# Rybbit

**Canonical:** https://apis.io/providers/rybbit/  
**Website:** https://www.rybbit.io  
**APIs profiled:** 3

Rybbit is an open-source, privacy-friendly web and product analytics platform positioned as a cookieless alternative to Google Analytics and Plausible. It ingests pageviews, custom events, autocaptured interactions, performance samples and JavaScript errors through a lightweight tracking script and an HTTP /api/track endpoint, and exposes a Bearer-key-authenticated Stats and Management API covering sites, sessions, users, goals, funnels, web vitals, session replays, organizations and teams. Since v2.8.0 Rybbit also runs a first-party hosted Model Context Protocol server at https://app.rybbit.io/api/mcp — 38 tools behind an OAuth 2.1 authorization server with PKCE, dynamic client registration and a 29-scope resource:action permission model — making it directly callable by AI agents. Rybbit publishes no OpenAPI. It can be self-hosted under AGPL-3.0, which ships the identical REST and MCP surface, or consumed as a managed cloud service.

## Kin Score — 68.8 / 100 (exemplar)

Scored 2026-08-25 under rubric 0.14.0. Trend: flat (+0.0 from 68.8).

| Facet | Score |
|---|---|
| Discoverability | 92.6 |
| Contract Quality | 53.5 |
| Governance | 30.3 |
| Contract Governance | 30.3 |
| Operational Transparency | 60.5 |
| Developer Ergonomics | 73.2 |
| Commercial Clarity | 100.0 |
| Access Clarity | 100.0 |

## Agent readiness — 45.4 (agent-ready)

| Dimension | Value |
|---|---|
| Spec Presence | yes |
| Agentic Access | derived |
| Reversibility Documented | no |
| MCP Server | documented |
| Auth Clarity | served |
| Idempotency | no |
| Error Semantics | documented |
| OpenAPI Examples | no |
| Rate Limit Signal | documented |
| Event Surface Described | no |
| Agent Skills | derived |
| Well Known Catalog | no |
| Consent Identity | yes |
| Agent Card | no |
| Dry Run Mode | no |
| Delegated Identity | served |
| Protected Resource Metadata | verified |
| Dynamic Client Registration | yes |
| Agentic Commerce | no |

## Access

Freemium · Self-serve signup — onboarding: self-serve, pricing: freemium, trial: yes (confidence: high).

## APIs (3)

- **Rybbit Analytics API** — Stats API for events and reporting per site.
- **Rybbit Event Tracking API** — Public ingestion endpoint for pageviews and custom events.
- **Rybbit Sessions API** — Session-level analytics and cohort retention.

## MCP servers (1)

- **Rybbit MCP Server** — Rybbit ships a first-party HOSTED (remote) Model Context Protocol server as part of the product — the same server code is in the AGPL-3.0 repository, so a self-hosted instance e...

## Agentic access (1)

- **Rybbit Agentic Access** — 10 operations · 1 acting

## Security (4)

- **Rybbit Authentication** — http/oauth2 · 3 schemes
- **Rybbit Domain Security** — TLSv1.3 · HSTS · DMARC
- **Rybbit Vulnerability Disclosure** — Hackerone · security.txt · contact published
- **Rybbit Trust Center** — trust center published

## Plans (1)

- **Rybbit Plans Pricing**

## Tags

Analytics, Web Analytics, Product Analytics, Privacy, Open-Source, Cookieless

---

Profiled by [API Evangelist](https://apievangelist.com) and published on [APIs.io](https://apis.io/providers/rybbit/). Scores are computed from the provider's own public artifacts under a published rubric.