Rybbit website screenshot

Rybbit

Rybbit is an open-source, privacy-friendly web and product analytics platform positioned as a cookieless alternative to Google Analytics and Plausible. It ingests pageviews, custom events, autocaptured interactions, performance samples and JavaScript errors through a lightweight tracking script and an HTTP /api/track endpoint, and exposes a Bearer-key-authenticated Stats and Management API covering sites, sessions, users, goals, funnels, web vitals, session replays, organizations and teams. Since v2.8.0 Rybbit also runs a first-party hosted Model Context Protocol server at https://app.rybbit.io/api/mcp — 38 tools behind an OAuth 2.1 authorization server with PKCE, dynamic client registration and a 29-scope resource:action permission model — making it directly callable by AI agents. Rybbit publishes no OpenAPI. It can be self-hosted under AGPL-3.0, which ships the identical REST and MCP surface, or consumed as a managed cloud service.

Rybbit publishes 3 APIs on the APIs.io network: Analytics API, Event Tracking API, and Sessions API. Tagged areas include Analytics, Web Analytics, Product Analytics, Privacy, and Open-Source.

Rybbit’s developer surface includes authentication, engineering blog, documentation, changelog, sandbox, API reference, getting-started guide, and 40 more developer resources.

68.8/100 exemplar ▬ flat Agent 45/100 agent ready Full breakdown ↓
scored 2026-08-25 · rubric v0.14.0
AccessFreemiumSelf serveFree trial⚡ Free to try
3 APIs 1 MCP Servers
AnalyticsWeb AnalyticsProduct AnalyticsPrivacyOpen-SourceCookieless

Kin Score

Kin Score Kin Score How this is scored →
scored 2026-08-25 · rubric v0.14.0
Composite quality — 68.8/100 · exemplar
Contract Quality 13.4 / 25
Developer Ergonomics 14.6 / 20
Access Clarity 20.0 / 20
Operational Transparency 7.9 / 13
Contract Governance 3.6 / 12
Discoverability 9.3 / 10
Agent readiness — 45/100 · agent ready
Machine-Readable Contract 18 / 18
Agentic Access Contract 10 / 10
Documented Reversibility 0 / 6
MCP Server 12 / 12
Machine-Readable Auth 10 / 10
Idempotency 0 / 9
Stable Error Semantics 8 / 8
Request/Response Examples 0 / 7
Rate-Limit Signaling 7 / 7
Typed Event Surface 0 / 6
Agent Skills 5 / 5
Well-Known Catalog 0 / 4
Consent & Bot Identity 3 / 3
A2A Agent Card 0 / 8
Dry-Run / Simulate Mode 0 / 4
Delegated User Identity 6 / 6
Protected Resource Metadata 5 / 5
Registration Without a Human 6 / 6
Agentic Commerce Surface 0 / 5
Improve this rating by publishing the missing artifacts — every area above can be raised, and the full rubric is at apis.io/rating/. This rating is computed from github.com/api-evangelist/rybbit: open an issue to ask a question, or submit a pull request to add artifacts. Want it done for you? Prioritized profiling — $2,500 →

APIs 3

Individual APIs this provider publishes, each with its own machine-readable definition.

Rybbit Analytics API

Stats API for events and reporting per site.

Rybbit Event Tracking API

Public ingestion endpoint for pageviews and custom events.

Rybbit Sessions API

Session-level analytics and cohort retention.

Open Collections 5

Open, tool-agnostic API collections (OpenAPI-derived and Bruno).

API Collection

OPEN COLLECTION

Rybbit Analytics API

OPEN COLLECTION

Rybbit API

OPEN COLLECTION

MCP Servers 1

Model Context Protocol servers that expose these APIs to AI agents.

Rybbit MCP Server

Rybbit ships a first-party HOSTED (remote) Model Context Protocol server as part of the product — the same server code is in the AGPL-3.0 repository, so a self-hosted instance e...

MCP SERVER

Pricing Plans 1

Published pricing tiers and plan structures.

Rybbit Plans Pricing

5 plans

PLANS

Rate Limits 1

Documented rate limits and quota policies.

Rybbit Rate Limits

5 limits

RATE LIMITS

FinOps 1

Cost, billing, and metering signals for API financial operations.

Security Posture 4

Authentication, domain security, vulnerability disclosure, and trust-center signals.

Rybbit Authentication

http/oauth2 · 3 schemes

SECURITY

Rybbit Domain Security

TLSv1.3 · HSTS · DMARC

SECURITY

Rybbit Vulnerability Disclosure

Hackerone · security.txt · contact published

SECURITY

Rybbit Trust Center

trust center published

SECURITY

Scopes 1

OAuth scopes governing access to this provider's APIs.

Rybbit Scopes

29 scopes · authorizationCode

29 scopes

SCOPES

Agentic Access 1

Recommended x-agentic-access execution contracts for AI agents.

Rybbit Agentic Access

10 operations · 1 acting

10 operations · 1 acting

AGENTIC

Resources

Get Started 5

Portal, sign-up, and the first successful call

Documentation 2

Reference material describing how the API behaves

Agent Surfaces 5

MCP servers, agent skills, and machine-readable catalogs

Design & Contract 6

Pagination, idempotency, versioning, errors, and events

Build 5

SDKs, sample code, and the tooling you integrate with

Access & Security 8

Authentication, authorization, and security posture

Scroll for all 8

Operate 5

Status, limits, changes, and where to get help

Commercial 5

Pricing, plans, and the legal terms of use

Company 3

The organization behind the API

Other 3

Properties that don't map to a standard resource type

Source (apis.yml)

apis.yml Raw ↑
aid: rybbit
url: https://raw.githubusercontent.com/api-evangelist/rybbit/refs/heads/main/apis.yml
name: Rybbit
kind: company
description: Rybbit is an open-source, privacy-friendly web and product analytics platform positioned as a cookieless alternative
  to Google Analytics and Plausible. It ingests pageviews, custom events, autocaptured interactions, performance samples and
  JavaScript errors through a lightweight tracking script and an HTTP /api/track endpoint, and exposes a Bearer-key-authenticated
  Stats and Management API covering sites, sessions, users, goals, funnels, web vitals, session replays, organizations and
  teams. Since v2.8.0 Rybbit also runs a first-party hosted Model Context Protocol server at https://app.rybbit.io/api/mcp
  — 38 tools behind an OAuth 2.1 authorization server with PKCE, dynamic client registration and a 29-scope resource:action
  permission model — making it directly callable by AI agents. Rybbit publishes no OpenAPI. It can be self-hosted under AGPL-3.0,
  which ships the identical REST and MCP surface, or consumed as a managed cloud service.
accessModel:
  pricing: freemium
  onboarding: self-serve
  trial: true
  try_now: true
  public: false
  label: Freemium · Self-serve signup
  confidence: high
  source:
  - plans
  - authentication
  generated: '2026-07-22'
  method: derived
image: https://kinlane-images.s3.amazonaws.com/shared/apis-json/icons/rybbit.png
tags:
- Analytics
- Web Analytics
- Product Analytics
- Privacy
- Open-Source
- Cookieless
tags_raw:
- Analytics
- Web Analytics
- Product Analytics
- Privacy
- Open Source
- Cookieless
created: '2026-06-21'
modified: '2026-08-13'
specificationVersion: '0.23'
apis:
- aid: rybbit:rybbit-analytics-api
  name: Rybbit Analytics API
  description: Stats API for events and reporting per site.
  humanURL: https://rybbit.com/docs/api/getting-started
  baseURL: https://app.rybbit.io/api
  tags:
  - Analytics
  properties:
  - type: OpenAPI
    url: openapi/rybbit-analytics-api-openapi.yml
  - type: Documentation
    url: https://rybbit.com/docs/api/sending-events
  - type: Documentation
    url: https://rybbit.com/docs/script
  - type: PostmanCollection
    url: collections/rybbit.postman_collection.json
  - type: OpenCollection
    url: collections/rybbit.opencollection.json
  - type: Documentation
    url: https://rybbit.com/docs/api/getting-started
  - type: APIReference
    url: https://rybbit.com/docs/api/getting-started
  - type: Documentation
    url: https://rybbit.com/docs/api/sessions/list
- aid: rybbit:rybbit-event-tracking-api
  name: Rybbit Event Tracking API
  description: Public ingestion endpoint for pageviews and custom events.
  humanURL: https://rybbit.com/docs/api/sending-events
  baseURL: https://app.rybbit.io/api
  tags:
  - Event Tracking
  properties:
  - type: OpenAPI
    url: openapi/rybbit-event-tracking-api-openapi.yml
  - type: Documentation
    url: https://rybbit.com/docs/api/sending-events
  - type: Documentation
    url: https://rybbit.com/docs/script
  - type: PostmanCollection
    url: collections/rybbit.postman_collection.json
  - type: OpenCollection
    url: collections/rybbit.opencollection.json
  - type: Documentation
    url: https://rybbit.com/docs/api/getting-started
  - type: APIReference
    url: https://rybbit.com/docs/api/getting-started
  - type: Documentation
    url: https://rybbit.com/docs/api/sessions/list
- aid: rybbit:rybbit-sessions-api
  name: Rybbit Sessions API
  description: Session-level analytics and cohort retention.
  humanURL: https://rybbit.com/docs/api/sessions/list
  baseURL: https://app.rybbit.io/api
  tags:
  - Sessions
  properties:
  - type: OpenAPI
    url: openapi/rybbit-sessions-api-openapi.yml
  - type: Documentation
    url: https://rybbit.com/docs/api/sending-events
  - type: Documentation
    url: https://rybbit.com/docs/script
  - type: PostmanCollection
    url: collections/rybbit.postman_collection.json
  - type: OpenCollection
    url: collections/rybbit.opencollection.json
  - type: Documentation
    url: https://rybbit.com/docs/api/getting-started
  - type: APIReference
    url: https://rybbit.com/docs/api/getting-started
  - type: Documentation
    url: https://rybbit.com/docs/api/sessions/list
common:
- type: AgenticAccess
  url: agentic-access/rybbit-agentic-access.yml
- type: TrustCenter
  url: security/rybbit-trust-center.yml
- type: VulnerabilityDisclosure
  url: security/rybbit-vulnerability-disclosure.yml
- type: DomainSecurity
  url: security/rybbit-domain-security.yml
- type: Authentication
  url: authentication/rybbit-authentication.yml
- url: https://rybbit.io/blog
  type: Blog
- type: GitHubOrganization
  url: https://github.com/rybbit-io
- type: LinkedIn
  url: https://www.linkedin.com/company/rybbit
- type: Website
  url: https://www.rybbit.io
- type: Documentation
  url: https://rybbit.com/docs
- type: Plans
  url: plans/rybbit-plans-pricing.yml
- type: RateLimits
  url: rate-limits/rybbit-rate-limits.yml
- type: FinOps
  url: finops/rybbit-finops.yml
- type: WellKnown
  url: well-known/rybbit-well-known.yml
- type: SecurityTxt
  url: well-known/rybbit-security.txt
- type: MCPServer
  url: mcp/rybbit-mcp.yml
- type: ToolCrosswalk
  url: mcp/rybbit-tool-crosswalk.yml
- type: LLMsTxt
  url: llms/rybbit-llms.txt
- type: OAuthScopes
  url: scopes/rybbit-scopes.yml
- type: Conventions
  url: conventions/rybbit-conventions.yml
- type: ErrorCatalog
  url: errors/rybbit-problem-types.yml
- type: Lifecycle
  url: lifecycle/rybbit-lifecycle.yml
- type: ChangeLog
  url: changelog/rybbit-changelog.yml
- type: ChangeLog
  url: https://github.com/rybbit-io/rybbit/releases
- type: Packages
  url: packages/rybbit-packages.yml
- type: SDKs
  url: packages/rybbit-packages.yml
- type: Conformance
  url: conformance/rybbit-conformance.yml
- type: Compliance
  url: https://rybbit.com/security
- type: Security
  url: https://rybbit.com/security
- type: Sandbox
  url: sandbox/rybbit-sandbox.yml
- type: Components
  url: components/rybbit-components.yml
- type: DataModel
  url: data-model/rybbit-data-model.yml
- type: Overlay
  url: overlays/rybbit-analytics-api-overlay.yaml
- type: Overlay
  url: overlays/rybbit-sessions-api-overlay.yaml
- type: Overlay
  url: overlays/rybbit-event-tracking-api-overlay.yaml
- type: AgentSkill
  url: skills/_index.yml
- type: DeveloperPortal
  url: https://rybbit.com/docs
- type: APIReference
  url: https://rybbit.com/docs/api/getting-started
- type: GettingStarted
  url: https://rybbit.com/docs/api/getting-started
- type: Support
  url: https://rybbit.com/contact
- type: Community
  url: https://discord.gg/DEhGb4hYBj
- type: Pricing
  url: https://rybbit.com/pricing
- type: SignUp
  url: https://app.rybbit.io/signup
- type: Login
  url: https://app.rybbit.io/login
- type: TermsOfService
  url: https://rybbit.com/terms-and-conditions
- type: PrivacyPolicy
  url: https://rybbit.com/privacy
- type: SourceCode
  url: https://github.com/rybbit-io/rybbit
maintainers:
- FN: Kin Lane
  email: kin@apievangelist.com
x-enrichment:
  date: '2026-08-13'
  status: enriched
  artifacts_added: 26
  pass: local-v1

Work with this as data

Every provider here is available over the APIs.io API and to AI agents over MCP.

MCP server

One button, every client — Claude, Cursor, VS Code and the rest.

https://apis.io/mcp

Tools for providers

9 MCP tools reach this
  • find_providersBrowse and filter every provider in the catalog.
  • get_provider_artifactsEvery artifact this provider publishes, grouped by type.
  • get_provider_operationsEvery operation across all of their OpenAPIs — one call instead of parsing every spec.
  • get_provider_toolsEvery MCP tool they ship, with the operation each wraps.
  • get_provider_evidenceHow each part of their score was established. Free — the basis for a claim should not sit behind it.
  • get_provider_ratingPRO — composite, band, trend and facet scores.
  • apis_io_searchSTART HERE — APIs, providers and tags for one query, each with its total.
  • resolveTurn a domain, URL or GitHub org into the provider it belongs to.
  • find_cohortsEvery scored population of providers in the catalog.
All 92 tools

Call it yourself

curl for this page
This provider
curl "https://apis.io/api/v1/providers/rybbit"
All providers
curl "https://apis.io/api/v1/providers?limit=25"
Every operation they expose
curl "https://apis.io/api/v1/providers/rybbit/operations?limit=25"
How their score was established
curl "https://apis.io/api/v1/providers/rybbit/evidence"

Discovery needs no key. Ratings and market analysis are Pro.

Get an API key

Free tier, no email required.

A second provider on the same verified email joins the account you already have.