What API endpoints are available?

The REST API v1 provides 8 read-only endpoints: page views, visitors, events, goals, funnels, sessions, revenue, and experiments. Each endpoint supports filtering by date range, site ID, and additional parameters.

How does HMAC signing work?

Each webhook payload includes an `X-Signature-256` header containing the HMAC-SHA256 signature of the request body, signed with your webhook's secret key. Verify the signature on your end to confirm the payload came from BuddyStat and hasn't been tampered with.

Can I retry failed webhook deliveries?

Yes. Failed deliveries are logged in the audit trail with the HTTP status code, response body, and retry count. You can manually retry any failed delivery from the webhook management UI.

How are API keys managed?

API keys are managed in Account Settings under the API Keys section. You can create named keys, view the last 4 characters for identification, and revoke keys at any time. Each key uses Bearer token authentication.

What rate limits apply to the API?

API rate limits are based on your subscription tier. Rate limit headers are included in every API response so you can track your usage. Contact support if you need higher limits.

Public API & Webhooks

Build on your data

REST API v1 with 8 read-only endpoints and Bearer token auth. Outgoing webhooks with HMAC-SHA256 signing, delivery audit trail, and real-time event delivery.

Start for $0 Live demo

7-day free trial. Cancel anytime.

app.buddystat.com

Live

Live API demo — real webhook and API configuration

Public API & Webhooks

webhooks

Your analytics data shouldn't be trapped inside a single dashboard. BuddyStat's Public API and Webhooks give you programmatic access to every metric — page views, visitors, events, goals, funnels, sessions, revenue, and experiments.

The REST API v1 provides 8 read-only endpoints with Bearer token authentication. Generate API keys in Account Settings, attach them to your requests, and query your data from any application. Rate limit headers in every response let you track usage and optimize your queries.

Outgoing webhooks deliver real-time event data to any HTTP endpoint. Every payload is signed with HMAC-SHA256 using your secret key, so you can verify authenticity. The delivery audit trail logs every attempt — status code, response body, retry count — giving you full visibility into webhook health.

Capabilities

What you can do

Outgoing webhooks

Send real-time event data to any HTTP endpoint. Configure webhooks for custom events, alerts, and analytics data — delivered as JSON payloads.

HMAC signing

Every webhook payload is signed with HMAC-SHA256 using your secret key. Verify payload authenticity on your end to ensure data integrity.

Delivery audit trail

Every webhook delivery is logged with status code, response body, and retry count. Full visibility into delivery health and debugging information.

REST API v1

Full read-only REST API with 8 endpoints. Query page views, visitors, events, goals, funnels, sessions, revenue, and experiments programmatically.

API key management

Generate and manage API keys from Account Settings. Bearer token authentication with granular permissions. Revoke keys at any time.

Real-time delivery

Webhooks are triggered instantly when events occur. Build real-time integrations, sync data to external systems, and automate workflows.

Getting Started

How it works

01
Generate an API key
In Account Settings, generate a new API key. Give it a name for easy reference and copy the key — it's shown once for security. The key uses Bearer token authentication for all API requests.
02
Create a webhook endpoint
In Site Settings, create a new webhook. Provide your endpoint URL, select which events to listen for, and optionally set a secret for HMAC verification.
03
Events are delivered
When a matching event occurs, BuddyStat sends a POST request to your webhook URL with the event data as a JSON payload. The payload includes an HMAC signature header for verification.
04
Monitor and debug
The Webhooks dashboard shows delivery status for each webhook. View recent deliveries, inspect response codes, and retry failed deliveries from the audit trail.

Use Cases

Who uses this

Developers

Integrate analytics data into custom dashboards, data warehouses, and internal tools. The REST API provides programmatic access to all analytics data.

Marketing teams

Send conversion data to custom attribution systems or data pipelines. Webhooks enable real-time marketing automation based on analytics events.

SaaS companies

Sync user activity data to your own database for custom analysis. Build real-time features powered by BuddyStat analytics data.

DevOps teams

Integrate alert webhooks with PagerDuty, OpsGenie, or custom incident management systems. Automate incident response based on analytics thresholds.

Product teams

Pipe feature adoption events into product analytics tools or data lakes. Combine BuddyStat data with other product signals for richer analysis.

Data engineers

Build ETL pipelines that consume BuddyStat data via API. Export data to BigQuery, Snowflake, or your preferred data warehouse for custom analysis.

FAQ

Frequently asked questions

Explore More

AlertsWebhooks deliver alert notifications to external systems.Server-Side PixelsSend event data to ad platforms alongside custom webhook endpoints.Custom EventsDefine the events that trigger webhook delivery.Web AnalyticsThe full dashboard with traffic and engagement metrics.Revenue TrackingAccess revenue data programmatically via the API.Email ReportsScheduled reports complement real-time API access.

Build custom integrations

REST API with 8 endpoints and real-time webhooks. HMAC-signed payloads and full delivery audit trail.

Start for €0 Live demo