Run a core report: metrics (e.g. sessions, activeUsers) by dimensions (e.g. date, country) over one or more dateRanges. (docs)
POST /v1beta/properties/{propertyId}:runReport
🟢 low
— no
Run a real-time report of active users / events in the last 30 minutes by realtime dimensions and metrics. (docs)
POST /v1beta/properties/{propertyId}:runRealtimeReport
🟢 low
— no
List the dimensions and metrics available for the property (including custom ones) to validate a report before running it. (docs)
GET /v1beta/properties/{propertyId}/metadata
🟢 low
— no
What the agent can do
None.
Connecting it
You provide: Google OAuth (Analytics read-only) + GA4 Property ID
Where to get it: Google Cloud Console → enable the Google Analytics Data API → OAuth consent screen → Credentials → Create OAuth client ID. The connecting Google account needs at least Viewer access on the GA4 property. Use the numeric Property ID (Admin → Property Settings), not the G-XXXXXXX measurement ID.
Account needed: A Google account with at least Viewer on the GA4 property, plus a Google Cloud project with the Google Analytics Data API enabled.
App registration: Create an OAuth client ID (Web application); configure the consent screen with the analytics.readonly scope, authorized domains, and redirect URIs.
Verification required: analytics.readonly is a SENSITIVE scope: production use requires Google OAuth app verification (brand verification + scope justification). No CASA security assessment is required for this read-only scope.
Testing: Unverified 'Testing' apps are capped at 100 test users with 7-day refresh-token expiry; fine for evaluation, not for production.
Limits
Standard property tokens: 200,000 core tokens/property/day and 40,000/property/hour (14,000 per project per property per hour); realtime tokens share the same 200,000/day & 40,000/hour limits; max 10 concurrent requests per property. Token cost scales with rows, dimensions/metrics, filters, and date range. HTTP 429 on quota exhaustion.