The Complete Production SOP: How to Deploy and Run Grafana Pyroscope Continuous CPU & Memory Profiling in Autonomous AI Agents

---
name: "pyroscope-continuous-profiling"
description: "Profile production CPU, memory, and goroutine allocations continuously with minimal overhead."
metadata:
  author: "Grafana Labs"
  version: "1.0.0"
  runtime_compatibility:
    - "codex"
    - "claude-code"
    - "cursor"
    - "windsurf"
triggers:
  - "setup pyroscope profiling"
  - "analyze flame graph pyroscope"
  - "find memory leak pyroscope"
permissions:
  fs_read: true
  fs_write: "workspace"
  shell_exec: false
  net_access: false
---

# Grafana Pyroscope Continuous CPU & Memory Profiling

Integrates Grafana Pyroscope: embedding lightweight profiling agents (Go, Node.js, Python, Java, eBPF), analyzing flame graphs, comparing diff profiles before/after deployments, and pinpointing memory leaks.

package main

import (
	"os"
	"github.com/grafana/pyroscope-go"
)

func initPyroscope() (*pyroscope.Profiler, error) {
	serverAddress := os.Getenv("PYROSCOPE_SERVER_ADDRESS")
	if serverAddress == "" {
		serverAddress = "http://localhost:4040"
	}

	return pyroscope.Start(pyroscope.Config{
		ApplicationName: os.Getenv("PYROSCOPE_APPLICATION_NAME"),
		ServerAddress:   serverAddress,
		AuthToken:       os.Getenv("PYROSCOPE_AUTH_TOKEN"),
		ProfileTypes: []pyroscope.ProfileType{
			pyroscope.ProfileCPU,
			pyroscope.ProfileAllocObjects,
			pyroscope.ProfileAllocSpace,
			pyroscope.ProfileInuseObjects,
			pyroscope.ProfileInuseSpace,
			pyroscope.ProfileGoroutines,
		},
	})
}

setup pyroscope profiling for our Go payment microservice. Configure it to report to PYROSCOPE_SERVER_ADDRESS and profile CPU, inuse_space, and goroutines.

#!/usr/bin/env bash
set -euo pipefail

# Validate no exposed tokens in newly staged files
if git diff --staged | grep -iE 'pyroscope_auth_token.*=.*["\'][a-zA-Z0-9_-]{10,}'; then
  echo 'Security violation: Hardcoded Pyroscope token detected in staged diff.'
  exit 1
fi

echo 'Verification passed: Pyroscope integration cleanly formatted and secure.'