Skip to main content

Overview

Most observability vendors are SaaS, so Antimetal reaches them directly over their public API. Tools you host yourself are different: they usually live inside your own network or VPC and are not reachable from the public internet. For these, Antimetal runs a dedicated, read-only connector for your organization. You provide the instance URL and a read-only token, and the connector queries that instance on your behalf. This page covers what the connectors need and how to make a private instance reachable. It applies to:
If you use a managed version of any of these (for example Grafana Cloud), follow the Grafana guide instead. Managed instances are reached over their public endpoint and need no reachability setup.

What the connector needs

Every self-hosted connector requires two things:
RequirementDetail
Instance URLThe HTTPS endpoint of your instance, reachable from the Antimetal connector.
Read-only tokenA bearer token or service account scoped to read only. Antimetal performs no writes.
The connector only ever issues read queries. The specific tools it can call are restricted to a read-only allowlist per integration.

Making a private instance reachable

If your instance is not exposed to the public internet, choose one of the following. You can start narrow and expand later.
Expose the instance over HTTPS, require the read-only token on every request, and restrict inbound access to Antimetal’s egress IP. Traffic is encrypted in transit and authenticated, and only Antimetal’s address can reach the endpoint.
Allowlist Antimetal’s egress IP: 44.195.180.21/32. This is a single static address, so it is safe to pin in your firewall rules.
To keep traffic off the public internet entirely, contact us at support@antimetal.com to discuss private networking options such as a VPN or a private link between your network and the Antimetal connector.

Permissions and Access

The connector uses a read-only token and is restricted to a read-only tool allowlist. No write or ingestion operations are performed. See each tool’s page for the exact scope.