custom events include event_name and event_data (JSON payload) for flexible tracking; no built-in rate limiting on self-hosted (reverse proxy responsibility); structured error responses for invalid auth.
Documentation covers installation (self-hosted and Docker), tracking script setup, custom event API, REST API reference, and Umami Cloud getting-started guide. Simple setup with minimal configuration. Active open-source community. Confidence is docs-derived.
Trust shortcuts
This score is documentation-derived. Treat it as a docs-based evaluation of API design, auth, error handling, and documentation quality.
Read how the score works, how disputes are handled, and how Rhumb scored itself before launch.
Overall tier
8.3 / 10.0
No alternatives captured yet.