Fluxito Community

An open-source MCP server for marketing analytics.

Connect 27 marketing and analytics platforms once, then work with them from any AI — plus tracking audits built in.

What it is

Fluxito Community gives your AI real, authenticated access to your marketing stack through the Model Context Protocol. Point Claude, ChatGPT, Cursor, Windsurf, or anything else that speaks MCP at your Fluxito server, and it can read GA4, audit GTM, compare ad spend, or query your warehouse — with your permissions, on your infrastructure.

Want more? Fluxito Cloud adds tracking plans, GTM implementation, hosted dashboards, scheduled automations and more.

Related MCP server: simba-mcp

Install

Docker (recommended — no clone)

mkdir fluxito && cd fluxito
curl -O https://raw.githubusercontent.com/digitalXperiments/fluxito-community/main/docker-compose.yml
curl -o .env https://raw.githubusercontent.com/digitalXperiments/fluxito-community/main/.env.example

# One-click in-app updates (optional but recommended)
echo "UPDATER_TOKEN=$(openssl rand -hex 32)" >> .env

# Pin secrets so encrypted tokens survive restarts/updates
docker pull ghcr.io/digitalxperiments/fluxito-community:latest
echo "APP_SECRET_KEY=$(docker run --rm ghcr.io/digitalxperiments/fluxito-community python -c 'import secrets; print(secrets.token_hex(32))')" >> .env
echo "TOKEN_ENCRYPTION_KEY=$(docker run --rm ghcr.io/digitalxperiments/fluxito-community python -c 'from cryptography.fernet import Fernet; print(Fernet.generate_key().decode())')" >> .env

docker compose up -d

Open http://localhost:8000. Update anytime from Admin → Updates, or:

docker compose pull && docker compose up -d

From source (track main / fork)

git clone https://github.com/digitalXperiments/fluxito-community.git
cd fluxito-community
cp .env.example .env
docker compose -f docker-compose.yml -f docker-compose.build.yml up -d --build

Optional in .env so you don't repeat both compose files:

COMPOSE_FILE=docker-compose.yml:docker-compose.build.yml

Updating

Release images: super-admin Admin → Updates → Update now (pulls image, recreates container, rolls back on failed health). Needs UPDATER_TOKEN in .env. Without it, use docker compose pull && docker compose up -d.

Source installs:

git pull
docker compose up -d --build   # or with both compose files if COMPOSE_FILE isn't set

Migrations run on startup (alembic upgrade head). Named volumes for Postgres/Redis persist — never docker compose down -v to update.

Air-gapped: set UPDATE_CHECKS_ENABLED=false to stop outbound GitHub version checks.

First run

Rough first-time cost: 15–25 min for Google OAuth (one app unlocks five platforms), then ~5 min to connect accounts + AI.

1. Open http://localhost:8000 → create the first admin (email + password; no email verification on self-host).

2. Admin → OAuth Apps → follow Google Cloud Setup (GA4, GTM, Ads, Search Console, BigQuery).

3. /connect → authorize the Google accounts you want the AI to use.

4. Connect an MCP client (or use the built-in Chat with your own API key under Settings → AI providers). See Connect AI with MCP and the section below.

Connecting your platforms

Start with Google when you can — one OAuth client unlocks five surfaces.

Credentials are encrypted at rest and managed in Admin → OAuth Apps after the first admin exists — not via .env.

Team access (RBAC)

Projects are multi-user. One role model covers MCP tools and the web UI.

Custom roles (Settings → User Roles):

• Tools by domain — analytics, audience, tag manager, marketing, SEO, warehouse, knowledge, analysis (read/write)

• Connections by provider — e.g. GA4 + Search Console, but not Ads

Members can hold multiple roles (union of permissions). Ungranted tools are hidden from tools/list and re-checked at execution. RBAC is off by default per project.

Configuration

Two surfaces:

1. .env / environment — bootstrap only (before DB / first login)

2. Web UI — OAuth apps, system settings, MCP, email, rate limits, etc.

Bootstrap env vars

Install commands above generate the two secrets. Platform OAuth apps are configured in the UI, never in env: Admin → OAuth Apps holds the install-wide app every project uses (paste client ID/secret → Connect lights up on /connect), and a project owner can bring the project's own app instead under Project settings → OAuth apps — its own approval, branding and API limits.

Connecting an AI client (MCP)

Endpoint: /mcp. Full guide: docs/tutorials/connect-ai-mcp.md. Optional: install Fluxito Skills so agents use tools the intended way.

Hosted / public URL

1. Add a custom MCP server in Claude, ChatGPT, Cursor, etc.

2. URL: https://your-host/mcp

3. Complete OAuth (or use a PAT for headless clients — see the tutorial)

Local via ngrok

ngrok http 8000
# set APP_BASE_URL to the https://….ngrok-free.app URL, restart app
# add https://….ngrok-free.app/mcp as the MCP connector

Update vendor OAuth redirect URIs when the public hostname changes. Free ngrok subdomains rotate on restart — keep the tunnel up while testing, or use a stable domain.

Self-hosting

Default stack: nginx (port 8000) → app (FastAPI/Gunicorn) + db + redis (+ optional updater sidecar).

MCP reverse proxy must not buffer /mcp (chunked streaming):

location /mcp {
    proxy_pass http://app:8001;
    proxy_buffering off;
    proxy_request_buffering off;
    proxy_http_version 1.1;
    proxy_set_header Connection "";
    add_header X-Accel-Buffering no always;
}

Scaling: default 4 Gunicorn workers (~2 × vCPU + 1). Plan ≥1 GB RAM for four workers.

Secrets: rotating TOKEN_ENCRYPTION_KEY without re-encrypting DB credentials permanently breaks stored connections.

Backups

Postgres is the source of truth:

docker compose exec db pg_dump -U postgres fluxito > fluxito-$(date +%F).sql

Also back up .env (especially TOKEN_ENCRYPTION_KEY). Managed Postgres snapshots + a secrets manager are recommended in production.

Common issues

curl http://localhost:8000/api/health | python -m json.tool
docker compose logs -f app
docker compose exec app alembic upgrade head
docker compose exec app alembic current

Maintenance

This community edition is a stable snapshot. It receives security fixes only — new features ship on Fluxito Cloud. Issues and PRs for bugs and security problems are welcome.

Security

Report vulnerabilities privately via GitHub Security Advisories. See SECURITY.md.

Contributing

PRs welcome — see CONTRIBUTING.md. Open an issue before large work so scope stays aligned.

License

Apache License 2.0. Copyright © 2026 Fluxito contributors. See NOTICE for third-party attributions.

Brand and platform names (Google Analytics, Meta, TikTok, Snowflake, Adobe, etc.) are trademarks of their respective owners. Fluxito is not affiliated with or endorsed by those vendors.