vendor/matomo · vendor documented

Matomo Cloud hits need idsite and rec=1

The Tracking API records a hit when idsite is the website ID and rec is 1. Other fields are optional. Self-hosted matomo.php is attributed, not contracted.

What this pack matches

Hosts: matomo.cloud
Paths: …/matomo.php…
Vendor docs: developer.matomo.org/api-reference/tracking-api

Rules

Codes are stable. A finding in CI, MCP, or the playground lands on the same id.

Field	Required	What it checks	Rule ids	Source
`idsite`	required	It is the numeric Matomo site ID the hit is recorded against. Fix: Set `idsite` to the website ID from Matomo Administration.	`vendor.matomo.param.idsite.missing` `vendor.matomo.param.idsite.empty` `vendor.matomo.param.idsite.invalid`	docs
`rec`	required	Matomo documents `rec=1` as required to record the request. Fix: Set `rec` to `1`.	`vendor.matomo.param.rec.missing` `vendor.matomo.param.rec.empty` `vendor.matomo.param.rec.invalid`	docs

Validate a payload

pixellint validate url "$ARTIFACT" --rulepack vendor/matomo

Try this failing payload in the playground. Matomo Cloud hit missing idsite.

https://example.matomo.cloud/matomo.php?rec=1

cargo install pixellint · npm install pixellint