360 Secure SkillHub
360 安全技能中心

PostHog

提供 bash 封装脚本调用 PostHog REST API:公开端点用于采集事件与评估功能开关,私有端点用于 HogQL 查询及人员、看板、洞察、实验、调查、群组、注释、会话录制等资源管理,并说明速率限制、域名分区与直接 curl 用法。

simonfunk
simonfunk
热度 82.71
最近更新 2026-05-17 12:10:39
分类:数据依赖:代码执行 / 第三方 API应用场景:API 集成 / 数据处理 / 报告撰写 / 工作流

安装技能

复制下面的话术发给你的 Agent,它会通过 secure-skills 检索并安装该技能。

执行命令安装此 skill: npx secure-skills-cli add posthog
Metadata
name
posthog
description
Interact with PostHog analytics via its REST API. Capture events, evaluate feature flags, query data with HogQL, manage persons, insights, dashboards, experiments, surveys, cohorts, annotations, and session recordings. Use when the user mentions "PostHog", "PostHog API", "PostHog events", "PostHog feature flags", "PostHog insights", "PostHog query", "HogQL", "PostHog persons", "PostHog dashboards", "PostHog experiments", "PostHog surveys", "PostHog cohorts", "PostHog recordings", "capture events PostHog", or "PostHog analytics".
metadata
{"env":[{"POSTHOG_API_KEY (required)":"Personal API key — create at https://us.posthog.com/settings/user-api-keys"},{"POSTHOG_PROJECT_ID (required)":"Project ID — find at https://us.posthog.com/settings/project#variables"},{"POSTHOG_PROJECT_API_KEY":"Project API key (for public capture/flags endpoints)"},{"POSTHOG_HOST":"API host (default: https://us.posthog.com)"},{"POSTHOG_INGEST_HOST":"Ingest host (default: https://us.i.posthog.com)"}]}

PostHog API Skill

Interact with PostHog via its REST API. Two types of endpoints:

  • Public (POST-only, project API key): capture events, evaluate flags — no rate limits
  • Private (personal API key): query, CRUD for all resources — rate limited

Setup

  1. Get personal API key: https://us.posthog.com/settings/user-api-keys
  2. Get project ID: https://us.posthog.com/settings/project#variables
  3. Set env vars:
    export POSTHOG_API_KEY="phx_..."
    export POSTHOG_PROJECT_ID="12345"
    export POSTHOG_PROJECT_API_KEY="phc_..."  # optional, for capture/flags
    # For EU Cloud:
    # export POSTHOG_HOST="https://eu.posthog.com"
    # export POSTHOG_INGEST_HOST="https://eu.i.posthog.com"
    
  4. Verify: bash scripts/posthog.sh whoami

Helper Script

scripts/posthog.sh wraps common operations. Run bash scripts/posthog.sh help for full usage.

Examples

# Capture an event
bash scripts/posthog.sh capture "signup" "user_123" '{"plan":"pro"}'

# Evaluate feature flags
bash scripts/posthog.sh evaluate-flags "user_123"

# HogQL query — top events last 7 days
bash scripts/posthog.sh query "SELECT event, count() FROM events WHERE timestamp >= now() - INTERVAL 7 DAY GROUP BY event ORDER BY count() DESC LIMIT 20"

# List persons
bash scripts/posthog.sh list-persons 10 | jq '.results[] | {name, distinct_ids}'

# List feature flags
bash scripts/posthog.sh list-flags | jq '.results[] | {id, key, active}'

# Create a feature flag
echo '{"key":"new-dashboard","name":"New Dashboard","active":true,"filters":{"groups":[{"rollout_percentage":50}]}}' | \
  bash scripts/posthog.sh create-flag

# List dashboards
bash scripts/posthog.sh list-dashboards | jq '.results[] | {id, name}'

Key Concepts

Two API types

  • Public endpoints (/i/v0/e/, /batch/, /flags): Use project API key in body. No auth header. No rate limits.
  • Private endpoints (/api/projects/:project_id/...): Use personal API key via Authorization: Bearer. Rate limited.

HogQL Queries

The query endpoint (POST /api/projects/:project_id/query/) is the most powerful way to extract data. Uses SQL-like HogQL syntax against tables: events, persons, sessions, groups, plus data warehouse tables.

Always include time ranges and LIMIT. Use timestamp-based pagination for large exports.

Rate Limits (private endpoints)

Type Limit
Analytics (insights, persons, recordings) 240/min, 1200/hr
Query endpoint 2400/hr
Feature flag local evaluation 600/min
Other CRUD 480/min, 4800/hr

Limits apply per organization. On 429: back off and retry.

Domains

Cloud Public Private
US us.i.posthog.com us.posthog.com
EU eu.i.posthog.com eu.posthog.com

Events API (deprecated)

The /api/projects/:project_id/events/ endpoint is deprecated. Use HogQL queries or batch exports instead.

Direct curl

# Private endpoint
curl -H "Authorization: Bearer $POSTHOG_API_KEY" \
  "$POSTHOG_HOST/api/projects/$POSTHOG_PROJECT_ID/feature_flags/"

# HogQL query
curl -H "Authorization: Bearer $POSTHOG_API_KEY" \
  -H "Content-Type: application/json" \
  -X POST -d '{"query":{"kind":"HogQLQuery","query":"SELECT count() FROM events WHERE timestamp >= now() - INTERVAL 1 DAY"}}' \
  "$POSTHOG_HOST/api/projects/$POSTHOG_PROJECT_ID/query/"

# Capture event (public)
curl -H "Content-Type: application/json" \
  -X POST -d '{"api_key":"'$POSTHOG_PROJECT_API_KEY'","event":"test","distinct_id":"u1"}' \
  "$POSTHOG_INGEST_HOST/i/v0/e/"

Full API Reference

See references/api-endpoints.md for complete endpoint listing with parameters, body schemas, scopes, and response formats.

Sections: Public Endpoints (Capture, Batch, Flags), Private Endpoints (Persons, Feature Flags, Insights, Dashboards, Annotations, Cohorts, Experiments, Surveys, Actions, Session Recordings, Users, Definitions), Query API (HogQL).