Docs

Install

Paste one script tag into your site’s head. Autocapture starts recording pageviews, clicks, forms, rage clicks, dead clicks, and exceptions immediately — events appear in your dashboard within seconds. Create a site to get your own snippet with a real site id.

<script async src="undefined/dh.js" data-site="YOUR_SITE_ID"></script>

SDK API

Once loaded, window.dh exposes:

dh.track('upgrade_intent', { plan: 'pro', source: 'settings' })

dh.identify('user_42', { email: 'maya@acme.com', name: 'Maya Chen' })

Campaign links

Two ways to attribute traffic to a campaign, one join key:

• Param only — put ?ref=summer-launch on any URL. The SDK captures ref like a UTM, and it joins traffic to the campaign as initial_ref.
• Short link — GET /c/summer-launch records a server-side click (counts clicks even from email clients and QR codes) and 302s to the campaign’s destination with ?ref=summer-launch appended.

Stripe revenue attribution

Point a Stripe webhook at your site’s endpoint (find yours, and the signing secret field, on the site’s Settings page):

undefined/api/stripe/webhook/YOUR_SITE_ID

In your Stripe dashboard, send this endpoint checkout.session.completed and invoice.paid, then paste the signing secret into the same settings page. To attribute a sale to a visitor, wire either of these on checkout:

// option 1 — client_reference_id
stripe.checkout.sessions.create({
  client_reference_id: 'dh_' + dh.distinctId(),
  // ...
})

// option 2 — identify with an email, matched against Stripe's customer email
dh.identify(userId, { email: 'maya@acme.com' })

No match still records the sale, just unattributed — site totals stay honest either way.

MCP connect

Create an API key in Settings, then connect your agent. Claude Code:

claude mcp add datahog undefined/api/mcp --header "Authorization: Bearer dhk_..."

Cursor (or any stdio MCP client):

npx -y mcp-remote undefined/api/mcp --header "Authorization: Bearer dhk_..."

20 tools, all mirroring the dashboard:

REST

Every REST route takes the same bearer key as MCP: Authorization: Bearer dhk_.... The core read is GET /api/analytics, one builder behind every dashboard card, REST call, and MCP tool:

Wire format of POST /i

The ingest endpoint is SDK-agnostic and documented here for anyone writing a server-side or non-JS SDK. Batches post as a plain-text body (no Content-Type, which keeps it a CORS-simple request):

{
  "site_id": "abc123",
  "sent_at": "2026-07-08T12:00:00.000Z",
  "events": [ /* one object per event, shape below */ ]
}

Each event:

{
  "uuid": "0190f5b2-...",        // UUIDv7 -- retry-safe, dedupes on the server
  "event": "$pageview",           // or a custom name from track()
  "timestamp": "2026-07-08T12:00:00.000Z",
  "distinct_id": "0190f4a1-...",
  "ext_user_id": "user_42",       // present only after identify()
  "session_id": "0190f3c0-...",
  "url": "https://example.com/pricing",
  "path": "/pricing",
  "title": "Pricing",
  "referrer": "https://google.com/",
  "screen_width": 1920,
  "screen_height": 1080,
  "viewport_width": 1280,
  "viewport_height": 800,
  "language": "en-US",
  "client_timezone": "America/New_York",
  "is_webdriver": false,
  "first_touch": {
    "referrer_domain": "google.com",
    "landing_page": "/pricing",
    "ref": "",
    "utm_source": "",
    "utm_medium": "",
    "utm_campaign": "",
    "utm_term": "",
    "utm_content": ""
  },
  "args": {}                      // your custom track() properties
}

Autocaptured event types add their own fields on top of this shape (for example $click adds selector, el_text, and href). One retry after 3s on a network error or 5xx, then the batch is dropped — the uuid dedup makes retries safe.