Connect Pyroscope.
Connect profiles from Pyroscope so Perfloop can find where your code spends CPU time or allocates memory. Choose which workloads it can read with profile labels.
Access you need
-
read-only authorization Create a credential that can list and query profiles. Enter the complete Authorization header value. Do not grant profile write or administration access.
-
profile selectors Choose the workloads Perfloop can read with a selector such as
{service_name="api"}. Use your own profile labels and exact values. -
optional tenant header If your deployment uses multitenancy, enter the exact X-Scope-OrgID value. Leave it empty for a single-tenant endpoint.
Setup
1 · create a read credential
Create a dedicated reader for the Pyroscope query and profile APIs.
2 · set endpoint, tenant, and selectors
In Perfloop Setup, select Pyroscope. Enter the HTTPS base, Authorization value, optional tenant, and profile selectors.
3 · connect to Perfloop
Perfloop checks profile inventory for every registered selector before it saves the connection.
An Admin's coding agent can return a Setup link that opens this provider's form. Complete the form in Setup, and never paste a credential into chat or an MCP call.
Data Perfloop reads
-
Profile metadata. Profile types, labels, time ranges, and workload identifiers are returned to Perfloop.
-
Merged pprof data. Selected profiles can contain stack values, function and file names, build identifiers, and labels.
-
Stored results. Selected profile files and their source, selector, type, and time bounds can be retained.
Profile labels and symbol names can contain sensitive identifiers. Scope the source before you connect it.
Repo access
Work on any repo in the workspace can query the selected scopes of every telemetry connection in the workspace. Keep telemetry that some repos must not read in a separate workspace.
Credentials and network access
Perfloop encrypts the credential and uses it only for requests within your connection's scope. Models and execution sandboxes do not receive it.
Use a public HTTPS endpoint with a valid certificate. For a private endpoint, contact us to arrange access to that address.
Change or remove access
Replace the connection in Setup to rotate its credential, endpoint, tenant, or selector list. Revoke the credential in your provider to stop later reads.
To remove a source, select Delete on its row and confirm. Perfloop deletes the credential it stores, and scheduled checks on the source stop running. Their saved queries and past results stay.
Provider documentation
Security questions: security@perfloop.ai