Facebook Analytics
ReviewAudited by ClawScan on May 1, 2026.
Overview
This looks like a coherent Facebook analytics connector, but it depends on a third-party MCP URL that acts like a password and routes analytics through Boring's service.
This skill appears purpose-aligned for read-only Facebook analytics. Before installing, make sure you trust Boring with access to your Facebook Page analytics, protect the MCP connector URL like a password, verify the permissions requested when connecting Facebook, and revoke/regenerate the token if you stop using it or suspect exposure.
Findings (3)
Artifact-based informational review of SKILL.md, metadata, install specs, static scan signals, and capability signals. ClawScan does not execute the skill or run runtime probes.
Anyone who obtains the MCP URL could potentially use the connected analytics access until the token is revoked.
The skill requires a password-like connector URL for account access. This is clearly disclosed and aligned with the Facebook analytics purpose, but it is still sensitive delegated access.
MCP Server URL (`https://boring.aiagent-me.com/mcp/t/xxxxx...`) contains an embedded authentication token. Treat it like a password
Only add the connector if you trust Boring, do not share the MCP URL, and revoke or regenerate it if it may have been exposed.
Your Facebook Page analytics requests and returned metrics are handled by a third-party service rather than staying entirely local.
The skill relies on an external MCP/service path for Facebook analytics. This is disclosed and expected for the integration, but it means account metadata and performance metrics flow through Boring's infrastructure.
Analytics queries are sent from Boring's server (Google Cloud, us-central1) to the platform's API on your behalf
Review Boring's service terms and privacy posture, and use the connector only for Pages whose analytics you are comfortable routing through that service.
You are relying on the hosted Boring connector and its documentation rather than code packaged with the skill.
The skill is instruction-only and points to a third-party hosted MCP connector rather than providing local reviewed code. This is not suspicious by itself, but the trust decision depends on the external service.
Source: unknown; Homepage: https://boring-doc.aiagent-me.com/getting-started/mcp.html
Install only from a trusted listing, confirm the MCP URL domain is correct, and review the linked documentation before connecting a Facebook Page.