Connect Pyroscope.

Connect profiles from Pyroscope so Perfloop can find where your code spends CPU time or allocates memory. Choose which workloads it can read with profile labels.

Access you need

  • read-only authorizationCreate a credential that can list and query profiles. Enter the complete Authorization header value. Do not grant profile write or administration access.
  • profile selectorsChoose the workloads Perfloop can read with a selector such as {service_name="api"}. Use your own profile labels and exact values.
  • optional tenant headerIf your deployment uses multitenancy, enter the exact X-Scope-OrgID value. Leave it empty for a single-tenant endpoint.

Setup

1 · create a read credential

Create a dedicated reader for the Pyroscope query and profile APIs.

2 · set endpoint, tenant, and selectors

In Perfloop Setup, select Pyroscope. Enter the HTTPS base, Authorization value, optional tenant, and profile selectors.

3 · connect to Perfloop

Perfloop checks profile inventory for every registered selector before it saves the connection.

Data Perfloop reads

  • Profile metadata. Profile types, labels, time ranges, and workload identifiers are returned to Perfloop.
  • Merged pprof data. Selected profiles can contain stack values, function and file names, build identifiers, and labels.
  • Stored results. Selected profile files and their source, selector, type, and time bounds can be retained.

Query limits

  • Each query specifies the selected workload, profile type, and time window.
  • Response and profile-size limits apply before a result can be used to verify a performance claim.
  • Profile labels and symbol names can contain sensitive identifiers. Scope the source before you connect it.

Credentials and network access

If you enter a token in Setup, your browser sends it to Perfloop over HTTPS. Tokens from provider authorization go directly to Perfloop.

Perfloop encrypts the credential and uses it only for requests within your connection's scope. Models and execution sandboxes do not receive it.

Use a public HTTPS endpoint with a valid certificate. For a private endpoint, contact us to arrange access to that address. You cannot enable private network access from Setup.

Change or remove access

Replace the connection in Setup to rotate its credential, endpoint, tenant, or selector list. Revoke the credential in your provider to stop later reads.

Removing access does not delete connection details or results already stored in Perfloop.

Provider documentation

Security questions: security@perfloop.ai