What's new in v2.8.0
MCP server - Visit to https://rybbit.com/docs/mcp for more details
User identification overhaul - Sessions are now keyed per identified user, so people sharing an IP and browser (corporate proxies, VPNs, office networks) no longer collapse into one session. You can also identify users directly from the dashboard now.
Bot detection improvements - Client-side signals now have less false positive detections.
More traffic exclusions - Exclude traffic by ASN and by query parameters
Goals and funnels - Autocapture (button clicks, form events) events now can be used for goals and sessions
API - You can now create organization-scoped API keys
Tracking - Visitors behind rotating datacenter egress (corporate proxies, Cloudflare WARP, iCloud Private Relay) kept splitting into phantom users as their IP changed mid-visit. Rybbit now buckets IPs for identity and re-attaches an unambiguously-matching fingerprint to its previous identity.
Other improvements
The live counter counts people rather than active sessions
Multi-site rollup totals no longer double-count visitors active on more than one day
Anonymous user profiles no longer show the activity of identified users sharing that device fingerprint
Embed widgets load under /widget/<hexId> with hex site IDs
Click tracking is throttled to cut duplicate event noise
Structured request logging with automatic redaction of sensitive fields
Docker Compose binds service ports to localhost by default
Increased backend test coverage
Fixes: event labels passed to translations, session list crash when no site is selected, inconsistent team-based site access, and a server image crash from the @rybbit/shared symlink