--server-prometheus-auth

Requires HTTP Basic authentication on the /metrics endpoint, separate from any other server auth. Pass the credential as username:password; clients send a standard Authorization: Basic <base64> header.

When set, this credential is the only one that authorizes /metrics — it overrides --server-basic-auth and --server-token-auth for that endpoint. Without it, /metrics inherits the main server auth: open when none is configured, otherwise the main credentials.

Enterprise license. Requires --server-enable-prometheus.