AnalyticsBundle API

Analytics read and management routes require a Browser Session or Member Token. Project tokens cannot read analytics; they may only submit analytics_event envelopes through the write-only ingestion path.

curl https://api.debugbundle.com/v1/analytics/summary?project_id=<id>&last=7d \
  -H "Authorization: Bearer dbundle_mem_..."

Routes

Metric Query Scope

Metric routes require project_id. Common optional parameters include from, to, last, granularity, service, environment, and limit. Server schemas reject unsupported or unbounded values.

Only opportunity and bundle list routes support organization inventory reads without project_id. Omission returns accessible projects in the authenticated member's organization with stable cursor pagination. Detail, generation, settings, samples, and metrics remain project-scoped.

Update Settings

curl -X PATCH https://api.debugbundle.com/v1/projects/<id>/analytics-settings \
  -H "Authorization: Bearer dbundle_mem_..." \
  -H "Content-Type: application/json" \
  -d '{
    "enabled": true,
    "privacy_mode": "strict",
    "consent_required": true,
    "journey_sample_rate": 0.1,
    "raw_retention_days": 7,
    "sample_retention_days": 30,
    "aggregate_retention_months": 24
  }'

The response includes access_mode (manage or preview), analytics_available, and the effective settings. Controlled custom dimensions cannot exceed the fixed project/tier cap: 1 on Free, 3 on Solo, 8 on Team, or 20 on self-host.

Browser Session mutations use the session CSRF token. Bearer member-token calls do not use browser CSRF headers.

Create A Saved Funnel

curl -X POST https://api.debugbundle.com/v1/projects/<id>/analytics/saved-funnels \
  -H "Authorization: Bearer dbundle_mem_..." \
  -H "Content-Type: application/json" \
  -d '{
    "funnel_key": "signup",
    "display_name": "Signup",
    "steps": [
      {"step_key": "landing", "display_name": "Landing"},
      {"step_key": "complete", "display_name": "Complete"}
    ]
  }'

Keys start with a letter and use letters, numbers, dots, colons, underscores, or hyphens. Definitions require 2-20 unique ordered steps. The API returns 409 when the key is active or the active-definition limit is reached.

Generate An AnalyticsBundle

curl -X POST https://api.debugbundle.com/v1/analytics/bundles \
  -H "Authorization: Bearer dbundle_mem_..." \
  -H "Content-Type: application/json" \
  -d '{
    "project_id": "<id>",
    "analysis_kind": "funnel_dropoff",
    "last": "30d",
    "funnel": "signup",
    "filters": {"service": "web", "environment": "production"}
  }'

Generation is asynchronous and idempotently reserved from a deterministic input fingerprint. The response is either a completed artifact or explicit pending/failed state. The additive X-DebugBundle-Generation-Id response header identifies the generation record when available.

Error Semantics

Analytics quota errors do not consume or reject otherwise-valid debug events in a mixed ingestion batch unless the shared request-level ingestion limit is exceeded.

Next Steps

• Generated API reference - OpenAPI-derived schemas.
• AnalyticsBundle CLI - Human and agent command workflows.
• Privacy and retention - Data boundaries.