Owner API

Owner Stats API

Read daily project metrics from your own backend, data warehouse, or reporting job. This API is for owners and servers; never ship the project secret inside a browser extension.

Request

Authenticated read endpoint for project daily metrics.

curl "https://extension.report/api/v2/stats?pk=pk_er_...&from=2026-07-01&to=2026-07-08" \
  -H "Authorization: Bearer er_secret_..."

Endpoint: GET /api/v2/stats
Required query: pk project public key.
Auth: Authorization: Bearer <project secret>.
Optional query: from and to as YYYY-MM-DD. Default is the latest 30 days.
Maximum range: 366 days.
Rate limit: 30 burst requests per IP, refilling gradually.

Response

Daily metric rows, ordered by day ascending.

{
  "ok": true,
  "schema_version": 2,
  "project": {
    "name": "My Extension",
    "public_key": "pk_er_..."
  },
  "from": "2026-07-01",
  "to": "2026-07-08",
  "days": [
    {
      "day": "2026-07-08",
      "metrics": {
        "alive": 8421,
        "opened": 2310,
        "pinned": 3910,
        "configured": 1220,
        "events": 18432
      }
    }
  ]
}

Hosted projects backed by ClickHouse return schema_version: 2. Local or fallback deployments without ClickHouse can return schema_version: 1 with the stored aggregate JSON shape.

Metrics

The v2 response mirrors the product dashboard’s daily owner vocabulary.

Field	Meaning
alive	Installations seen as alive that day.
opened	Installations that opened an extension UI.
pinned	Installations observed as pinned to the toolbar.
configured	Installations with activation/configuration signal.
power_users	Installations crossing the product usage threshold.
context_menu_users	Installations using context menu actions.
shortcut_configured_users	Installations with a shortcut configured.
shortcut_users	Installations that used a keyboard shortcut.
omnibox_users	Installations that used omnibox features.
permission_requested	Installations that saw an optional permission request.
permission_granted	Installations that granted optional permissions.
permission_declined	Installations that declined optional permissions.
permission_removed	Installations that removed optional permissions.
notification_shown	Installations that were shown a notification.
notification_clicked	Installations that clicked a notification.
notification_closed_by_user	Installations that closed a notification manually.
events	Raw event count for that day.

Secret Handling

Project secrets are owner-side credentials.

Use this endpoint from a server, scheduled job, private notebook, or backend integration. Browser extensions should only ship the public project key and use the SDK for telemetry.

Rotate the secret from extension settings if it is exposed. Published extensions continue to use the public key and do not need a release when the owner API secret rotates.

For implementation details, see the complete reference.