把 GSC 和 GA4 接进 AI：NAS 上跑 MCP 的四个坑

1
# 内网 GSC + GA4 MCP，局域网内任意 MCP 客户端通过 URL 接入
2
# 必改：两处 GSA_KEY_JSON（服务账号 JSON 全文）、GOOGLE_PROJECT_ID
3
# 按需改：宿主机端口 18001 / 18002；代理地址（国内访问 googleapis 必须走代理）
4
# 不用改：其余全部
5
# 密钥通过环境变量传入，启动时写到容器内 /tmp/sa.json，不挂载任何文件
6
# 接入地址：http://NAS的IP:18001/mcp（GSC）  http://NAS的IP:18002/mcp（GA4）
7

8
services:
9
  gsc-mcp:
10
    image: supercorp/supergateway:latest
11
    container_name: gsc-mcp
12
    restart: unless-stopped
13
    entrypoint: ["sh", "-c"]
14
    command:
15
      - |
16
        printf '%s' "$$GSA_KEY_JSON" > /tmp/sa.json && exec supergateway --stdio "npx -y mcp-server-gsc" --outputTransport streamableHttp --stateful --port 8000 --streamableHttpPath /mcp
17
    ports:
18
      - "18001:8000"
19
    environment:
20
      GOOGLE_APPLICATION_CREDENTIALS: /tmp/sa.json
21
      HTTP_PROXY: http://192.168.1.10:10809
22
      HTTPS_PROXY: http://192.168.1.10:10809
23
      NO_PROXY: localhost,127.0.0.1
24
      GSA_KEY_JSON: |  # 必改：把服务账号 JSON 全文粘在下面，保持缩进
25
        {"type": "service_account", "project_id": "...", "private_key": "...", "client_email": "..."}
26
    healthcheck:
27
      test: ["CMD", "node", "-e", "require('net').connect(8000,'127.0.0.1').on('connect',()=>process.exit(0)).on('error',()=>process.exit(1))"]
28
      interval: 30s
29
      timeout: 5s
30
      retries: 3
31
      start_period: 60s
32

33
  ga4-mcp:
34
    image: ghcr.io/astral-sh/uv:python3.12-bookworm-slim
35
    container_name: ga4-mcp
36
    restart: unless-stopped
37
    depends_on:
38
      - gsc-mcp
39
    entrypoint: ["sh", "-c"]
40
    command:
41
      - |
42
        printf '%s' "$$GSA_KEY_JSON" > /tmp/sa.json && exec uvx --with 'mcp<2' mcp-proxy --host=0.0.0.0 --port=8096 --pass-environment -- uvx analytics-mcp
43
    ports:
44
      - "18002:8096"
45
    environment:
46
      GOOGLE_APPLICATION_CREDENTIALS: /tmp/sa.json
47
      GOOGLE_PROJECT_ID:  # 必改：谷歌云项目 ID
48
      HTTP_PROXY: http://192.168.1.10:10809
49
      HTTPS_PROXY: http://192.168.1.10:10809
50
      https_proxy: http://192.168.1.10:10809
51
      NO_PROXY: localhost,127.0.0.1
52
      no_proxy: localhost,127.0.0.1
53
      GSA_KEY_JSON: |  # 必改：同上，粘同一份 JSON
54
        {"type": "service_account", "project_id": "...", "private_key": "...", "client_email": "..."}
55
    volumes:
56
      - ./data/uv-cache:/root/.cache/uv
57
    healthcheck:
58
      test: ["CMD", "python", "-c", "import socket;socket.create_connection(('127.0.0.1',8096),3)"]
59
      interval: 30s
60
      timeout: 5s
61
      retries: 3
62
      start_period: 120s