Getting it into your agent
One page per mod, every tool's command on it. A separate URL per tool would split the same page into five that compete with each other.
npx skills add zackbart/connecta --skill mixpanelgit clone --depth 1 https://github.com/zackbart/connectaWrote this? Show the measurements
A badge with what this costs and how it scanned, read live from this page, so it follows the numbers instead of freezing them. Markdown for a README, HTML for a documentation site or a project page.
[](https://agentmods.dev/skills/zackbart/connecta/mixpanel)<a href="https://agentmods.dev/skills/zackbart/connecta/mixpanel"><img src="https://agentmods.dev/badge/skills/zackbart/connecta/mixpanel/github.svg" alt="Measured on agentmods" height="20"></a>Or the 80×15 button, for a site that already has a row of RSS and ATOM ones. Only the verdict fits; the numbers stay here.
<a href="https://agentmods.dev/skills/zackbart/connecta/mixpanel"><img src="https://agentmods.dev/badge/skills/zackbart/connecta/mixpanel.svg" alt="Reviewed on agentmods" width="80" height="20"></a>What it costs to keep this loaded
Counted locally with the o200k_base tokenizer, which is exact for GPT models; Claude uses its own tokenizer and its counts differ. Treat this as one consistent yardstick across the catalogue rather than a bill. Prices are per million input tokens.
| Model | Per session | Once invoked |
|---|---|---|
| Fable 5.1 | $0.00002 | $0.02135 |
| Opus 5.5 | $0.00001 | $0.00854 |
| Sonnet 5.5 | $0.00000 | $0.00427 |
| Haiku 4.5 | $0.00000 | $0.00214 |
Grade A, and why
mixpanel scanned grade A with 0 findings against 26 rules in 11 categories — prompt injection, anti-refusal, data exfiltration, privilege escalation, supply chain, agent snooping, system-prompt leakage, SSRF and excessive agency — measured today.
A static scan of the body, not an audit. Every finding is printed with the line that produced it so you can judge whether it matters here. A mod is markdown that instructs an agent; that is exactly why what it instructs is worth reading.
Nothing flagged
None of the 26 patterns this scan looks for appear in this file: no shell pipes, no recursive deletes, no credential paths, no hidden text, no instruction-override or anti-refusal phrasing, no agent-config snooping. That is not a guarantee, it is the absence of the things that are checkable.
How it starts
The opening of the file, as written. The whole thing — 53 lines — stays where its author put it; the contents beside it link to each section on GitHub.
endpoint. A project created in another residency is not reachable from here at all, so an empty result may mean wrong connector rather than no data.
- Start with
List-Organizations, then supply the returned organization id where the liveGet-Projectsschema requires it. Resolve the project and workspace, then readGet-Business-Contextbefore interpreting events or metrics. - Resolve ids before acting; never guess one.
Get-Projectsyields the project id every other call is scoped by, andList-Dashboards,List-Cohorts,List-Metrics,List-Experiments, andList-Feature-Flagsyield the ids theirGet-,Update-, andDelete-counterparts expect. - Discover names with
Get-Events,List-Properties, andGet-Property-Values; do not guess event or property spelling. Get-Business-Contextrequires eitherproject_idororganization_id. Its schema marks both optional, but the hosted tool rejects a call with neither.Get-Property-Valuesrequirespropertiesor the deprecatedpropertyalias. Event property values also requireevent; preferpropertiesand never send both property forms with conflicting values.List-Propertiesacceptsnamesorquery, never both. Use exactnamesfor known properties andqueryfor substring discovery.- One analysis is one
execute_codeprogram: fetchGet-Query-Schemaonce, run everyRun-Queryof the analysis in that program, and return the reduced table. The schema is tens of kilobytes and the same for every report type, so re-fetching it per query buys nothing. Never return rawRun-Queryoutput. - Insights, funnels, and retention answer aggregate questions. A per-user ordered event timeline, or a sequence question such as "event A with no later event B", is not answerable with
Run-Queryin a reasonable number of calls, and this hosted catalog has no per-distinct_idevent timeline —Get-User-Replays-Datacovers one user's replays with their events only where session replay is enabled and present. If the deployment exposes a Mixpanel export or activity-feed connector, use that; if it does not, tell the user the question is out of reach here rather than approximating it with hourly buckets and hundreds of empty rows. falseon a boolean property may be an absent property: Mixpanel renders a missing value asfalsein boolean breakdowns, and server-imported events often lack client-side properties entirely. Confirm the property is present withList-PropertiesorGet-Property-Valuesbefore treatingfalseas a signal, and say when a conclusion rests on that ambiguity.- Breakdown responses nest
$overalland per-segment series objects. Flatten to one row per complete breakdown combination insideexecute_codebefore returning, and drop$overallunless the question asks for the total. - Use
Get-Reportwhen the request names an existing saved report. UseRun-Queryfor a new question. - Dashboard row and cell ids are opaque. Read the full layout before editing and preserve grouping and order. Report cells need a project-local
query_id; duplicate within the same project when possible. Cross-project reconstruction needs new queries in the target project. - Query ids can expire. Build the dashboard promptly and rerun a query if its id is rejected as expired; no fixed TTL is guaranteed.
- This account's tool list is not a fixed set. Mixpanel gates parts of its MCP catalog by plan and beta enrollment — experiments, feature flags, session replay, and issue triage are the usual absentees — so search this connector for what it actually exposes rather than assuming a documented tool is here.
- Mixpanel meters MCP traffic per user per hour, shared with everything else that credential does. Reuse discovery results within a run and avoid speculative fan-out.
- An
auth_requiredfailure means this connector's Mixpanel authorization is missing or expired: runauthorize_connectorfor this connector id, then retry the same call unchanged. A rejected argument or a plan restriction comes back in Mixpanel's own words instead — read it rather than re-authorizing. - Treat every create, update, edit, merge, dismiss, duplicate, or delete operation as a write. For guest calls, classification, and routing, fetch
skills({ name: "usage" }).
What ships with it
12 files beside SKILL.md in the same directory: the scripts, references and assets a skill reads on demand. Not counted in the per-session cost; read them before you install if any of them is executable.
- api.test.ts 21 KB runs code
- contracts.fixture.json 61 KB
- drift.json 6.4 KB
- fixtures.ts 2.6 KB runs code
- index.ts 25 KB runs code
- operations.ts 4.5 KB runs code
- provider.test.ts 9.8 KB runs code
- rest.ts 28 KB runs code
- skill.generated.ts 15 KB runs code
- value-safety.candidates.json 367 B
- value-safety.node.test.ts 3.4 KB runs code
- value-safety.ts 1.6 KB runs code
What this file has done since we first saw it
Hashed on every crawl. A supply-chain change to an agent config is a question of when, not whether, so the history is kept rather than the latest state alone.
- today Changed · +21 lines bdfea3629181
- 6d ago First seen · 32 lines · 2 tokens per session scan A c537bd164349
mixpanel is a skill published in the GitHub repository zackbart/connecta (0 stars, last pushed today), licensed MIT. It adds 2 tokens to every session and 2,135 once invoked, about $0.0000 per session on Opus 5.5. A static security scan graded it A with 0 findings. No closer match exists in the catalogue, so it is treated as the original; first seen 2026-10-08.
Other skills, from other repositories
local-ai-agents
Build local-first AI agents that run entirely on a developer workstation with Microsoft Foundry Local and Qwen function-calling models. Covers Small Language Models (SLMs), the OpenAI-compatible local endpoint, sandboxed local tools, local RAG with Chroma, local MCP servers, hybrid cloud/local routing, and the…
systematic-debugging
Use when encountering any bug, test failure, or unexpected behavior, before proposing fixes.
next-cache-components-adoption
Turn on Cache Components in a Next.js app and resolve the blocking routes it surfaces. Use when the user wants to enable, adopt, or migrate to Cache Components, flip the cacheComponents flag, work through a flood of blocking-prerender / instant validation errors, run the cache-components-instant-false codemod, or…
chat-pet-sprite-creation
Use when creating or changing VS Code chat pet sprite art, sprite sheets, state animations, eye treatments, Stable/Insiders variants, or pet transitions under src/vs/workbench/contrib/chat/browser/widget/media/chatPet.
cpu-profile-analysis
Analyze V8/Chrome CPU profiles (.cpuprofile) and DevTools trace files (Trace-.json). Use when: profiling performance, investigating slow functions, comparing code paths, finding bottlenecks, analyzing timeToRequest, understanding call trees from sampling profiler data, analyzing layout/paint/rendering, investigating…
insight-error-page
Write or audit an insight-kind error page for the Next.js dev overlay. Use when creating a new errors/ .mdx page, auditing an existing one, or checking that a page matches the framework fix cards. Covers page structure, title alignment, FixCard cards with Copy prompt button, code snippets, terminology verification…