Connect Pyroscope.

Connect profiles from Pyroscope so Perfloop can find where your code spends CPU time or allocates memory. Choose which workloads it can read with profile labels.

Access you need

  • read-only authorizationCreate a credential that can list and query profiles. Enter the complete Authorization header value. Do not grant profile write or administration access.
  • profile selectorsChoose the workloads Perfloop can read with a selector such as {service_name="api"}. Use your own profile labels and exact values.
  • optional tenant headerIf your deployment uses multitenancy, enter the exact X-Scope-OrgID value. Leave it empty for a single-tenant endpoint.

Setup

1 · create a read credential

Create a dedicated reader for the Pyroscope query and profile APIs.

2 · set endpoint, tenant, and selectors

In Perfloop Setup, select Pyroscope. Enter the HTTPS base, Authorization value, optional tenant, and profile selectors.

3 · connect to Perfloop

Perfloop checks profile inventory for every registered selector before it saves the connection.

Data Perfloop reads

  • Profile metadata. Profile types, labels, time ranges, and workload identifiers are returned to Perfloop.
  • Merged pprof data. Selected profiles can contain stack values, function and file names, build identifiers, and labels.
  • Stored results. Selected profile files and their source, selector, type, and time bounds can be retained.

Profile labels and symbol names can contain sensitive identifiers. Scope the source before you connect it.

Repo access

Work on a repo uses only the selected scopes assigned to that repo. To assign them, contact us with the repo and their names. Until a repo has an assignment, its work runs without telemetry. Saving the connection again in Setup removes its assignments; contact us to restore them.

Credentials and network access

Perfloop encrypts the credential and uses it only for requests within your connection's scope. Models and execution sandboxes do not receive it.

Use a public HTTPS endpoint with a valid certificate. For a private endpoint, contact us to arrange access to that address.

Change or remove access

Replace the connection in Setup to rotate its credential, endpoint, tenant, or selector list. Revoke the credential in your provider to stop later reads.

Removing access does not delete connection details or results already stored in Perfloop.

Provider documentation

Security questions: security@perfloop.ai