What can AI agents do with Amplitude through Ferentin?

Ferentin exposes 42 Amplitude MCP tools to your AI agents, grouped as Discover (3 tools), Access (19 tools), Manage (6 tools) and Collaborate (2 tools). Every call is checked against your Ferentin policies before it reaches Amplitude.

How is Amplitude access secured?

Requests through the Amplitude integration are covered by OAuth 2.0 consent, granular scope selection and audit logging. These controls are applied by Ferentin, not by Amplitude, so they hold across every connected agent.

What permissions does the Amplitude integration require?

The Amplitude integration requests 3 OAuth 2.0 scopes: mcp:read (read access); mcp:write (elevated access); offline_access

How do I connect Amplitude to Ferentin?

Open the Ferentin admin console, add Amplitude as a new connection and authenticate with OAuth 2.0. You then choose which permissions and which tools your agents may use, and the connection goes live for everyone covered by your policies.

Is the Amplitude integration generally available?

Yes. The Amplitude integration is generally available on Ferentin, including the free tier.

Amplitude

Generally Available

After OAuth2 authorization, an AI agent can run event and funnel queries, inspect cohorts, and pull behavioral metrics to answer product-usage questions in natural language.

Product Analytics
Behavioral Data
Cohorts

Configure Amplitude Browse the 42 tools

Authentication: OAuth 2.0
Authorization: Enterprise-managed
Hosting: Vendor-hosted endpoint
Required scopes: 3

How it works

Every agent request passes through Ferentin policy before it reaches Amplitude.

AI agentAsks for something
Ferentin policies
- OAuth 2.0 consent
- Granular scope selection
- Audit logging
Amplitude MCP serverAuthorized connection
Governed resultMasked, logged, returned

What agents can do

42 tools · you choose which ones agents may call

Search and browse what exists, without opening the content itself.

Querying Amplitude data
Searching content entities
Searching data taxonomy

Permissions requested

The OAuth 2.0 scopes Amplitude asks you to approve when you connect.

Scope	Access
mcp:read	Read
mcp:write	Elevated
offline_access	Not rated

Enterprise-Managed Authorization

Amplitude's authorization server accepts an identity assertion from your identity provider (an ID-JAG) in place of a per-user OAuth consent.

That puts access to Amplitude in your identity provider: groups and policy there decide who may reach it, rather than each person approving a consent screen.

Seen in Amplitude's OAuth authorization-server metadata on 24 Oct 2026. That says the server implements the grant; which identity providers it accepts is set up with Amplitude.

See all 13 integrations that support it

Before you connect

Amplitude's analytics MCP server is OAuth-only — there is no API-key / Bearer (agent-mode) path. Access is scoped to the connecting user's Amplitude permissions.
OAuth supports PKCE (S256) and refresh tokens (request the offline_access scope). The authorization server is co-hosted on the MCP host (mcp.amplitude.com).
Scopes: mcp:read (analyses, reads), mcp:write (mutations). Drop mcp:write for a read-only connection.
A separate read-only documentation-search server is available at https://amplitude.com/docs/api/mcp — that is NOT this analytics server.

1 more technical note

The tool catalog populates on first live connection (tools/list against the upstream).

About Amplitude

Amplitude is a product analytics platform that helps teams understand user behavior, measure engagement, and drive retention through event-based data.

Website Developer docs

Frequently asked about Amplitude

What can AI agents do with Amplitude through Ferentin?: Ferentin exposes 42 Amplitude MCP tools to your AI agents, grouped as Discover (3 tools), Access (19 tools), Manage (6 tools) and Collaborate (2 tools). Every call is checked against your Ferentin policies before it reaches Amplitude.
How is Amplitude access secured?: Requests through the Amplitude integration are covered by OAuth 2.0 consent, granular scope selection and audit logging. These controls are applied by Ferentin, not by Amplitude, so they hold across every connected agent.
What permissions does the Amplitude integration require?: The Amplitude integration requests 3 OAuth 2.0 scopes: mcp:read (read access); mcp:write (elevated access); offline_access
How do I connect Amplitude to Ferentin?: Open the Ferentin admin console, add Amplitude as a new connection and authenticate with OAuth 2.0. You then choose which permissions and which tools your agents may use, and the connection goes live for everyone covered by your policies.
Is the Amplitude integration generally available?: Yes. The Amplitude integration is generally available on Ferentin, including the free tier.