Connect Loki.

Connect selected Loki log streams to Perfloop. It can query log counts, rates, and log entries for the services and environments you choose.

Access you need

• read-only authorization Create a credential that can use Loki query and label endpoints. Enter the complete Authorization header value. Do not grant write or administration access.

• label selectors Choose streams with a selector such as {service="api",env="prod"}. Every query must contain these filters.

• optional tenant header If your deployment uses multitenancy, enter the exact X-Scope-OrgID value.

Setup

1 · create a read credential

Create a dedicated reader for the Loki HTTP query API or its authenticating gateway.

2 · set endpoint, tenant, and selectors

In Perfloop Setup, select Loki. Enter the HTTPS base, Authorization value, optional tenant, and exact label selectors.

3 · connect to Perfloop

Perfloop checks each selector before it saves the connection.

An Admin's coding agent can return a Setup link that opens this provider's form. Complete the form in Setup, and never paste a credential into chat or an MCP call.

Data Perfloop reads

• Label metadata and aggregates. Labels for selected streams, plus log counts and rates for a set time window.

• Log entries. A range read can return timestamps, labels, and log text. Models can read this data, and Perfloop can store it.

Use a source or gateway that removes log text you do not authorize Perfloop to receive.

Repo access

Work on any repo in the workspace can query the selected scopes of every telemetry connection in the workspace. Keep telemetry that some repos must not read in a separate workspace.

Credentials and network access

Perfloop encrypts the credential and uses it only for requests within your connection's scope. Models and execution sandboxes do not receive it.

Use a public HTTPS endpoint with a valid certificate. For a Loki the internet cannot reach, run the Perfloop relay in your network and enter relay://name as the endpoint. The provider credential and the tenant then live in the relay configuration; leave the Authorization and Tenant fields in Setup empty.

Change or remove access

Replace the connection in Setup to rotate its credential, endpoint, tenant, or selector list. The saved connection changes only after the replacement validates. Revoke the credential in your provider to stop later reads.

To remove a source, select Delete on its row and confirm. Perfloop deletes the credential it stores, and scheduled checks on the source stop running. Their saved queries and past results stay.

Provider documentation

• Loki authentication

• Grafana Loki data-source configuration

Security questions: security@perfloop.ai