Lists all Google Analytics 4 properties the account can access (name + numeric property ID). You need the ID for ga4_run_report / ga4_realtime_report.

GA4 core report (Data API runReport). Example metrics: sessions, totalUsers, newUsers, screenPageViews, conversions, engagementRate, averageSessionDuration, bounceRate. Example dimensions: date, pagePath, pageTitle, sessionDefaultChannelGroup, sessionSource, sessionMedium, country, deviceCategory, landingPage.

GA4 realtime report (runRealtimeReport, last ~30 min). metrics e.g. ['activeUsers']; dimensions e.g. ['unifiedScreenName','country','deviceCategory'].

Lists all Google Tag Manager accounts and their containers (publicId GTM-XXXX, numeric containerId, web/server). You need accountId + containerId for gtm_export_container.

Reads the currently published (live) version of a GTM container: overview of all tags, triggers and variables — ideal for tracking audits. Requires accountId and containerId (from gtm_list_accounts). With containerVersionId, an older version (from gtm_list_versions) instead, e.g. before a rollback.

Shows which refresh token is active (write / read-only) and which OAuth scopes it has — first check when a write tool fails with 403.

Lists the data streams of a property (web streams with measurement ID G-XXXX and URL).

Lists the events of a property marked as key events (formerly conversions).

Lists all custom dimensions and custom metrics of a property.

Lists the workspaces of a container. You need workspaceId for all GTM write tools.

Shows the changes and conflicts of a workspace compared to the live version — compact (kind of change, type, ID, name). Check before gtm_create_version. full=true returns the complete entities incl. code.

Returns the complete JSON objects (incl. parameter, fingerprint) of an entity type in the workspace — template for changing via gtm_save_entity.

Backs up the complete configuration of a property (settings, data streams incl. enhanced measurement, key events, custom dimensions/metrics, data retention, links) as a local JSON file. GA4 has no versions — this is the state to restore from. Read the content via backup_read.

Who changed what on the property and when (including in the GA4 UI), incl. state before/after. Times as RFC3339, e.g. '2026-09-01T00:00:00Z'. Further pages via pageToken.

Backs up a complete workspace (all tags, triggers, variables, folders, templates, built-in variables) as a local JSON file — including unsaved changes that GTM itself does not version yet.

Backs up a container version (default: the live version) completely as a local JSON file.

Lists the local snapshots (newest first). id = GA4 property ID or GTM '-'.

Reads a snapshot (path from backup_list or the backup field of a write action) — basis for comparison or restoring.

Compiles the workspace as a trial, without a version and without publishing anything. Returns only compilerError + number of tags/triggers/variables. On compilerError it searches for the cause itself (likelyCauses).

Checks all tags, triggers and variables in the workspace: JavaScript in Custom HTML/Custom JS (ES5 strict, incl. functions in blocks) and whether every {{Variable}} exists. Returns name, ID, line and column per problem.

Shows the data redaction settings (email addresses, URL parameters) of the web data streams of a property (v1alpha).

Lists the dimensions and metrics that ga4_run_report knows for this property, incl. custom ones (customEvent:…, customUser:…). Use before a report instead of guessing API names. Without a filter only the apiNames; with search (substring in apiName, uiName, description), category or customOnly, uiName, category and metric type are added.

Checks whether the dimensions and metrics fit together in one ga4_run_report (not every combination is allowed). compatible=false → requested shows which field is the problem. listAddable=true additionally returns all fields that can still be added.

Funnel analysis (Data API v1alpha runFunnelReport): how many users reach step 1, 2, 3 … and where they drop off. Returns activeUsers, funnelStepCompletionRate, funnelStepAbandonments, funnelStepAbandonmentRate per step. A step = eventName (optionally urlContains on page_location) or a raw FunnelFilterExpression. Example: [{"name":"Landing page","eventName":"page_view","urlContains":"/heat-pump"},{"name":"Form","eventName":"form_start"},{"name":"Lead","eventName":"generate_lead"}].

Lists the annotations of a property that GA4 shows in reports as markers: e.g. relaunch, GTM publish, campaign start. Newest first.

Lists the container versions (newest first) with name, number of tags/triggers/variables and a live=true marker. Basis for a rollback: view an older version via gtm_export_container (containerVersionId), then gtm_publish_version.

Returns the GTM install code of a container (head snippet and noscript part for the body), e.g. for onboarding or to check the installation on the website.

Finds the container with accountId and containerId for a public ID: GTM-XXXX (container ID) or a linked destination ID such as G-XXXX or AW-123456789.

Marks an event as a key event (formerly conversion), e.g. 'generate_lead'.

Creates a custom dimension for an event/user/item parameter.

Creates a custom metric (event scope) for a numeric event parameter.

Arbitrary call to the GA4 Admin API (analyticsadmin.googleapis.com) for anything without its own tool — e.g. PATCH 'properties/123/dataRetentionSettings?updateMask=eventDataRetention', DELETE 'properties/123/keyEvents/456', POST 'properties/123/customDimensions/789:archive', POST 'properties/123/dataStreams/111/measurementProtocolSecrets'. Path relative to the API version. Without confirm=true, DELETE only shows the current state of the resource and deletes nothing.

Creates an annotation that GA4 shows in reports as a marker: e.g. 'Relaunch', 'GTM: Consent Mode v2 live', 'Campaign start'. One day (date) or a range (date + endDate). The color ORANGE is reserved for Google. Delete/change: ga4_admin_request (v1alpha).

Creates a new workspace — always bundle changes in a separate workspace, not in the default workspace of the live site.

Without entityId: creates the entity (POST). With entityId: replaces it completely (PUT) — fetch it first via gtm_list_entities, change it and send it back in full; if entity.fingerprint is included, GTM aborts if it was changed in the meantime. Example GA4 event tag: {"name":"GA4 – generate_lead","type":"gaawe","parameter":[{"type":"template","key":"eventName","value":"generate_lead"},{"type":"template","key":"measurementIdOverride","value":"G-XXXX"}],"firingTriggerId":["12"]}. Pre-check: JavaScript in Custom HTML tags and Custom JS variables must be ES5 strict (no let/const/arrow, no function declaration in try/if/for), every {{Variable}} must exist in the workspace.

Resets an entity in the workspace to the state of the live version. An entity newly created in the workspace is removed in the process.

Changes the data redaction of a web data stream: email addresses and/or the named URL parameters are redacted before GA4 stores them. Takes effect immediately and only for new data. Only the specified fields are changed.

Deletes an entity from the workspace (live only after version + publish). Two steps: without confirm only a preview (name, type and what still references it, e.g. tags on a trigger), with confirm=true it is deleted.

Pulls changes published in the meantime (e.g. from another workspace or the GTM UI) into the workspace. Needed when gtm_workspace_status or gtm_create_version reports conflicts or an outdated state. Then resolve conflicts with gtm_resolve_conflict.

Resolves a merge conflict after gtm_sync_workspace: keep='workspace' keeps your own change, keep='base' takes the newer published state. type and id as in gtm_workspace_status / gtm_sync_workspace (e.g. type 'tag', id '42').

Imports a tag or variable template from the GTM community gallery into the workspace (e.g. consent banners like Cookiebot, usercentrics or vendor pixels). galleryOwner/galleryRepository = GitHub owner and repo of the template (shown on the gallery page at tagmanager.google.com/gallery). acknowledgePermissions=true confirms the template's permissions (loading scripts, setting cookies …); review them first.

Enables built-in variables in the workspace, e.g. ['clickUrl','clickText','formId','pageUrl'].

Creates a container version from the workspace (NOT live yet). Returns containerVersionId for gtm_publish_version; compilerError=true means: the workspace has errors, do not publish anything.

Publishes a container version — goes live on the live website immediately. Two steps: without confirm only a preview (version, current live version, added/removed/changed tags, triggers, variables, rollback yes/no). confirm=true only after explicit approval by a human. Rollback = publish an older version from gtm_list_versions.

Arbitrary call to the Tag Manager API v2 (www.googleapis.com/tagmanager/v2) for anything without its own tool — e.g. GET 'accounts/1/containers/2/versions/5', POST 'accounts/1/containers/2/workspaces/3:sync', POST 'accounts/1/containers/2/workspaces/3/templates'. Path relative to /tagmanager/v2. Without confirm=true, DELETE only shows the current state of the resource and deletes nothing. Publishing only via gtm_publish_version.