rybbit

What's new in v2.8.0

1. MCP server - Visit to https://rybbit.com/docs/mcp for more details
2. User identification overhaul - Sessions are now keyed per identified user, so people sharing an IP and browser (corporate proxies, VPNs, office networks) no longer collapse into one session. You can also identify users directly from the dashboard now.
3. Bot detection improvements - Client-side signals now have less false positive detections.
4. More traffic exclusions - Exclude traffic by ASN and by query parameters
5. Goals and funnels - Autocapture (button clicks, form events) events now can be used for goals and sessions
6. API - You can now create organization-scoped API keys
7. Tracking - Visitors behind rotating datacenter egress (corporate proxies, Cloudflare WARP, iCloud Private Relay) kept splitting into phantom users as their IP changed mid-visit. Rybbit now buckets IPs for identity and re-attaches an unambiguously-matching fingerprint to its previous identity.

Other improvements

• The live counter counts people rather than active sessions
• Multi-site rollup totals no longer double-count visitors active on more than one day
• Anonymous user profiles no longer show the activity of identified users sharing that device fingerprint
• Embed widgets load under /widget/ with hex site IDs
• Click tracking is throttled to cut duplicate event noise
• Structured request logging with automatic redaction of sensitive fields
• Docker Compose binds service ports to localhost by default
• Increased backend test coverage
• Fixes: event labels passed to translations, session list crash when no site is selected, inconsistent team-based site access, and a server image crash from the @rybbit/shared symlink