Metrics Endpoint

The backend services expose a Prometheus-compatible /metrics endpoint on the API and scheduler processes.

The endpoint includes basic system metrics from the Prometheus Python client, plus application metrics for HTTP request counts, request latency, error responses, and database query duration.

If you want to protect the endpoint, set METRICS_TOKEN in the backend environment and send either Authorization: Bearer <token> or X-Metrics-Token: <token> when scraping.

Validation

To verify the endpoint, call /metrics after generating some traffic and confirm that the response uses Prometheus text format and contains counters such as firmware_vault_http_requests_total.