OpenAnalytics gates ClickHouse reads through signed envelopes

OpenAnalytics is an open-source, self-hosted analytics stack with a tracker, collector, ClickHouse, dashboard, CLI, MCP server, and a query gateway. The repository says the gateway is the only process allowed to read ClickHouse and verifies signed query envelopes. Why it matters: The stack makes its data boundaries inspectable: the collector sanitizes and rate-limits events, and the query gateway separates reads from the rest of the application. Running it still requires Docker, four DNS records, about 4 GB of RAM, and 25 GB of free disk.

Try this: Read SELF-HOSTING.md, map the four required DNS names, and run the tracker script on a test site before moving analytics or connecting revenue data.