Connect Prometheus.
Connect your Prometheus metrics to Perfloop. Use labels to choose the services and environments it can read.
Access you need
- read-only authorizationCreate a credential that can use the Prometheus HTTP query API. Enter the complete Authorization header value, such as Bearer …or Basic …. Do not use a credential with write or administration access.
- label selectorsRegister one or more label selectors with exact values, such as {service="api",env="prod"}. Every query must keep that selector.
- HTTPS endpointUse your Prometheus base URL, such as https://prometheus.example.com. Put credentials in the Authorization field, not the URL.
Setup
1 · create a read credential
Use your gateway or identity provider to create a credential that can read the Prometheus query API.
2 · set the endpoint and scopes
In Perfloop Setup, select Prometheus. Enter the endpoint, complete Authorization value, and one exact label selector for each service or environment.
3 · connect to Perfloop
Perfloop checks the endpoint, credential, and every selector before it saves the new connection.
Data Perfloop reads
- Discovery metadata. Metric names and labels for the services and environments you selected.
- Metric results. Instant and range responses can contain metric labels, sample values, and provider warnings.
- Stored results. The query without credentials and its response can be retained with the source and time window needed to check the result.
Query limits
- Every query must contain your label filters. Perfloop rejects queries without them and accepts a supported subset of PromQL.
- A query can cover up to seven days, including any lookback used by a function such as rate().
- Series, point, and response-byte limits apply. Perfloop cannot use an incomplete result to verify a performance claim.
Credentials and network access
If you enter a token in Setup, your browser sends it to Perfloop over HTTPS. Tokens from provider authorization go directly to Perfloop.
Perfloop encrypts the credential and uses it only for requests within your connection's scope. Models and execution sandboxes do not receive it.
Use a public HTTPS endpoint with a valid certificate. For a private endpoint, contact us to arrange access to that address. You cannot enable private network access from Setup.
Change or remove access
Select Edit connection in Setup, change the credential, endpoint, or selector list, then select Save connection. The saved connection changes only after every new value validates. Revoke the credential in your provider to stop later reads.
Removing access does not delete connection details or results already stored in Perfloop.
Provider documentation
Security questions: security@perfloop.ai