Monitoring & incidents · wired today
What can agents actually do with Prometheus?
Incidents move faster than humans can tab-switch. The Prometheus connector is one of 205 executable connectors and gives agents 6 read-only tools, with the credential held in the vault and every call receipted.
The Prometheus tool list, exactly as agents see it
instant_query— Evaluate a PromQL expression at a single instant and return the matching series with their values (e.g. 'up', 'rate(node_cpu_seconds_total[5m])')query_range— Evaluate a PromQL expression over a time range at a fixed step and return each series as a list of timestamped sampleslist_targets— List the scrape targets Prometheus knows about, with their health, last scrape time and last scrape errorlabel_values— List the values a label takes across the series in Prometheus (use __name__ to list every metric name)list_alerts— List the alerts Prometheus currently holds as pending or firing, with their labels, annotations and active-since timeruntime_info— Get Prometheus runtime information: start time, storage retention, last config reload result and goroutine count
Every tool above is read-only. Write surfaces ship only after live testing, and always behind approval gates.
What the Prometheus connector needs
You provide base URL, username, password from your Prometheus account; Quox sends it as HTTP basic credentials. The credential is stored encrypted in the vault and resolved just-in-time, so agents use it without ever seeing it.
Where to get it: Prometheus's own API documentation ↗ covers creating and scoping the credential.
How proven is this?
LIVE-PROVEN: every tool on this page was executed with real credentials against a real running Prometheus instance (provisioned for the proof, then destroyed), and every call answered successfully. The strongest proof class a connector can carry before it runs inside your own deployment.
Prometheus integration FAQ
What can Quox agents do with Prometheus?
Agents can run 6 read-only tools against Prometheus: instant query, query range, list targets, label values, list alerts and more. Every call is receipted in the evidence trail.
What does the Prometheus integration need?
You provide base URL, username, password from your Prometheus account; Quox sends it as HTTP basic credentials. The credential is stored encrypted in the vault and resolved just-in-time, so agents use it without ever seeing it.
Do agents see my Prometheus credentials?
No. Credentials live encrypted in the Quox vault and are resolved server-side at call time. Agents invoke tools; they never receive the underlying secret.
How proven is the Prometheus connector?
LIVE-PROVEN: every tool on this page was executed with real credentials against a real running Prometheus instance (provisioned for the proof, then destroyed), and every call answered successfully. The strongest proof class a connector can carry before it runs inside your own deployment.