Umami (umami.is). Use this skill for ANY Umami request — searching and reading data. Whenever a task involves Umami, use this skill instead of calling the API directly.
2 stars
0 votes
0 copies
1 view
Added September 3, 2026
ai-agentsgoshellbashgitapi
Works with
cli
api
Security analysis
C71/100
criticalPipes output to a shell interpreter
mediumUses curl or wget to download content
criticalDownloads and executes remote scripts — classic supply chain attack
Installs into .claude/skills of the current project.
Are you the author of Oo Umami?
Add the live security badge to your README. It updates with every re-scan.
[](https://www.skillsdirectory.com/skills/oomol-lab-oo-umami)
---
name: oo-umami
description: "Umami (umami.is). Use this skill for ANY Umami request — searching and reading data. Whenever a task involves Umami, use this skill instead of calling the API directly."
allowed-tools: [Bash(oo *)]
metadata:
title: "Umami"
author: "OOMOL"
version: "1.0.2"
services: ["umami"]
icon: "https://static.oomol.com/logo/third-party/umami.svg"
---
# Umami
Operate **Umami** through your OOMOL-connected account. This skill calls the `umami` connector with the [oo CLI](https://github.com/oomol-lab/oo-cli); OOMOL injects credentials server-side, so you never handle raw tokens.
## Running an action
Assume the user has already installed the oo CLI, signed in, and connected Umami. **Do not run `oo auth login` or open the connection URL proactively — just run the action.** Fall back to [First-time setup](#first-time-setup) only when a command actually fails with an auth or connection error.
**1. Inspect the contract** to get the authoritative input/output schema before building a payload:
```bash
oo connector schema "umami" --action "<action_name>"
```
**2. Run the action** with a JSON payload that matches the input schema:
```bash
oo connector run "umami" --action "<action_name>" --data '<json>' --json
```
- `--data` takes a JSON object string or `@path/to/file.json`; omit it to send `{}`.
- The response is `{ "data": ..., "meta": { "executionId": "..." } }`; the execution id lives under `meta.executionId`.
Each action is listed below with a one-line description; actions that change state carry a `[write]` or `[destructive]` tag. Before constructing `--data`, fetch the action's live schema with `oo connector schema` to get its authoritative input fields.
## Available actions
- `get_current_user` — Get the current Umami user for the configured API token.
- `get_metrics` — Get grouped Umami website metrics such as URLs, referrers, browsers, or countries.
- `get_pageviews` — Get Umami pageview and session timeseries for a website.
- `get_realtime` — Get realtime active visitor data for an Umami website.
- `get_website` — Get metadata for a single Umami website.
- `get_website_stats` — Get aggregate pageview, visitor, visit, bounce, and time statistics for a website.
- `list_events` — List tracked Umami events for a website within a time range.
- `list_websites` — List Umami websites available to the configured API token.
## Safety
- Untagged actions are reads (get / list / search) — safe to run directly.
- **Actions tagged `[write]` change Umami state — confirm the exact payload and effect with the user before running.**
- **Actions tagged `[destructive]` remove or overwrite data — always confirm the target and get explicit approval first.**
## First-time setup
These are **one-time** steps — do not repeat them on every call. Run a step only when a command fails for the matching reason.
- **`oo: command not found`** — install the oo CLI (other platforms: <https://cli.oomol.com/install-guide.md>):
```bash
curl -fsSL https://cli.oomol.com/install.sh | bash # macOS / Linux
```
```powershell
irm https://cli.oomol.com/install.ps1 | iex # Windows PowerShell
```
- **Not signed in / authentication error** — sign in to your OOMOL account once:
```bash
oo auth login
```
- **`scope_missing` / `credential_expired` / `app_not_ready` / `app_not_found`** — Umami is not connected, or the connection expired or lacks a scope. Connect once (auth type: API key) at:
```text
https://console.oomol.com/app-connections?provider=umami
```
- **HTTP 402 / `OOMOL_INSUFFICIENT_CREDIT`** — billing stop. Recharge at `https://console.oomol.com/billing/token-recharge` before retrying.
## Resources
- Umami homepage: https://umami.is