diff --git a/Makefile b/Makefile
index 3e2d72b2fd..6ea4b3be13 100644
--- a/Makefile
+++ b/Makefile
@@ -272,6 +272,22 @@ else
 	go generate ./internal/tools/docs_generator/
 endif
 
+generate-docs-config-args:
+ifeq ($(USE_CONTAINER),1)
+	$(RERUN_IN_CONTAINER)
+else
+	@echo "Generating documentation config arguments for all components..."
+	@go list -f '{{.Dir}}' $$(go list -f '{{join .Imports " "}}' ./internal/component/all) | while read dir; do \
+		if [ -f "$$dir/metadata.yml" ]; then \
+			component_name=$$(echo $$dir | sed 's|.*/internal/component/||'); \
+			output_dir="docs/sources/shared/generated/components/$$component_name"; \
+			echo "Generating docs for component: $$component_name"; \
+			mkdir -p "$$output_dir"; \
+			go run ./internal/tools/alloygen/ generate "$$dir/metadata.yml" "$$output_dir"; \
+		fi; \
+	done
+endif
+
 generate-winmanifest:
 ifeq ($(USE_CONTAINER),1)
 	$(RERUN_IN_CONTAINER)
@@ -298,6 +314,9 @@ else
 	bash ./.github/ISSUE_TEMPLATE/scripts/update-gh-issue-templates.sh
 endif
 
+validate-metadata:
+	bash ./tools/validate-metadata
+
 #
 # Other targets
 #
diff --git a/docs/sources/reference/components/loki/loki.source.api.md b/docs/sources/reference/components/loki/loki.source.api.md
index 2c5e32892a..429fc34f33 100644
--- a/docs/sources/reference/components/loki/loki.source.api.md
+++ b/docs/sources/reference/components/loki/loki.source.api.md
@@ -50,13 +50,7 @@ The component starts an HTTP server on the configured port and address with the
 
 You can use the following arguments with `loki.source.api`:
 
-| Name                     | Type                 | Description                                             | Default    | Required |
-| ------------------------ | -------------------- | ------------------------------------------------------- | ---------- | -------- |
-| `forward_to`             | `list(LogsReceiver)` | List of receivers to send log entries to.               |            | yes      |
-| `labels`                 | `map(string)`        | The labels to associate with each received logs record. | `{}`       | no       |
-| `relabel_rules`          | `RelabelRules`       | Relabeling rules to apply on log entries.               | `{}`       | no       |
-| `use_incoming_timestamp` | `bool`               | Whether to use the timestamp received from request.     | `false`    | no       |
-| `max_send_message_size`  | `size`               | Maximum size of a request to the push API.              | `"100MiB"` | no       |
+{{< docs/shared lookup="generated/components/loki/source/api/__arguments.md" source="alloy" version="<ALLOY_VERSION>" >}}
 
 The `relabel_rules` field can make use of the `rules` export value from a [`loki.relabel`][loki.relabel] component to apply one or more relabeling rules to log entries before they're forwarded to the list of receivers in `forward_to`.
 
@@ -64,22 +58,18 @@ The `relabel_rules` field can make use of the `rules` export value from a [`loki
 
 ## Blocks
 
+<!-- TODO: Add this note to the docgen -->
 You can use the following blocks with `loki.source.api`:
 
-| Name                  | Description                                        | Required |
-| --------------------- | -------------------------------------------------- | -------- |
-| [`http`][http]        | Configures the HTTP server that receives requests. | no       |
-| `http` > [`tls`][tls] | Configures TLS for the HTTP server.                | no       |
+{{< docs/shared lookup="generated/components/loki/source/api/__blocks.md" source="alloy" version="<ALLOY_VERSION>" >}}
 
+<!-- TODO: Add this note to the docgen -->
 The > symbol indicates deeper levels of nesting.
 For example, `http` > `tls` refers to a `tls` block defined inside an `http` block.
 
-[http]: #http
-[tls]: #tls
-
 ### `http`
 
-{{< docs/shared lookup="reference/components/server-http.md" source="alloy" version="<ALLOY_VERSION>" >}}
+{{< docs/shared lookup="generated/components/loki/source/api/http.md" source="alloy" version="<ALLOY_VERSION>" >}}
 
 ### `tls`
 
@@ -89,7 +79,7 @@ The `tls` block configures TLS for the HTTP server.
 
 ## Exported fields
 
-`loki.source.api` doesn't export any fields.
+{{< docs/shared lookup="generated/components/loki/source/api/__exports.md" source="alloy" version="<ALLOY_VERSION>" >}}
 
 ## Component health
 
diff --git a/docs/sources/reference/components/loki/loki.source.awsfirehose.md b/docs/sources/reference/components/loki/loki.source.awsfirehose.md
index d3a28ba1e7..016d1dde69 100644
--- a/docs/sources/reference/components/loki/loki.source.awsfirehose.md
+++ b/docs/sources/reference/components/loki/loki.source.awsfirehose.md
@@ -18,18 +18,18 @@ The HTTP API exposed is compatible
 with the [Data Firehose HTTP Delivery API](https://docs.aws.amazon.com/firehose/latest/dev/httpdeliveryrequestresponse.html).
 Since the API model that Data Firehose uses to deliver data over HTTP is generic enough, the same component can be used to receive data from multiple origins:
 
-* [Amazon CloudWatch logs](https://docs.aws.amazon.com/firehose/latest/dev/writing-with-cloudwatch-logs.html)
-* [Amazon CloudWatch events](https://docs.aws.amazon.com/firehose/latest/dev/writing-with-cloudwatch-events.html)
-* Custom data through [DirectPUT requests](https://docs.aws.amazon.com/firehose/latest/dev/writing-with-sdk.html)
+- [Amazon CloudWatch logs](https://docs.aws.amazon.com/firehose/latest/dev/writing-with-cloudwatch-logs.html)
+- [Amazon CloudWatch events](https://docs.aws.amazon.com/firehose/latest/dev/writing-with-cloudwatch-events.html)
+- Custom data through [DirectPUT requests](https://docs.aws.amazon.com/firehose/latest/dev/writing-with-sdk.html)
 
 The component uses a heuristic to try to decode as much information as possible from each log record, and it falls back to writing the raw records to Loki.
 The decoding process goes as follows:
 
-* Data Firehose sends batched requests
-* Each record is treated individually
-* For each `record` received in each request:
-  * If the `record` comes from a [CloudWatch logs subscription filter](https://docs.aws.amazon.com/AmazonCloudWatch/latest/logs/SubscriptionFilters.html#DestinationKinesisExample), it's decoded and each logging event is written to Loki
-  * All other records are written raw to Loki
+- Data Firehose sends batched requests
+- Each record is treated individually
+- For each `record` received in each request:
+  - If the `record` comes from a [CloudWatch logs subscription filter](https://docs.aws.amazon.com/AmazonCloudWatch/latest/logs/SubscriptionFilters.html#DestinationKinesisExample), it's decoded and each logging event is written to Loki
+  - All other records are written raw to Loki
 
 The component exposes some internal labels, available for relabeling.
 The following tables describes internal labels available in records coming from any source.
@@ -65,7 +65,7 @@ loki.source.awsfirehose "<LABEL>" {
 
 The component starts an HTTP server on the configured port and address with the following endpoints:
 
-* `/awsfirehose/api/v1/push` - accepting `POST` requests compatible with [Data Firehose HTTP Specifications](https://docs.aws.amazon.com/firehose/latest/dev/httpdeliveryrequestresponse.html).
+- `/awsfirehose/api/v1/push` - accepting `POST` requests compatible with [Data Firehose HTTP Specifications](https://docs.aws.amazon.com/firehose/latest/dev/httpdeliveryrequestresponse.html).
 
 You can use the [X-Amz-Firehose-Common-Attributes](https://docs.aws.amazon.com/firehose/latest/dev/httpdeliveryrequestresponse.html) header to set extra static labels.
 You can configure the header in the **Parameters** section of the Data Firehose delivery stream configuration.
@@ -88,12 +88,7 @@ Example of the valid `X-Amz-Firehose-Common-Attributes` value with two custom la
 
 You can use the following arguments with `loki.source.awsfirehose`:
 
-| Name                     | Type                 | Description                                              | Default | Required |
-| ------------------------ | -------------------- | -------------------------------------------------------- | ------- | -------- |
-| `forward_to`             | `list(LogsReceiver)` | List of receivers to send log entries to.                |         | yes      |
-| `access_key`             | `secret`             | If set, require Data Firehose to provide a matching key. | `""`    | no       |
-| `relabel_rules`          | `RelabelRules`       | Relabeling rules to apply on log entries.                | `{}`    | no       |
-| `use_incoming_timestamp` | `bool`               | Whether to use the timestamp received from the request.  | `false` | no       |
+{{< docs/shared lookup="generated/components/loki/source/aws_firehose/__arguments.md" source="alloy" version="<ALLOY_VERSION>" >}}
 
 The `relabel_rules` field can make use of the `rules` export value from a [`loki.relabel`][loki.relabel] component to apply one or more relabeling rules to log entries before they're forwarded to the list of receivers in `forward_to`.
 
@@ -103,37 +98,28 @@ The `relabel_rules` field can make use of the `rules` export value from a [`loki
 
 You can use the following blocks with `loki.source.awsfirehose`:
 
-| Name                  | Description                                        | Required |
-| --------------------- | -------------------------------------------------- | -------- |
-| [`grpc`][grpc]        | Configures the gRPC server that receives requests. | no       |
-| `gprc` > [`tls`][tls] | Configures TLS for the gRPC server.                | no       |
-| [`http`][http]        | Configures the HTTP server that receives requests. | no       |
-| `http` > [`tls`][tls] | Configures TLS for the HTTP server.                | no       |
+{{< docs/shared lookup="generated/components/loki/source/aws_firehose/__blocks.md" source="alloy" version="<ALLOY_VERSION>" >}}
 
 The > symbol indicates deeper levels of nesting.
 For example, `http` > `tls` refers to a `tls` block defined inside an `http` block.
 
-[http]: #http
-[grpc]: #grpc
-[tls]: #tls
-
 ### `grpc`
 
-{{< docs/shared lookup="reference/components/loki-server-grpc.md" source="alloy" version="<ALLOY_VERSION>" >}}
+{{< docs/shared lookup="generated/components/loki/source/aws_firehose/grpc.md" source="alloy" version="<ALLOY_VERSION>" >}}
 
 ### `http`
 
-{{< docs/shared lookup="reference/components/server-http.md" source="alloy" version="<ALLOY_VERSION>" >}}
+{{< docs/shared lookup="generated/components/loki/source/aws_firehose/http.md" source="alloy" version="<ALLOY_VERSION>" >}}
 
 ### `tls`
 
 The `tls` block configures TLS for the HTTP and gRPC servers.
 
-{{< docs/shared lookup="reference/components/server-tls-config-block.md" source="alloy" version="<ALLOY_VERSION>" >}}
+{{< docs/shared lookup="generated/components/loki/source/aws_firehose/tls.md" source="alloy" version="<ALLOY_VERSION>" >}}
 
 ## Exported fields
 
-`loki.source.awsfirehose` doesn't export any fields.
+{{< docs/shared lookup="generated/components/loki/source/aws_firehose/__exports.md" source="alloy" version="<ALLOY_VERSION>" >}}
 
 ## Component health
 
@@ -147,11 +133,11 @@ The following are some of the metrics that are exposed when this component is us
 The metrics include labels such as `status_code` where relevant, which you can use to measure request success rates.
 {{< /admonition >}}
 
-* `loki_source_awsfirehose_batch_size` (histogram): Size (in units) of the number of records received per request.
-* `loki_source_awsfirehose_invalid_static_labels_errors` (counter): Count number of errors while processing Data Firehose static labels.
-* `loki_source_awsfirehose_record_errors` (counter): Count of errors while decoding an individual record.
-* `loki_source_awsfirehose_records_received` (counter): Count of records received.
-* `loki_source_awsfirehose_request_errors` (counter): Count of errors while receiving a request.
+- `loki_source_awsfirehose_batch_size` (histogram): Size (in units) of the number of records received per request.
+- `loki_source_awsfirehose_invalid_static_labels_errors` (counter): Count number of errors while processing Data Firehose static labels.
+- `loki_source_awsfirehose_record_errors` (counter): Count of errors while decoding an individual record.
+- `loki_source_awsfirehose_records_received` (counter): Count of records received.
+- `loki_source_awsfirehose_request_errors` (counter): Count of errors while receiving a request.
 
 ## Example
 
@@ -183,8 +169,8 @@ loki.source.awsfirehose "loki_fh_receiver" {
 
 Replace the following:
 
-* _`<USERNAME>`_: Your username.
-* _`<PASSWORD_FILE>`_: Your password file.
+- _`<USERNAME>`_: Your username.
+- _`<PASSWORD_FILE>`_: Your password file.
 
 As another example, if you are receiving records that originated from a CloudWatch logs subscription, you can enrich each received entry by relabeling internal labels.
 The following configuration builds upon the one above but keeps the origin log stream and group as `log_stream` and `log_group`, respectively.
@@ -228,8 +214,8 @@ loki.relabel "logging_origin" {
 
 Replace the following:
 
-* _`<USERNAME>`_: Your username.
-* _`<PASSWORD_FILE>`_: Your password file.
+- _`<USERNAME>`_: Your username.
+- _`<PASSWORD_FILE>`_: Your password file.
 
 <!-- START GENERATED COMPATIBLE COMPONENTS -->
 
@@ -239,7 +225,6 @@ Replace the following:
 
 - Components that export [Loki `LogsReceiver`](../../../compatibility/#loki-logsreceiver-exporters)
 
-
 {{< admonition type="note" >}}
 Connecting some components may not be sensible or components may require further configuration to make the connection work correctly.
 Refer to the linked documentation for more details.
diff --git a/docs/sources/reference/components/loki/loki.source.azure_event_hubs.md b/docs/sources/reference/components/loki/loki.source.azure_event_hubs.md
index a92668d335..6c225dd830 100644
--- a/docs/sources/reference/components/loki/loki.source.azure_event_hubs.md
+++ b/docs/sources/reference/components/loki/loki.source.azure_event_hubs.md
@@ -1,5 +1,4 @@
 ---
-
 canonical: https://grafana.com/docs/alloy/latest/reference/components/loki/loki.source.azure_event_hubs/
 aliases:
   - ../loki.source.azure_event_hubs/ # /docs/alloy/latest/reference/components/loki.source.azure_event_hubs/
@@ -42,17 +41,7 @@ loki.source.azure_event_hubs "<LABEL>" {
 
 You can use the following arguments with `loki.source.azure_event_hubs`:
 
-| Name                        | Type                 | Description                                                                         | Default                          | Required |
-|-----------------------------|----------------------|-------------------------------------------------------------------------------------|----------------------------------|----------|
-| `event_hubs`                | `list(string)`       | Event Hubs to consume.                                                              |                                  | yes      |
-| `forward_to`                | `list(LogsReceiver)` | List of receivers to send log entries to.                                           |                                  | yes      |
-| `fully_qualified_namespace` | `string`             | Event hub namespace.                                                                |                                  | yes      |
-| `assignor`                  | `string`             | The consumer group rebalancing strategy to use.                                     | `"range"`                        | no       |
-| `disallow_custom_messages`  | `bool`               | Whether to ignore messages that don't match the [schema][] for Azure resource logs. | `false`                          | no       |
-| `group_id`                  | `string`             | The Kafka consumer group ID.                                                        | `"loki.source.azure_event_hubs"` | no       |
-| `labels`                    | `map(string)`        | The labels to associate with each received event.                                   | `{}`                             | no       |
-| `relabel_rules`             | `RelabelRules`       | Relabeling rules to apply on log entries.                                           | `{}`                             | no       |
-| `use_incoming_timestamp`    | `bool`               | Whether to use the timestamp received from Azure Event Hub.                         | `false`                          | no       |
+{{< docs/shared lookup="generated/components/loki/source/azure_event_hubs/__arguments.md" source="alloy" version="<ALLOY_VERSION>" >}}
 
 The `fully_qualified_namespace` argument must refer to a full `HOST:PORT` that points to your event hub, such as `NAMESPACE.servicebus.windows.net:9093`.
 The `assignor` argument must be set to one of `"range"`, `"roundrobin"`, or `"sticky"`.
@@ -80,11 +69,7 @@ The following internal labels prefixed with `__` are available but are discarded
 
 You can use the following block with `loki.source.azure_event_hubs`:
 
-| Name                               | Description                                        | Required |
-|------------------------------------|----------------------------------------------------|----------|
-| [`authentication`][authentication] | Authentication configuration with Azure Event Hub. | yes      |
-
-[authentication]: #authentication
+{{< docs/shared lookup="generated/components/loki/source/azure_event_hubs/__blocks.md" source="alloy" version="<ALLOY_VERSION>" >}}
 
 ### `authentication`
 
@@ -92,11 +77,7 @@ You can use the following block with `loki.source.azure_event_hubs`:
 
 The `authentication` block defines the authentication method when communicating with Azure Event Hub.
 
-| Name                | Type           | Description                                                               | Default | Required |
-|---------------------|----------------|---------------------------------------------------------------------------|---------|----------|
-| `mechanism`         | `string`       | Authentication mechanism.                                                 |         | yes      |
-| `connection_string` | `secret`       | Event Hubs ConnectionString for authentication on Azure Cloud.            |         | no       |
-| `scopes`            | `list(string)` | Access token scopes. Default is `fully_qualified_namespace` without port. |         | no       |
+{{< docs/shared lookup="generated/components/loki/source/azure_event_hubs/authentication.md" source="alloy" version="<ALLOY_VERSION>" >}}
 
 `mechanism` supports the values `"connection_string"` and `"oauth"`.
 If `"connection_string"` is used, you must set the `connection_string` attribute.
@@ -104,7 +85,7 @@ If `"oauth"` is used, you must configure one of the [supported credential types]
 
 ## Exported fields
 
-`loki.source.azure_event_hubs` doesn't export any fields.
+`{{< docs/shared lookup="generated/components/loki/source/azure_event_hubs/__exports.md" source="alloy" version="<ALLOY_VERSION>" >}}
 
 ## Component health
 
@@ -144,7 +125,6 @@ loki.write "example" {
 
 - Components that export [Loki `LogsReceiver`](../../../compatibility/#loki-logsreceiver-exporters)
 
-
 {{< admonition type="note" >}}
 Connecting some components may not be sensible or components may require further configuration to make the connection work correctly.
 Refer to the linked documentation for more details.
diff --git a/docs/sources/reference/components/loki/loki.source.cloudflare.md b/docs/sources/reference/components/loki/loki.source.cloudflare.md
index 9848ed97c2..f31366acb6 100644
--- a/docs/sources/reference/components/loki/loki.source.cloudflare.md
+++ b/docs/sources/reference/components/loki/loki.source.cloudflare.md
@@ -1,5 +1,4 @@
 ---
-
 canonical: https://grafana.com/docs/alloy/latest/reference/components/loki/loki.source.cloudflare/
 aliases:
   - ../loki.source.cloudflare/ # /docs/alloy/latest/reference/components/loki.source.cloudflare/
@@ -34,98 +33,91 @@ loki.source.cloudflare "<LABEL>" {
 
 You can use the following arguments with `loki.source.cloudflare`:
 
-| Name                | Type                 | Description                                                                   | Default     | Required |
-| ------------------- | -------------------- | ----------------------------------------------------------------------------- | ----------- | -------- |
-| `api_token`         | `secret`             | The API token to authenticate with.                                           |             | yes      |
-| `forward_to`        | `list(LogsReceiver)` | List of receivers to send log entries to.                                     |             | yes      |
-| `zone_id`           | `string`             | The Cloudflare zone ID to use.                                                |             | yes      |
-| `additional_fields` | `list(string)`       | The additional list of fields to supplement those provided via `fields_type`. |             | no       |
-| `fields_type`       | `string`             | The set of fields to fetch for log entries.                                   | `"default"` | no       |
-| `labels`            | `map(string)`        | The labels to associate with incoming log entries.                            | `{}`        | no       |
-| `pull_range`        | `duration`           | The timeframe to fetch for each pull request.                                 | `"1m"`      | no       |
-| `workers`           | `int`                | The number of workers to use for parsing logs.                                | `3`         | no       |
+{{< docs/shared lookup="generated/components/loki/source/cloudflare/__arguments.md" source="alloy" version="<ALLOY_VERSION>" >}}
 
 By default `loki.source.cloudflare` fetches logs with the `default` set of fields.
 The following list shows the different sets of `fields_type` available for selection, and the fields they include:
 
-* `default` includes:
-{{< column-list >}}
-  * `"ClientIP"`
-  * `"ClientRequestHost"`
-  * `"ClientRequestMethod"`
-  * `"ClientRequestURI"`
-  * `"EdgeEndTimestamp"`
-  * `"EdgeResponseBytes"`
-  * `"EdgeRequestHost"`
-  * `"EdgeResponseStatus"`
-  * `"EdgeStartTimestamp"`
-  * `"RayID"`
-{{< /column-list >}}
+- `default` includes:
+  {{< column-list >}}
+
+  - `"ClientIP"`
+  - `"ClientRequestHost"`
+  - `"ClientRequestMethod"`
+  - `"ClientRequestURI"`
+  - `"EdgeEndTimestamp"`
+  - `"EdgeResponseBytes"`
+  - `"EdgeRequestHost"`
+  - `"EdgeResponseStatus"`
+  - `"EdgeStartTimestamp"`
+  - `"RayID"`
+    {{< /column-list >}}
 
   plus any extra fields provided via `additional_fields` argument.
-* `minimal` includes all `default` fields and adds:
-{{< column-list >}}
-  * `"ZoneID"`
-  * `"ClientSSLProtocol"`
-  * `"ClientRequestProtocol"`
-  * `"ClientRequestPath"`
-  * `"ClientRequestUserAgent"`
-  * `"ClientRequestReferer"`
-  * `"EdgeColoCode"`
-  * `"ClientCountry"`
-  * `"CacheCacheStatus"`
-  * `"CacheResponseStatus"`
-  * `"EdgeResponseContentType"`
-{{< /column-list >}}
-   plus any extra fields provided via `additional_fields` argument.
-* `extended` includes all `minimal` fields and adds:
-{{< column-list >}}
-  * `"ClientSSLCipher"`
-  * `"ClientASN"`
-  * `"ClientIPClass"`
-  * `"CacheResponseBytes"`
-  * `"EdgePathingOp"`
-  * `"EdgePathingSrc"`
-  * `"EdgePathingStatus"`
-  * `"ParentRayID"`
-  * `"WorkerCPUTime"`
-  * `"WorkerStatus"`
-  * `"WorkerSubrequest"`
-  * `"WorkerSubrequestCount"`
-  * `"OriginIP"`
-  * `"OriginResponseStatus"`
-  * `"OriginSSLProtocol"`
-  * `"OriginResponseHTTPExpires"`
-  * `"OriginResponseHTTPLastModified"`
- {{< /column-list >}}
-  plus any extra fields provided via `additional_fields` argument.
-* `all` includes all `extended` fields and adds:
-{{< column-list >}}
-  * `"BotScore"`
-  * `"BotScoreSrc"`
-  * `"BotTags"`
-  * `"ClientRequestBytes"`
-  * `"ClientSrcPort"`
-  * `"ClientXRequestedWith"`
-  * `"CacheTieredFill"`
-  * `"EdgeResponseCompressionRatio"`
-  * `"EdgeServerIP"`
-  * `"FirewallMatchesSources"`
-  * `"FirewallMatchesActions"`
-  * `"FirewallMatchesRuleIDs"`
-  * `"OriginResponseBytes"`
-  * `"OriginResponseTime"`
-  * `"ClientDeviceType"`
-  * `"WAFFlags"`
-  * `"WAFMatchedVar"`
-  * `"EdgeColoID"`
-  * `"RequestHeaders"`
-  * `"ResponseHeaders"`
-  * `"ClientRequestSource"`
-{{< /column-list >}}
-  plus any extra fields provided via `additional_fields` argument.
-  This is still relevant in this case if new fields are made available via Cloudflare API but aren't yet included in `all`.
-* `custom` includes only the fields defined in `additional_fields`.
+
+- `minimal` includes all `default` fields and adds:
+  {{< column-list >}}
+  - `"ZoneID"`
+  - `"ClientSSLProtocol"`
+  - `"ClientRequestProtocol"`
+  - `"ClientRequestPath"`
+  - `"ClientRequestUserAgent"`
+  - `"ClientRequestReferer"`
+  - `"EdgeColoCode"`
+  - `"ClientCountry"`
+  - `"CacheCacheStatus"`
+  - `"CacheResponseStatus"`
+  - `"EdgeResponseContentType"`
+    {{< /column-list >}}
+    plus any extra fields provided via `additional_fields` argument.
+- `extended` includes all `minimal` fields and adds:
+  {{< column-list >}}
+  - `"ClientSSLCipher"`
+  - `"ClientASN"`
+  - `"ClientIPClass"`
+  - `"CacheResponseBytes"`
+  - `"EdgePathingOp"`
+  - `"EdgePathingSrc"`
+  - `"EdgePathingStatus"`
+  - `"ParentRayID"`
+  - `"WorkerCPUTime"`
+  - `"WorkerStatus"`
+  - `"WorkerSubrequest"`
+  - `"WorkerSubrequestCount"`
+  - `"OriginIP"`
+  - `"OriginResponseStatus"`
+  - `"OriginSSLProtocol"`
+  - `"OriginResponseHTTPExpires"`
+  - `"OriginResponseHTTPLastModified"`
+    {{< /column-list >}}
+    plus any extra fields provided via `additional_fields` argument.
+- `all` includes all `extended` fields and adds:
+  {{< column-list >}}
+  - `"BotScore"`
+  - `"BotScoreSrc"`
+  - `"BotTags"`
+  - `"ClientRequestBytes"`
+  - `"ClientSrcPort"`
+  - `"ClientXRequestedWith"`
+  - `"CacheTieredFill"`
+  - `"EdgeResponseCompressionRatio"`
+  - `"EdgeServerIP"`
+  - `"FirewallMatchesSources"`
+  - `"FirewallMatchesActions"`
+  - `"FirewallMatchesRuleIDs"`
+  - `"OriginResponseBytes"`
+  - `"OriginResponseTime"`
+  - `"ClientDeviceType"`
+  - `"WAFFlags"`
+  - `"WAFMatchedVar"`
+  - `"EdgeColoID"`
+  - `"RequestHeaders"`
+  - `"ResponseHeaders"`
+  - `"ClientRequestSource"`
+    {{< /column-list >}}
+    plus any extra fields provided via `additional_fields` argument.
+    This is still relevant in this case if new fields are made available via Cloudflare API but aren't yet included in `all`.
+- `custom` includes only the fields defined in `additional_fields`.
 
 The component saves the last successfully fetched timestamp in its positions file.
 If a position is found in the file for a given zone ID, the component restarts pulling logs from that timestamp.
@@ -213,11 +205,11 @@ A sample log looks like this:
 
 ## Blocks
 
-The `loki.source.cloudflare` component doesn't support any blocks. You can configure this component with arguments.
+{{< docs/shared lookup="generated/components/loki/source/cloudflare/__blocks.md" source="alloy" version="<ALLOY_VERSION>" >}}
 
 ## Exported fields
 
-`loki.source.cloudflare` doesn't export any fields.
+{{< docs/shared lookup="generated/components/loki/source/cloudflare/__exports.md" source="alloy" version="<ALLOY_VERSION>" >}}
 
 ## Component health
 
@@ -227,17 +219,17 @@ The `loki.source.cloudflare` component doesn't support any blocks. You can confi
 
 `loki.source.cloudflare` exposes the following debug information:
 
-* Whether the target is ready and reading logs from the API.
-* The Cloudflare zone ID.
-* The last error reported, if any.
-* The stored positions file entry, as the combination of `zone_id`, labels and last fetched timestamp.
-* The last timestamp fetched.
-* The set of fields being fetched.
+- Whether the target is ready and reading logs from the API.
+- The Cloudflare zone ID.
+- The last error reported, if any.
+- The stored positions file entry, as the combination of `zone_id`, labels and last fetched timestamp.
+- The last timestamp fetched.
+- The set of fields being fetched.
 
 ## Debug metrics
 
-* `loki_source_cloudflare_target_entries_total` (counter): Total number of successful entries sent via the cloudflare target.
-* `loki_source_cloudflare_target_last_requested_end_timestamp` (gauge): The last cloudflare request end timestamp fetched, for calculating how far behind the target is.
+- `loki_source_cloudflare_target_entries_total` (counter): Total number of successful entries sent via the cloudflare target.
+- `loki_source_cloudflare_target_last_requested_end_timestamp` (gauge): The last cloudflare request end timestamp fetched, for calculating how far behind the target is.
 
 ## Example
 
@@ -266,7 +258,6 @@ loki.write "local" {
 
 - Components that export [Loki `LogsReceiver`](../../../compatibility/#loki-logsreceiver-exporters)
 
-
 {{< admonition type="note" >}}
 Connecting some components may not be sensible or components may require further configuration to make the connection work correctly.
 Refer to the linked documentation for more details.
diff --git a/docs/sources/reference/components/prometheus/prometheus.exporter.cloudwatch.md b/docs/sources/reference/components/prometheus/prometheus.exporter.cloudwatch.md
index e7c361c9c9..f7483d0f2f 100644
--- a/docs/sources/reference/components/prometheus/prometheus.exporter.cloudwatch.md
+++ b/docs/sources/reference/components/prometheus/prometheus.exporter.cloudwatch.md
@@ -424,7 +424,6 @@ When you configure a discovery job, make sure the `type` field of each `discover
 * Namespace: `AWS/Cognito`
 * Namespace: `AWS/DataSync`
 * Namespace: `AWS/DDoSProtection`
-* Namespace: `AWS/DirectoryService`
 * Namespace: `AWS/DMS`
 * Namespace: `AWS/DocDB`
 * Namespace: `AWS/DX`
@@ -466,9 +465,9 @@ When you configure a discovery job, make sure the `type` field of each `discover
 * Namespace: `AWS/MWAA`
 * Namespace: `AWS/NATGateway`
 * Namespace: `AWS/Neptune`
+* Namespace: `AWS/Network Manager`
 * Namespace: `AWS/NetworkELB`
 * Namespace: `AWS/NetworkFirewall`
-* Namespace: `AWS/Network Manager`
 * Namespace: `AWS/PrivateLinkEndpoints`
 * Namespace: `AWS/PrivateLinkServices`
 * Namespace: `AWS/Prometheus`
@@ -476,7 +475,6 @@ When you configure a discovery job, make sure the `type` field of each `discover
 * Namespace: `AWS/QuickSight`
 * Namespace: `AWS/RDS`
 * Namespace: `AWS/Redshift`
-* Namespace: `AWS/Redshift-Serverless`
 * Namespace: `AWS/Route53`
 * Namespace: `AWS/Route53Resolver`
 * Namespace: `AWS/RUM`
diff --git a/docs/sources/shared/generated/components/loki/enrich/__arguments.md b/docs/sources/shared/generated/components/loki/enrich/__arguments.md
new file mode 100644
index 0000000000..1ee60c1049
--- /dev/null
+++ b/docs/sources/shared/generated/components/loki/enrich/__arguments.md
@@ -0,0 +1,7 @@
+| Name  | Type  | Description  | Default  | Required |
+| ----- | ----- | ------------ | -------- | -------- |
+| `forward_to` | `[]loki.LogsReceiver` | List of receivers to send enriched logs to. |  | yes |
+| `labels_to_copy` | `array` | List of labels to copy from discovered targets to logs. If empty, all labels will be copied. |  | no |
+| `logs_match_label` | `string` | The label from incoming logs to match against discovered targets. |  | no |
+| `target_match_label` | `string` | The label from discovered targets to match against, for example, "__inventory_consul_service". |  | yes |
+| `targets` | `[]discovery.Target` | List of targets from a discovery component. |  | yes |
diff --git a/docs/sources/shared/generated/components/loki/enrich/__blocks.md b/docs/sources/shared/generated/components/loki/enrich/__blocks.md
new file mode 100644
index 0000000000..469d5a21dc
--- /dev/null
+++ b/docs/sources/shared/generated/components/loki/enrich/__blocks.md
@@ -0,0 +1 @@
+There are no blocks.
\ No newline at end of file
diff --git a/docs/sources/shared/generated/components/loki/enrich/__exports.md b/docs/sources/shared/generated/components/loki/enrich/__exports.md
new file mode 100644
index 0000000000..05fad35326
--- /dev/null
+++ b/docs/sources/shared/generated/components/loki/enrich/__exports.md
@@ -0,0 +1,3 @@
+| Name | Type | Description |
+| ---- | ---- | ----------- |
+| `receiver` | `loki.LogsReceiver` | A receiver that can be used to send logs to this component. |
diff --git a/docs/sources/shared/generated/components/loki/source/api/__arguments.md b/docs/sources/shared/generated/components/loki/source/api/__arguments.md
new file mode 100644
index 0000000000..37683aadc9
--- /dev/null
+++ b/docs/sources/shared/generated/components/loki/source/api/__arguments.md
@@ -0,0 +1,7 @@
+| Name  | Type  | Description  | Default  | Required |
+| ----- | ----- | ------------ | -------- | -------- |
+| `forward_to` | `list(LogsReceiver)` | List of receivers to send log entries to. |  | yes |
+| `labels` | `map(string)` | The labels to associate with each received logs record. | `{}` | no |
+| `max_send_message_size` | `size` | Maximum size of a request to the push API. | `"100MiB"` | no |
+| `relabel_rules` | `RelabelRules` | Relabeling rules to apply on log entries. | `{}` | no |
+| `use_incoming_timestamp` | `bool` | Whether to use the timestamp received from request. | `false` | no |
diff --git a/docs/sources/shared/generated/components/loki/source/api/__blocks.md b/docs/sources/shared/generated/components/loki/source/api/__blocks.md
new file mode 100644
index 0000000000..b637a45791
--- /dev/null
+++ b/docs/sources/shared/generated/components/loki/source/api/__blocks.md
@@ -0,0 +1,13 @@
+| Block | Description | Required |
+| ----- | ----------- | -------- |
+| [`grpc`][grpc] | Configures the gRPC server that receives requests. | no |
+| [`http`][http] | Configures the HTTP server that receives requests. | no |
+| [`tls`][tls] | Configures TLS for the server. | no |
+| grpc > [`tls`][tls] | Configures TLS for the gRPC server. | no |
+| http > [`tls`][tls] | Configures TLS for the HTTP server. | no |
+
+[grpc]: #grpc
+[http]: #http
+[tls]: #tls
+[tls]: #tls
+[tls]: #tls
diff --git a/docs/sources/shared/generated/components/loki/source/api/__exports.md b/docs/sources/shared/generated/components/loki/source/api/__exports.md
new file mode 100644
index 0000000000..f5391d7979
--- /dev/null
+++ b/docs/sources/shared/generated/components/loki/source/api/__exports.md
@@ -0,0 +1 @@
+There are no exports.
\ No newline at end of file
diff --git a/docs/sources/shared/generated/components/loki/source/api/grpc.md b/docs/sources/shared/generated/components/loki/source/api/grpc.md
new file mode 100644
index 0000000000..c179653efc
--- /dev/null
+++ b/docs/sources/shared/generated/components/loki/source/api/grpc.md
@@ -0,0 +1,11 @@
+| Name  | Type  | Description  | Default  | Required |
+| ----- | ----- | ------------ | -------- | -------- |
+| `conn_limit` | `int` | Maximum number of simultaneous gRPC connections. Defaults to no limit. | `0` | no |
+| `listen_address` | `string` | Network address on which the server listens for new connections. Defaults to accepting all incoming connections. | `""` | no |
+| `listen_port` | `int` | Port number on which the server listens for new connections. Defaults to a random free port. | `0` | no |
+| `max_connection_age` | `duration` | The duration for the maximum time a connection may exist before it's closed. | `"infinity"` | no |
+| `max_connection_age_grace` | `duration` | An additive period after max_connection_age after which the connection is forcibly closed. | `"infinity"` | no |
+| `max_connection_idle` | `duration` | The duration after which an idle connection is closed. | `"infinity"` | no |
+| `server_max_concurrent_streams` | `int` | Limit on the number of concurrent streams for gRPC calls (0 = unlimited). | `100` | no |
+| `server_max_recv_msg_size` | `int` | Maximum receive message size. |  | no |
+| `server_max_send_msg_size` | `int` | Maximum send message size. |  | no |
diff --git a/docs/sources/shared/generated/components/loki/source/api/http.md b/docs/sources/shared/generated/components/loki/source/api/http.md
new file mode 100644
index 0000000000..fdfb6efebc
--- /dev/null
+++ b/docs/sources/shared/generated/components/loki/source/api/http.md
@@ -0,0 +1,8 @@
+| Name  | Type  | Description  | Default  | Required |
+| ----- | ----- | ------------ | -------- | -------- |
+| `conn_limit` | `int` | Maximum number of simultaneous HTTP connections. Defaults to no limit. | `0` | no |
+| `listen_address` | `string` | Network address on which the server listens for new connections. Defaults to accepting all incoming connections. | `""` | no |
+| `listen_port` | `int` | Port number on which the server listens for new connections. | `8080` | no |
+| `server_idle_timeout` | `duration` | Idle timeout for HTTP server. | `"120s"` | no |
+| `server_read_timeout` | `duration` | Read timeout for HTTP server. | `"30s"` | no |
+| `server_write_timeout` | `duration` | Write timeout for HTTP server. | `"30s"` | no |
diff --git a/docs/sources/shared/generated/components/loki/source/api/tls.md b/docs/sources/shared/generated/components/loki/source/api/tls.md
new file mode 100644
index 0000000000..cb93208fa6
--- /dev/null
+++ b/docs/sources/shared/generated/components/loki/source/api/tls.md
@@ -0,0 +1,11 @@
+| Name  | Type  | Description  | Default  | Required |
+| ----- | ----- | ------------ | -------- | -------- |
+| `cert_file` | `string` | Path to client certificate file. |  | no |
+| `cert_pem` | `string` | Client certificate in PEM format. |  | no |
+| `cipher_suites` | `string` | Cipher suites to use. |  | no |
+| `client_auth_type` | `string` | Client authentication type. |  | no |
+| `client_ca` | `string` | Client CA in PEM format. |  | no |
+| `client_ca_file` | `string` | Path to client CA file. |  | no |
+| `key_file` | `string` | Path to client key file. |  | no |
+| `key_pem` | `secret` | Client key in PEM format. |  | no |
+| `min_version` | `string` | Minimum TLS version. |  | no |
diff --git a/docs/sources/shared/generated/components/loki/source/aws_firehose/__arguments.md b/docs/sources/shared/generated/components/loki/source/aws_firehose/__arguments.md
new file mode 100644
index 0000000000..46a116cbdd
--- /dev/null
+++ b/docs/sources/shared/generated/components/loki/source/aws_firehose/__arguments.md
@@ -0,0 +1,6 @@
+| Name  | Type  | Description  | Default  | Required |
+| ----- | ----- | ------------ | -------- | -------- |
+| `access_key` | `secret` | If set, require Data Firehose to provide a matching key. | `""` | no |
+| `forward_to` | `list(LogsReceiver)` | List of receivers to send log entries to. |  | yes |
+| `relabel_rules` | `RelabelRules` | Relabeling rules to apply on log entries. | `{}` | no |
+| `use_incoming_timestamp` | `bool` | Whether to use the timestamp received from the request. | `false` | no |
diff --git a/docs/sources/shared/generated/components/loki/source/aws_firehose/__blocks.md b/docs/sources/shared/generated/components/loki/source/aws_firehose/__blocks.md
new file mode 100644
index 0000000000..b637a45791
--- /dev/null
+++ b/docs/sources/shared/generated/components/loki/source/aws_firehose/__blocks.md
@@ -0,0 +1,13 @@
+| Block | Description | Required |
+| ----- | ----------- | -------- |
+| [`grpc`][grpc] | Configures the gRPC server that receives requests. | no |
+| [`http`][http] | Configures the HTTP server that receives requests. | no |
+| [`tls`][tls] | Configures TLS for the server. | no |
+| grpc > [`tls`][tls] | Configures TLS for the gRPC server. | no |
+| http > [`tls`][tls] | Configures TLS for the HTTP server. | no |
+
+[grpc]: #grpc
+[http]: #http
+[tls]: #tls
+[tls]: #tls
+[tls]: #tls
diff --git a/docs/sources/shared/generated/components/loki/source/aws_firehose/__exports.md b/docs/sources/shared/generated/components/loki/source/aws_firehose/__exports.md
new file mode 100644
index 0000000000..f5391d7979
--- /dev/null
+++ b/docs/sources/shared/generated/components/loki/source/aws_firehose/__exports.md
@@ -0,0 +1 @@
+There are no exports.
\ No newline at end of file
diff --git a/docs/sources/shared/generated/components/loki/source/aws_firehose/grpc.md b/docs/sources/shared/generated/components/loki/source/aws_firehose/grpc.md
new file mode 100644
index 0000000000..c179653efc
--- /dev/null
+++ b/docs/sources/shared/generated/components/loki/source/aws_firehose/grpc.md
@@ -0,0 +1,11 @@
+| Name  | Type  | Description  | Default  | Required |
+| ----- | ----- | ------------ | -------- | -------- |
+| `conn_limit` | `int` | Maximum number of simultaneous gRPC connections. Defaults to no limit. | `0` | no |
+| `listen_address` | `string` | Network address on which the server listens for new connections. Defaults to accepting all incoming connections. | `""` | no |
+| `listen_port` | `int` | Port number on which the server listens for new connections. Defaults to a random free port. | `0` | no |
+| `max_connection_age` | `duration` | The duration for the maximum time a connection may exist before it's closed. | `"infinity"` | no |
+| `max_connection_age_grace` | `duration` | An additive period after max_connection_age after which the connection is forcibly closed. | `"infinity"` | no |
+| `max_connection_idle` | `duration` | The duration after which an idle connection is closed. | `"infinity"` | no |
+| `server_max_concurrent_streams` | `int` | Limit on the number of concurrent streams for gRPC calls (0 = unlimited). | `100` | no |
+| `server_max_recv_msg_size` | `int` | Maximum receive message size. |  | no |
+| `server_max_send_msg_size` | `int` | Maximum send message size. |  | no |
diff --git a/docs/sources/shared/generated/components/loki/source/aws_firehose/http.md b/docs/sources/shared/generated/components/loki/source/aws_firehose/http.md
new file mode 100644
index 0000000000..fdfb6efebc
--- /dev/null
+++ b/docs/sources/shared/generated/components/loki/source/aws_firehose/http.md
@@ -0,0 +1,8 @@
+| Name  | Type  | Description  | Default  | Required |
+| ----- | ----- | ------------ | -------- | -------- |
+| `conn_limit` | `int` | Maximum number of simultaneous HTTP connections. Defaults to no limit. | `0` | no |
+| `listen_address` | `string` | Network address on which the server listens for new connections. Defaults to accepting all incoming connections. | `""` | no |
+| `listen_port` | `int` | Port number on which the server listens for new connections. | `8080` | no |
+| `server_idle_timeout` | `duration` | Idle timeout for HTTP server. | `"120s"` | no |
+| `server_read_timeout` | `duration` | Read timeout for HTTP server. | `"30s"` | no |
+| `server_write_timeout` | `duration` | Write timeout for HTTP server. | `"30s"` | no |
diff --git a/docs/sources/shared/generated/components/loki/source/aws_firehose/tls.md b/docs/sources/shared/generated/components/loki/source/aws_firehose/tls.md
new file mode 100644
index 0000000000..cb93208fa6
--- /dev/null
+++ b/docs/sources/shared/generated/components/loki/source/aws_firehose/tls.md
@@ -0,0 +1,11 @@
+| Name  | Type  | Description  | Default  | Required |
+| ----- | ----- | ------------ | -------- | -------- |
+| `cert_file` | `string` | Path to client certificate file. |  | no |
+| `cert_pem` | `string` | Client certificate in PEM format. |  | no |
+| `cipher_suites` | `string` | Cipher suites to use. |  | no |
+| `client_auth_type` | `string` | Client authentication type. |  | no |
+| `client_ca` | `string` | Client CA in PEM format. |  | no |
+| `client_ca_file` | `string` | Path to client CA file. |  | no |
+| `key_file` | `string` | Path to client key file. |  | no |
+| `key_pem` | `secret` | Client key in PEM format. |  | no |
+| `min_version` | `string` | Minimum TLS version. |  | no |
diff --git a/docs/sources/shared/generated/components/loki/source/azure_event_hubs/__arguments.md b/docs/sources/shared/generated/components/loki/source/azure_event_hubs/__arguments.md
new file mode 100644
index 0000000000..3f61bf3abe
--- /dev/null
+++ b/docs/sources/shared/generated/components/loki/source/azure_event_hubs/__arguments.md
@@ -0,0 +1,11 @@
+| Name  | Type  | Description  | Default  | Required |
+| ----- | ----- | ------------ | -------- | -------- |
+| `assignor` | `string` | The consumer group rebalancing strategy to use. | `"range"` | no |
+| `disallow_custom_messages` | `bool` | Whether to ignore messages that don't match the schema for Azure resource logs. | `false` | no |
+| `event_hubs` | `list(string)` | Event Hubs to consume. |  | yes |
+| `forward_to` | `list(LogsReceiver)` | List of receivers to send log entries to. |  | yes |
+| `fully_qualified_namespace` | `string` | Event hub namespace. Must refer to a full HOST:PORT that points to your event hub, such as NAMESPACE.servicebus.windows.net:9093. |  | yes |
+| `group_id` | `string` | The Kafka consumer group ID. | `"loki.source.azure_event_hubs"` | no |
+| `labels` | `map(string)` | The labels to associate with each received event. | `{}` | no |
+| `relabel_rules` | `RelabelRules` | Relabeling rules to apply on log entries. | `{}` | no |
+| `use_incoming_timestamp` | `bool` | Whether to use the timestamp received from Azure Event Hub. | `false` | no |
diff --git a/docs/sources/shared/generated/components/loki/source/azure_event_hubs/__blocks.md b/docs/sources/shared/generated/components/loki/source/azure_event_hubs/__blocks.md
new file mode 100644
index 0000000000..254804fbd4
--- /dev/null
+++ b/docs/sources/shared/generated/components/loki/source/azure_event_hubs/__blocks.md
@@ -0,0 +1,5 @@
+| Block | Description | Required |
+| ----- | ----------- | -------- |
+| [`authentication`][authentication] | Authentication configuration with Azure Event Hub. | yes |
+
+[authentication]: #authentication
diff --git a/docs/sources/shared/generated/components/loki/source/azure_event_hubs/__exports.md b/docs/sources/shared/generated/components/loki/source/azure_event_hubs/__exports.md
new file mode 100644
index 0000000000..f5391d7979
--- /dev/null
+++ b/docs/sources/shared/generated/components/loki/source/azure_event_hubs/__exports.md
@@ -0,0 +1 @@
+There are no exports.
\ No newline at end of file
diff --git a/docs/sources/shared/generated/components/loki/source/azure_event_hubs/authentication.md b/docs/sources/shared/generated/components/loki/source/azure_event_hubs/authentication.md
new file mode 100644
index 0000000000..d5f27c94e4
--- /dev/null
+++ b/docs/sources/shared/generated/components/loki/source/azure_event_hubs/authentication.md
@@ -0,0 +1,5 @@
+| Name  | Type  | Description  | Default  | Required |
+| ----- | ----- | ------------ | -------- | -------- |
+| `connection_string` | `secret` | Event Hubs ConnectionString for authentication on Azure Cloud. |  | no |
+| `mechanism` | `string` | Authentication mechanism. |  | yes |
+| `scopes` | `list(string)` | Access token scopes. Default is fully_qualified_namespace without port. |  | no |
diff --git a/docs/sources/shared/generated/components/loki/source/cloudflare/__arguments.md b/docs/sources/shared/generated/components/loki/source/cloudflare/__arguments.md
new file mode 100644
index 0000000000..b92359a768
--- /dev/null
+++ b/docs/sources/shared/generated/components/loki/source/cloudflare/__arguments.md
@@ -0,0 +1,12 @@
+| Name  | Type  | Description  | Default  | Required |
+| ----- | ----- | ------------ | -------- | -------- |
+| `additional_fields` | `list(string)` | The additional list of fields to supplement those provided via fields_type. |  | no |
+| `api_token` | `secret` | The API token to authenticate with. |  | yes |
+| `fields_type` | `string` | The set of fields to fetch for log entries. | `"default"` | no |
+| `forward_to` | `list(LogsReceiver)` | List of receivers to send log entries to. |  | yes |
+| `labels` | `map(string)` | The labels to associate with each received log entry. | `{}` | no |
+| `pull_range` | `duration` | The timeframe to fetch for each pull request. | `"1m"` | no |
+| `relabel_rules` | `RelabelRules` | Relabeling rules to apply on log entries. | `{}` | no |
+| `use_incoming_timestamp` | `bool` | Whether to use the timestamp received from the request. | `false` | no |
+| `workers` | `int` | The number of workers to use for parsing logs. | `3` | no |
+| `zone_id` | `string` | The Cloudflare zone ID to use. |  | yes |
diff --git a/docs/sources/shared/generated/components/loki/source/cloudflare/__blocks.md b/docs/sources/shared/generated/components/loki/source/cloudflare/__blocks.md
new file mode 100644
index 0000000000..469d5a21dc
--- /dev/null
+++ b/docs/sources/shared/generated/components/loki/source/cloudflare/__blocks.md
@@ -0,0 +1 @@
+There are no blocks.
\ No newline at end of file
diff --git a/docs/sources/shared/generated/components/loki/source/cloudflare/__exports.md b/docs/sources/shared/generated/components/loki/source/cloudflare/__exports.md
new file mode 100644
index 0000000000..f5391d7979
--- /dev/null
+++ b/docs/sources/shared/generated/components/loki/source/cloudflare/__exports.md
@@ -0,0 +1 @@
+There are no exports.
\ No newline at end of file
diff --git a/go.mod b/go.mod
index 2304f8b1ce..1c186c1ff9 100644
--- a/go.mod
+++ b/go.mod
@@ -510,7 +510,7 @@ require (
 	github.com/bmatcuk/doublestar/v4 v4.9.1 // indirect
 	github.com/briandowns/spinner v1.23.0 // indirect
 	github.com/c2h5oh/datasize v0.0.0-20231215233829-aa82cc1e6500 // indirect
-	github.com/caarlos0/env/v9 v9.0.0 // indirect
+	github.com/caarlos0/env/v9 v9.0.0
 	github.com/cenkalti/backoff v2.2.1+incompatible // indirect
 	github.com/cenkalti/backoff/v4 v4.3.0 // indirect
 	github.com/cenkalti/backoff/v5 v5.0.3 // indirect
diff --git a/go.sum b/go.sum
index 8b515ed34a..9706685c27 100644
--- a/go.sum
+++ b/go.sum
@@ -1194,8 +1194,6 @@ github.com/grafana/tail v0.0.0-20230510142333-77b18831edf0 h1:bjh0PVYSVVFxzINqPF
 github.com/grafana/tail v0.0.0-20230510142333-77b18831edf0/go.mod h1:7t5XR+2IA8P2qggOAHTj/GCZfoLBle3OvNSYh1VkRBU=
 github.com/grafana/vmware_exporter v0.0.5-beta.0.20250218170317-73398ba08329 h1:Rs4H1yv2Abk3xE82qpyhMGGA8rswAOA0HQZde/BYkFo=
 github.com/grafana/vmware_exporter v0.0.5-beta.0.20250218170317-73398ba08329/go.mod h1:Z28219aViNlsLlPvuCnlgHDagRdZBAZ7JOnQg1b3eWg=
-github.com/grafana/walqueue v0.0.0-20250916201216-152b1f10cca2 h1:6HRYKHfWwdIoBF5jvVAYnARFHJiKe+++j1Oxh6A1mNw=
-github.com/grafana/walqueue v0.0.0-20250916201216-152b1f10cca2/go.mod h1:LJm4P3SayTHSbHBYepsAf3WqlY/gwSYQyMs7OLLAi6A=
 github.com/grafana/walqueue v0.0.0-20250919134944-0471c03aa304 h1:0Mllr6XQcAzwxGh/zHQbL/BtVGNRzRmIRBZRHqTiG3E=
 github.com/grafana/walqueue v0.0.0-20250919134944-0471c03aa304/go.mod h1:RokiltsxYrF3qitnIdaFBGLz5UrCo7DZMMoJrrzHyPc=
 github.com/grobie/gomemcache v0.0.0-20230213081705-239240bbc445 h1:FlKQKUYPZ5yDCN248M3R7x8yu2E3yEZ0H7aLomE4EoE=
diff --git a/internal/component/common/net/schema.yml b/internal/component/common/net/schema.yml
new file mode 100644
index 0000000000..f4060087d1
--- /dev/null
+++ b/internal/component/common/net/schema.yml
@@ -0,0 +1,270 @@
+id: grafana/alloy/internal/component/common/net
+"$defs":
+  http:
+    description: >-
+      Configures the HTTP server that receives requests.
+    type: object
+    properties:
+      conn_limit:
+        description: >-
+          Maximum number of simultaneous HTTP connections. Defaults to no limit.
+        type: integer
+        default: 0
+
+      listen_address:
+        description: >-
+          Network address on which the server listens for new connections. Defaults to accepting all incoming connections.
+        type: string
+        alloy:
+          # TODO: We shouldn't have to set this explicitly.
+          default_override: '""'
+
+      listen_port:
+        description: >-
+          Port number on which the server listens for new connections.
+        type: integer
+        default: 8080
+
+      server_idle_timeout:
+        description: >-
+          Idle timeout for HTTP server.
+        type: string
+        default: "120s"
+        alloy:
+          type_override: "duration"
+
+      server_read_timeout:
+        description: >-
+          Read timeout for HTTP server.
+        type: string
+        default: "30s"
+        alloy:
+          type_override: "duration"
+
+      server_write_timeout:
+        description: >-
+          Write timeout for HTTP server.
+        type: string
+        default: "30s"
+        alloy:
+          type_override: "duration"
+
+      tls:
+        description: >-
+          Configures TLS for the HTTP server.
+        type: object
+        properties:
+          cert_pem:
+            description: >-
+              Client certificate in PEM format.
+            type: string
+
+          key_pem:
+            description: >-
+              Client key in PEM format.
+            type: string
+            alloy:
+              type_override: "secret"
+
+          cert_file:
+            description: >-
+              Path to client certificate file.
+            type: string
+
+          key_file:
+            description: >-
+              Path to client key file.
+            type: string
+
+          client_auth_type:
+            description: >-
+              Client authentication type.
+            type: string
+
+          client_ca_file:
+            description: >-
+              Path to client CA file.
+            type: string
+
+          client_ca:
+            description: >-
+              Client CA in PEM format.
+            type: string
+
+          cipher_suites:
+            description: >-
+              Cipher suites to use.
+            type: string
+
+          min_version:
+            description: >-
+              Minimum TLS version.
+            type: string
+
+  grpc:
+    description: >-
+      Configures the gRPC server that receives requests.
+    type: object
+    properties:
+      conn_limit:
+        description: >-
+          Maximum number of simultaneous gRPC connections. Defaults to no limit.
+        type: integer
+        default: 0
+
+      listen_address:
+        description: >-
+          Network address on which the server listens for new connections. Defaults to accepting all incoming connections.
+        type: string
+        alloy:
+          default_override: '""'
+
+      listen_port:
+        description: >-
+          Port number on which the server listens for new connections. Defaults to a random free port.
+        type: integer
+        default: 0
+
+      max_connection_age:
+        description: >-
+          The duration for the maximum time a connection may exist before it's closed.
+        type: string
+        default: "infinity"
+        alloy:
+          type_override: "duration"
+
+      max_connection_age_grace:
+        description: >-
+          An additive period after max_connection_age after which the connection is forcibly closed.
+        type: string
+        default: "infinity"
+        alloy:
+          type_override: "duration"
+
+      max_connection_idle:
+        description: >-
+          The duration after which an idle connection is closed.
+        type: string
+        default: "infinity"
+        alloy:
+          type_override: "duration"
+
+      server_max_recv_msg_size:
+        description: >-
+          Maximum receive message size.
+        type: integer
+
+      server_max_send_msg_size:
+        description: >-
+          Maximum send message size.
+        type: integer
+
+      server_max_concurrent_streams:
+        description: >-
+          Limit on the number of concurrent streams for gRPC calls (0 = unlimited).
+        type: integer
+        default: 100
+
+      tls:
+        description: >-
+          Configures TLS for the gRPC server.
+        type: object
+        properties:
+          cert_pem:
+            description: >-
+              Client certificate in PEM format.
+            type: string
+
+          key_pem:
+            description: >-
+              Client key in PEM format.
+            type: string
+            alloy:
+              type_override: "secret"
+
+          cert_file:
+            description: >-
+              Path to client certificate file.
+            type: string
+
+          key_file:
+            description: >-
+              Path to client key file.
+            type: string
+
+          client_auth_type:
+            description: >-
+              Client authentication type.
+            type: string
+
+          client_ca_file:
+            description: >-
+              Path to client CA file.
+            type: string
+
+          client_ca:
+            description: >-
+              Client CA in PEM format.
+            type: string
+
+          cipher_suites:
+            description: >-
+              Cipher suites to use.
+            type: string
+
+          min_version:
+            description: >-
+              Minimum TLS version.
+            type: string
+
+  tls:
+    description: >-
+      Configures TLS for the server.
+    type: object
+    properties:
+      cert_pem:
+        description: >-
+          Client certificate in PEM format.
+        type: string
+
+      key_pem:
+        description: >-
+          Client key in PEM format.
+        type: string
+        alloy:
+          type_override: "secret"
+
+      cert_file:
+        description: >-
+          Path to client certificate file.
+        type: string
+
+      key_file:
+        description: >-
+          Path to client key file.
+        type: string
+
+      client_auth_type:
+        description: >-
+          Client authentication type.
+        type: string
+
+      client_ca_file:
+        description: >-
+          Path to client CA file.
+        type: string
+
+      client_ca:
+        description: >-
+          Client CA in PEM format.
+        type: string
+
+      cipher_suites:
+        description: >-
+          Cipher suites to use.
+        type: string
+
+      min_version:
+        description: >-
+          Minimum TLS version.
+        type: string
diff --git a/internal/component/loki/enrich/metadata.yml b/internal/component/loki/enrich/metadata.yml
new file mode 100644
index 0000000000..7de32c4609
--- /dev/null
+++ b/internal/component/loki/enrich/metadata.yml
@@ -0,0 +1,60 @@
+arguments:
+  type: object
+  description: "Configuration arguments for loki.enrich."
+  required:
+    - target_match_label
+    - targets
+    - forward_to
+  properties:
+    target_match_label:
+      description: >-
+        The label from discovered targets to match against, for example, "__inventory_consul_service".
+      type: string
+
+    forward_to:
+      description: >-
+        List of receivers to send enriched logs to.
+      type: array
+      alloy:
+        # TODO: How to validate capsules like this?
+        type_override: "[]loki.LogsReceiver"
+
+    targets:
+      description: >-
+        List of targets from a discovery component.
+      type: array
+      items:
+        # TODO: Double check if "object" is ok
+        # TODO: Specify 
+        type: object
+        # TODO: Add "properties" to list Prometheus labels that are required
+        additionalProperties:
+          type: string
+      alloy:
+        # TODO: Not sure how Fleet Management would validate this. It could just be a map.
+        type_source: "github.com/grafana/alloy/internal/component/discovery"
+        type_override: "[]discovery.Target"
+
+    labels_to_copy:
+      description: >-
+        List of labels to copy from discovered targets to logs. If empty, all labels will be copied.
+      type: array
+      items:
+        type: string
+
+    logs_match_label:
+      description: >-
+        The label from incoming logs to match against discovered targets.
+      type: string
+
+exports:
+  type: object
+  description: "Exports for loki.enrich."
+  properties:
+    receiver:
+      description: >-
+        A receiver that can be used to send logs to this component.
+      type: object
+      alloy:
+        type_source: "github.com/grafana/alloy/internal/component/common/loki"
+        type_override: "loki.LogsReceiver"
diff --git a/internal/component/loki/source/api/metadata.yml b/internal/component/loki/source/api/metadata.yml
new file mode 100644
index 0000000000..1a9fc0191c
--- /dev/null
+++ b/internal/component/loki/source/api/metadata.yml
@@ -0,0 +1,53 @@
+arguments:
+  type: object
+  description: "Configuration parameters for loki.source.api."
+  required:
+    - forward_to
+  allOf:
+    - "$ref": "../../../../../internal/component/common/net/schema.yml"
+  properties:
+    forward_to:
+      description: >-
+        List of receivers to send log entries to.
+      type: array
+      alloy:
+        type_override: "list(LogsReceiver)"
+
+    max_send_message_size:
+      description: >-
+        Maximum size of a request to the push API.
+      type: string
+      alloy:
+        type_override: "size"
+        default_override: '"100MiB"'
+
+    labels:
+      description: >-
+        The labels to associate with each received logs record.
+      type: object
+      items:
+        # TODO: this should display as "map(string)" without a type_override
+        type: object
+        additionalProperties:
+          type: string
+      alloy:
+        type: attribute
+        type_override: "map(string)"
+        default_override: "{}"
+
+    relabel_rules:
+      description: >-
+        Relabeling rules to apply on log entries.
+      type: array
+      items:
+        type: object
+      alloy:
+        type_override: "RelabelRules"
+        default_override: "{}"
+
+    use_incoming_timestamp:
+      description: >-
+        Whether to use the timestamp received from request.
+      type: boolean
+      alloy:
+        default_override: false
diff --git a/internal/component/loki/source/aws_firehose/metadata.yml b/internal/component/loki/source/aws_firehose/metadata.yml
new file mode 100644
index 0000000000..5448b0b5c9
--- /dev/null
+++ b/internal/component/loki/source/aws_firehose/metadata.yml
@@ -0,0 +1,39 @@
+arguments:
+  type: object
+  description: "Configuration parameters for loki.source.awsfirehose."
+  required:
+    - forward_to
+  allOf:
+    - "$ref": "../../../../../internal/component/common/net/schema.yml"
+  properties:
+    forward_to:
+      description: >-
+        List of receivers to send log entries to.
+      type: array
+      alloy:
+        type_override: "list(LogsReceiver)"
+
+    access_key:
+      description: >-
+        If set, require Data Firehose to provide a matching key.
+      type: string
+      alloy:
+        type_override: "secret"
+        default_override: '""'
+
+    relabel_rules:
+      description: >-
+        Relabeling rules to apply on log entries.
+      type: array
+      items:
+        type: object
+      alloy:
+        type_override: "RelabelRules"
+        default_override: "{}"
+
+    use_incoming_timestamp:
+      description: >-
+        Whether to use the timestamp received from the request.
+      type: boolean
+      alloy:
+        default_override: false
diff --git a/internal/component/loki/source/azure_event_hubs/metadata.yml b/internal/component/loki/source/azure_event_hubs/metadata.yml
new file mode 100644
index 0000000000..e4bd9654d7
--- /dev/null
+++ b/internal/component/loki/source/azure_event_hubs/metadata.yml
@@ -0,0 +1,111 @@
+arguments:
+  type: object
+  description: "Configuration parameters for loki.source.azure_event_hubs."
+  required:
+    - fully_qualified_namespace
+    - event_hubs
+    - forward_to
+    - authentication
+  properties:
+    fully_qualified_namespace:
+      description: >-
+        Event hub namespace. Must refer to a full HOST:PORT that points to your event hub, such as NAMESPACE.servicebus.windows.net:9093.
+      type: string
+
+    event_hubs:
+      description: >-
+        Event Hubs to consume.
+      type: array
+      items:
+        type: string
+      alloy:
+        type_override: "list(string)"
+
+    forward_to:
+      description: >-
+        List of receivers to send log entries to.
+      type: array
+      alloy:
+        type_override: "list(LogsReceiver)"
+
+    group_id:
+      description: >-
+        The Kafka consumer group ID.
+      type: string
+      alloy:
+        default_override: '"loki.source.azure_event_hubs"'
+
+    use_incoming_timestamp:
+      description: >-
+        Whether to use the timestamp received from Azure Event Hub.
+      type: boolean
+      alloy:
+        default_override: false
+
+    disallow_custom_messages:
+      description: >-
+        Whether to ignore messages that don't match the schema for Azure resource logs.
+      type: boolean
+      alloy:
+        default_override: false
+
+    relabel_rules:
+      description: >-
+        Relabeling rules to apply on log entries.
+      type: array
+      items:
+        type: object
+      alloy:
+        type_override: "RelabelRules"
+        default_override: "{}"
+
+    labels:
+      description: >-
+        The labels to associate with each received event.
+      type: object
+      items:
+        type: object
+        additionalProperties:
+          type: string
+      alloy:
+        type: attribute
+        type_override: "map(string)"
+        default_override: "{}"
+
+    assignor:
+      description: >-
+        The consumer group rebalancing strategy to use.
+      type: string
+      alloy:
+        default_override: '"range"'
+
+    authentication:
+      description: >-
+        Authentication configuration with Azure Event Hub.
+      type: object
+      required:
+        - mechanism
+      properties:
+        mechanism:
+          description: >-
+            Authentication mechanism.
+          type: string
+          enum:
+            - "connection_string"
+            - "oauth"
+
+        connection_string:
+          description: >-
+            Event Hubs ConnectionString for authentication on Azure Cloud.
+          type: string
+          alloy:
+            type_override: "secret"
+
+        scopes:
+          description: >-
+            Access token scopes. Default is fully_qualified_namespace without port.
+          type: array
+          items:
+            type: string
+          alloy:
+            type_override: "list(string)"
diff --git a/internal/component/loki/source/cloudflare/metadata.yml b/internal/component/loki/source/cloudflare/metadata.yml
new file mode 100644
index 0000000000..89038ac5b0
--- /dev/null
+++ b/internal/component/loki/source/cloudflare/metadata.yml
@@ -0,0 +1,87 @@
+arguments:
+  type: object
+  description: "Configuration parameters for loki.source.cloudflare."
+  required:
+    - api_token
+    - zone_id
+    - forward_to
+  properties:
+    api_token:
+      description: >-
+        The API token to authenticate with.
+      type: string
+      alloy:
+        type_override: "secret"
+
+    zone_id:
+      description: >-
+        The Cloudflare zone ID to use.
+      type: string
+
+    forward_to:
+      description: >-
+        List of receivers to send log entries to.
+      type: array
+      alloy:
+        type_override: "list(LogsReceiver)"
+
+    additional_fields:
+      description: >-
+        The additional list of fields to supplement those provided via fields_type.
+      type: array
+      items:
+        type: string
+      alloy:
+        type_override: "list(string)"
+
+    fields_type:
+      description: >-
+        The set of fields to fetch for log entries.
+      type: string
+      alloy:
+        default_override: '"default"'
+
+    labels:
+      description: >-
+        The labels to associate with each received log entry.
+      type: object
+      items:
+        type: object
+        additionalProperties:
+          type: string
+      alloy:
+        type: attribute
+        type_override: "map(string)"
+        default_override: "{}"
+
+    pull_range:
+      description: >-
+        The timeframe to fetch for each pull request.
+      type: string
+      alloy:
+        type_override: "duration"
+        default_override: '"1m"'
+
+    relabel_rules:
+      description: >-
+        Relabeling rules to apply on log entries.
+      type: array
+      items:
+        type: object
+      alloy:
+        type_override: "RelabelRules"
+        default_override: "{}"
+
+    use_incoming_timestamp:
+      description: >-
+        Whether to use the timestamp received from the request.
+      type: boolean
+      alloy:
+        default_override: false
+
+    workers:
+      description: >-
+        The number of workers to use for parsing logs.
+      type: integer
+      alloy:
+        default_override: 3
diff --git a/internal/tools/alloygen/main.go b/internal/tools/alloygen/main.go
new file mode 100644
index 0000000000..e0232b28f5
--- /dev/null
+++ b/internal/tools/alloygen/main.go
@@ -0,0 +1,473 @@
+package main
+
+import (
+	"fmt"
+	"log"
+	"os"
+	"path/filepath"
+	"slices"
+	"strings"
+
+	"github.com/spf13/cobra"
+
+	"github.com/grafana/alloy/internal/tools/alloygen/metadata"
+	"github.com/grafana/alloy/internal/tools/alloygen/validate"
+)
+
+type ArgTableRow struct {
+	Name         string
+	Type         string
+	Description  string
+	DefaultValue string
+	Required     string
+}
+
+type ArgTable struct {
+	Name string
+	Rows []ArgTableRow
+}
+
+type BlocksTableRow struct {
+	Name           string
+	HierarchyChain string
+	Description    string
+	Required       string
+}
+
+type BlocksTable struct {
+	Rows []BlocksTableRow
+}
+
+type ExportsTableRow struct {
+	Name        string
+	Type        string
+	Description string
+}
+
+type ExportsTable struct {
+	Rows []ExportsTableRow
+}
+
+func main() {
+	cmd, err := NewCommand()
+	cobra.CheckErr(err)
+	cobra.CheckErr(cmd.Execute())
+}
+
+func NewCommand() (*cobra.Command, error) {
+	rootCmd := &cobra.Command{
+		Use:          "mdatagen",
+		Version:      "0.0.1",
+		SilenceUsage: true,
+		RunE: func(cmd *cobra.Command, args []string) error {
+			return cmd.Usage()
+		},
+	}
+
+	rootCmd.AddCommand(&cobra.Command{
+		Use: "generate",
+		RunE: func(cmd *cobra.Command, args []string) error {
+			return runOnce(args[0], args[1])
+		},
+	})
+
+	rootCmd.AddCommand(&cobra.Command{
+		Use: "validate",
+		RunE: func(cmd *cobra.Command, args []string) error {
+			return validate.Run(args)
+		},
+	})
+
+	return rootCmd, nil
+}
+
+func runOnce(ymlPath string, outputPath string) error {
+	log.Printf("Processing YAML schema: %s", ymlPath)
+	log.Printf("Output directory: %s", outputPath)
+
+	// Check if the YAML file exists
+	if _, err := os.Stat(ymlPath); os.IsNotExist(err) {
+		return nil // File doesn't exist, return early
+	} else if err != nil {
+		return err // Some other error occurred
+	}
+
+	// Parse the YAML schema
+	schema, err := metadata.FromPath(ymlPath)
+	if err != nil {
+		return fmt.Errorf("failed to parse schema: %w", err)
+	}
+
+	ymlPathDir := filepath.Dir(ymlPath)
+
+	err = mergeSubschemas(ymlPathDir, schema.Arguments)
+	if err != nil {
+		return fmt.Errorf("failed to merge argument subschemas: %w", err)
+	}
+	err = mergeSubschemas(ymlPathDir, schema.Exports)
+	if err != nil {
+		return fmt.Errorf("failed to merge export subschemas: %w", err)
+	}
+
+	argumentsTables := generateArgumentsTables("__arguments", schema.Arguments)
+	blocksTable := generateBlocksTable([]string{}, schema.Arguments)
+	exportsTable := generateExportsTable(schema.Exports)
+
+	sortArgTables(argumentsTables)
+	sortBlocksTables(blocksTable)
+	sortExportsTables(exportsTable)
+
+	// Generate the reference table
+	markdownTables, err := generateMarkdownTables(argumentsTables, blocksTable, exportsTable)
+	if err != nil {
+		return fmt.Errorf("failed to generate reference table: %w", err)
+	}
+
+	writeMarkdownTables(markdownTables, outputPath)
+	if err != nil {
+		return fmt.Errorf("failed to write markdown tables: %w", err)
+	}
+
+	return nil
+}
+
+func mergeSubschemas(ymlPathDir string, schema *metadata.Schema) error {
+	if schema == nil {
+		return nil
+	}
+
+	// Merge allOf properties
+	for _, prop := range schema.AllOf {
+		// TODO: Support refs which are not files
+		if prop.Ref != "" {
+			// Load the referenced schema
+			referencePath := filepath.Join(ymlPathDir, prop.Ref)
+			log.Printf("Processing YAML subschema: %s", referencePath)
+
+			parsedProp, err := metadata.FromPath2(referencePath)
+			if err != nil {
+				return fmt.Errorf("failed to parse schema file: %w", err)
+			}
+
+			// Add the properties from nested schema
+			err = mergeSubschemas(ymlPathDir, parsedProp)
+			if err != nil {
+				return err
+			}
+
+			// Add the properties from the referenced schema
+			for name, prop := range parsedProp.Definitions {
+				// TODO: Copy the prop?
+				schema.Properties[name] = prop
+			}
+		}
+	}
+
+	return nil
+}
+
+func writeMarkdownTables(markdownTables map[string]string, outputPath string) error {
+	if err := os.MkdirAll(outputPath, 0755); err != nil {
+		return err
+	}
+
+	for name, table := range markdownTables {
+		textFilePath := filepath.Join(outputPath, name+".md")
+		file, err := os.Create(textFilePath)
+		if err != nil {
+			return err
+		}
+		defer file.Close()
+
+		_, err = file.WriteString(table)
+		if err != nil {
+			return err
+		}
+	}
+
+	return nil
+}
+
+func generateBlocksTable(parentBlocks []string, schema *metadata.Schema) BlocksTable {
+	table := BlocksTable{
+		Rows: []BlocksTableRow{},
+	}
+
+	if schema == nil {
+		return table
+	}
+
+	for name, prop := range schema.Properties {
+		if !isBlock(prop) {
+			continue
+		}
+
+		isRequired := slices.Contains(schema.Required, name)
+
+		table.Rows = append(table.Rows, BlocksTableRow{
+			Name:           name,
+			HierarchyChain: printHierarchy(parentBlocks, name),
+			Description:    prop.Description,
+			Required:       printRequired(isRequired),
+		})
+
+		newParentBlocks := append([]string{}, parentBlocks...)
+		newParentBlocks = append(newParentBlocks, name)
+
+		childTables := generateBlocksTable(newParentBlocks, prop)
+		table.Rows = append(table.Rows, childTables.Rows...)
+	}
+
+	return table
+}
+
+func generateExportsTable(schema *metadata.Schema) ExportsTable {
+	table := ExportsTable{
+		Rows: []ExportsTableRow{},
+	}
+
+	if schema == nil {
+		return table
+	}
+
+	// Assume that there are no blocks in the exports
+	for name, prop := range schema.Properties {
+		table.Rows = append(table.Rows, ExportsTableRow{
+			Name:        name,
+			Type:        toAlloyType(prop),
+			Description: prop.Description,
+		})
+	}
+
+	return table
+}
+
+func printHierarchy(parentBlocks []string, name string) string {
+	if len(parentBlocks) == 0 {
+		return markdownLink(name).Reference
+	}
+
+	return strings.Join(parentBlocks, " > ") + " > " + markdownLink(name).Reference
+}
+
+type MarkdownLink struct {
+	Definition string // For example: [header]: #header
+	Reference  string // For example: [`header`][header]
+}
+
+func markdownLink(name string) MarkdownLink {
+	return MarkdownLink{
+		Definition: fmt.Sprintf("[%s](#%s)", name, name),
+		Reference:  fmt.Sprintf("[`%s`][%s]", name, name),
+	}
+}
+
+func generateArgumentsTables(propName string, schema *metadata.Schema) []ArgTable {
+	var tables []ArgTable
+
+	curPropTable := ArgTable{
+		Name: propName,
+	}
+
+	if schema == nil {
+		return tables
+	}
+
+	for name, prop := range schema.Properties {
+		isPropRequired := slices.Contains(schema.Required, name)
+
+		if isBlock(prop) {
+			propTables := generateArgumentsTables(name, prop)
+			tables = append(tables, propTables...)
+			continue
+		}
+
+		curPropTable.Rows = append(curPropTable.Rows, ArgTableRow{
+			Name: name,
+			// The names of toAlloyType and determineDefault should be consistent
+			Type:         toAlloyType(prop),
+			Description:  prop.Description,
+			DefaultValue: determineDefault(prop),
+			Required:     printRequired(isPropRequired),
+		})
+	}
+
+	tables = append(tables, curPropTable)
+	return tables
+}
+
+func isBlock(prop *metadata.Schema) bool {
+	if prop.Type != "object" {
+		return false
+	}
+
+	// The property is an object, but the schema explicitly said it's not a block
+	// TODO: Make "block" an enum
+	if prop.Alloy.Type != "" && prop.Alloy.Type != "block" {
+		return false
+	}
+
+	return true
+}
+
+func printRequired(required bool) string {
+	if required {
+		return "yes"
+	}
+	return "no"
+}
+
+func toAlloyType(prop *metadata.Schema) string {
+	if prop.Alloy.TypeOverride != "" {
+		return prop.Alloy.TypeOverride
+	}
+
+	switch prop.Type {
+	case "integer":
+		return "int"
+	case "boolean":
+		return "bool"
+	default:
+		return prop.Type
+	}
+}
+
+func sortArgTables(tables []ArgTable) {
+	for _, table := range tables {
+		slices.SortStableFunc(table.Rows, func(i, j ArgTableRow) int {
+			// TODO: Sort by required arguments first
+			return strings.Compare(i.Name, j.Name)
+		})
+	}
+}
+
+func sortBlocksTables(table BlocksTable) {
+	slices.SortStableFunc(table.Rows, func(i, j BlocksTableRow) int {
+		// TODO: Sort by required blocks first
+		return strings.Compare(i.HierarchyChain, j.HierarchyChain)
+	})
+}
+
+func sortExportsTables(table ExportsTable) {
+	slices.SortStableFunc(table.Rows, func(i, j ExportsTableRow) int {
+		return strings.Compare(i.Name, j.Name)
+	})
+}
+
+// generateReferenceTable generates a markdown table from the schema
+func generateMarkdownTables(arguments []ArgTable, blocks BlocksTable, exports ExportsTable) (map[string]string, error) {
+	res := make(map[string]string)
+	for _, table := range arguments {
+		tableStr, err := generateArgumentsTableMd(table)
+		if err != nil {
+			return nil, err
+		}
+		res[table.Name] = tableStr
+	}
+
+	// TODO: Generate blocks link refs
+	blocksTableStr, err := generateBlocksTableMd(blocks)
+	if err != nil {
+		return nil, err
+	}
+	res["__blocks"] = blocksTableStr
+
+	exportsTableStr, err := generateExportsTableMd(exports)
+	if err != nil {
+		return nil, err
+	}
+	res["__exports"] = exportsTableStr
+
+	return res, nil
+}
+
+func generateArgumentsTableMd(table ArgTable) (string, error) {
+	if len(table.Rows) == 0 {
+		return "There are no arguments.", nil
+	}
+
+	var sb strings.Builder
+
+	// Write table header
+	sb.WriteString("| Name  | Type  | Description  | Default  | Required |\n")
+	sb.WriteString("| ----- | ----- | ------------ | -------- | -------- |\n")
+
+	// Process only argument properties (filter by alloy.io == "argument")
+	for _, prop := range table.Rows {
+		// Write table row
+		sb.WriteString(fmt.Sprintf("| `%s` | `%s` | %s | %s | %s |\n",
+			// TODO: Fix the "required" later
+			prop.Name, prop.Type, prop.Description, markdownCode(prop.DefaultValue), prop.Required))
+	}
+
+	return sb.String(), nil
+}
+
+func markdownCode(s string) string {
+	if s == "" {
+		return ""
+	}
+	return fmt.Sprintf("`%s`", s)
+}
+
+func generateExportsTableMd(table ExportsTable) (string, error) {
+	if len(table.Rows) == 0 {
+		return "There are no exports.", nil
+	}
+
+	var sb strings.Builder
+
+	sb.WriteString("| Name | Type | Description |\n")
+	sb.WriteString("| ---- | ---- | ----------- |\n")
+
+	for _, prop := range table.Rows {
+		sb.WriteString(fmt.Sprintf("| `%s` | `%s` | %s |\n",
+			prop.Name, prop.Type, prop.Description))
+	}
+
+	return sb.String(), nil
+}
+
+func generateBlocksTableMd(table BlocksTable) (string, error) {
+	if len(table.Rows) == 0 {
+		return "There are no blocks.", nil
+	}
+
+	var sb strings.Builder
+
+	sb.WriteString("| Block | Description | Required |\n")
+	sb.WriteString("| ----- | ----------- | -------- |\n")
+
+	for _, prop := range table.Rows {
+		sb.WriteString(fmt.Sprintf("| %s | %s | %s |\n",
+			prop.HierarchyChain, prop.Description, prop.Required))
+	}
+
+	sb.WriteString("\n")
+
+	for _, prop := range table.Rows {
+		// TODO: What if there are two blocks with the same name?
+		// TODO: Search and replace various characters? I think markdown doesn't handle everything.
+		sb.WriteString(fmt.Sprintf("[%s]: #%s\n", prop.Name, prop.Name))
+	}
+
+	return sb.String(), nil
+}
+
+// determineDefault determines the default value display for a property
+func determineDefault(prop *metadata.Schema) string {
+	if prop.Alloy.DefaultOverride != "" {
+		return prop.Alloy.DefaultOverride
+	}
+
+	if prop.Type == "string" {
+		if str, ok := prop.Default.(string); ok {
+			return fmt.Sprintf("%q", str)
+		}
+	}
+
+	if prop.Default != nil {
+		return fmt.Sprintf("%v", prop.Default)
+	}
+	return "" // Empty default
+}
diff --git a/internal/tools/alloygen/main_test.go b/internal/tools/alloygen/main_test.go
new file mode 100644
index 0000000000..9336c4b53f
--- /dev/null
+++ b/internal/tools/alloygen/main_test.go
@@ -0,0 +1,83 @@
+package main
+
+import (
+	"os"
+	"path/filepath"
+	"testing"
+
+	"github.com/stretchr/testify/require"
+)
+
+func TestRunWithRealSchemaFile(t *testing.T) {
+	// Test with the test1 schema which is based on the real loki.source.api schema
+	testDataSchemaPath := filepath.Join("testdata", "test1", "metadata.yml")
+
+	// Create a temporary directory for test output
+	outputDir := t.TempDir()
+	t.Logf("Output directory: %s", outputDir)
+
+	// Run the function with the schema in the output directory
+	require.NoError(t, runOnce(testDataSchemaPath, outputDir))
+
+	// Compare the actual output with the expected output
+	expectedOutputDir := filepath.Join("testdata", "test1", "expected_output")
+	compareDirectories(t, expectedOutputDir, outputDir)
+}
+
+// compareDirectories compares all files in the expected directory with the actual directory
+func compareDirectories(t *testing.T, expectedDir, actualDir string) {
+	t.Helper()
+
+	// Read the expected directory
+	expectedFiles, err := os.ReadDir(expectedDir)
+	require.NoError(t, err, "Failed to read expected output directory")
+
+	// Ensure we have some expected files
+	require.NotEmpty(t, expectedFiles, "Expected output directory is empty")
+
+	// Read the actual directory
+	actualFiles, err := os.ReadDir(actualDir)
+	require.NoError(t, err, "Failed to read actual output directory")
+
+	// Create maps for easier comparison
+	expectedFileMap := make(map[string]bool)
+	actualFileMap := make(map[string]bool)
+
+	for _, file := range expectedFiles {
+		if !file.IsDir() {
+			expectedFileMap[file.Name()] = true
+		}
+	}
+
+	for _, file := range actualFiles {
+		if !file.IsDir() {
+			actualFileMap[file.Name()] = true
+		}
+	}
+
+	// Check that all expected files exist in actual output
+	for expectedFile := range expectedFileMap {
+		require.True(t, actualFileMap[expectedFile], "Expected file %s not found in actual output", expectedFile)
+
+		// Compare file contents
+		expectedPath := filepath.Join(expectedDir, expectedFile)
+		actualPath := filepath.Join(actualDir, expectedFile)
+
+		expectedContent, err := os.ReadFile(expectedPath)
+		require.NoError(t, err, "Failed to read expected file %s", expectedFile)
+
+		actualContent, err := os.ReadFile(actualPath)
+		require.NoError(t, err, "Failed to read actual file %s", expectedFile)
+
+		require.Equal(t, string(expectedContent), string(actualContent),
+			"Content mismatch in file %s", expectedFile)
+	}
+
+	// Check that no unexpected files were generated
+	for actualFile := range actualFileMap {
+		require.True(t, expectedFileMap[actualFile],
+			"Unexpected file %s found in actual output", actualFile)
+	}
+
+	t.Logf("Successfully compared %d files", len(expectedFileMap))
+}
diff --git a/internal/tools/alloygen/metadata/metadata.go b/internal/tools/alloygen/metadata/metadata.go
new file mode 100644
index 0000000000..a76e34e9d9
--- /dev/null
+++ b/internal/tools/alloygen/metadata/metadata.go
@@ -0,0 +1,65 @@
+package metadata
+
+import (
+	"os"
+
+	"gopkg.in/yaml.v3"
+)
+
+type Metadata struct {
+	Arguments *Schema `yaml:"arguments,omitempty"`
+	Exports   *Schema `yaml:"exports,omitempty"`
+}
+
+// SchemaProperty represents a property in the YAML schema
+type Schema struct {
+	Ref                  string             `yaml:"$ref,omitempty"`
+	Description          string             `yaml:"description,omitempty"`
+	Type                 string             `yaml:"type,omitempty"`
+	AllOf                []*Schema          `yaml:"allOf,omitempty"` // Squashed args and blocks
+	Items                *Schema            `yaml:"items,omitempty"`
+	Required             []string           `yaml:"required,omitempty"`
+	Alloy                AlloyOverrides     `yaml:"alloy,omitempty"`
+	Default              any                `yaml:"default,omitempty"`
+	Properties           map[string]*Schema `yaml:"properties,omitempty"`
+	Definitions          map[string]*Schema `yaml:"$defs,omitempty"`
+	AdditionalProperties *Schema            `yaml:"additionalProperties,omitempty"`
+}
+
+// AlloyOverrides represents the alloy-specific configuration
+type AlloyOverrides struct {
+	Type            string `yaml:"type"`
+	TypeOverride    string `yaml:"type_override,omitempty"`
+	DefaultOverride string `yaml:"default_override,omitempty"`
+}
+
+func FromPath(ymlPath string) (*Metadata, error) {
+	data, err := os.ReadFile(ymlPath)
+	if err != nil {
+		return nil, err
+	}
+
+	var schema Metadata
+	err = yaml.Unmarshal(data, &schema)
+	if err != nil {
+		return nil, err
+	}
+
+	return &schema, nil
+}
+
+// TODO: Use generics to reuse code with the previous function
+func FromPath2(ymlPath string) (*Schema, error) {
+	data, err := os.ReadFile(ymlPath)
+	if err != nil {
+		return nil, err
+	}
+
+	var schema Schema
+	err = yaml.Unmarshal(data, &schema)
+	if err != nil {
+		return nil, err
+	}
+
+	return &schema, nil
+}
diff --git a/internal/tools/alloygen/testdata/test1/expected_output/__arguments.md b/internal/tools/alloygen/testdata/test1/expected_output/__arguments.md
new file mode 100644
index 0000000000..e8daa59876
--- /dev/null
+++ b/internal/tools/alloygen/testdata/test1/expected_output/__arguments.md
@@ -0,0 +1,7 @@
+| Name  | Type  | Description  | Default  | Required |
+| ----- | ----- | ------------ | -------- | -------- |
+| `forward_to` | `list(LogsReceiver)` | List of receivers to send enriched logs to. |  | yes |
+| `labels` | `map(string)` | The labels to associate with each received logs record. | `{}` | no |
+| `max_send_message_size` | `int` | Maximum size of a request to the push API.	 | `"100MiB"` | no |
+| `relabel_rules` | `RelabelRules` | Relabeling rules to apply on log entries. | `{}` | no |
+| `use_incoming_timestamp` | `bool` | Whether to use the timestamp received from request.	 | `false` | no |
diff --git a/internal/tools/alloygen/testdata/test1/expected_output/__blocks.md b/internal/tools/alloygen/testdata/test1/expected_output/__blocks.md
new file mode 100644
index 0000000000..f88e219f65
--- /dev/null
+++ b/internal/tools/alloygen/testdata/test1/expected_output/__blocks.md
@@ -0,0 +1,5 @@
+| Block | Description | Required |
+| ----- | ----------- | -------- |
+| [`http`][http] | Configures the HTTP server that receives requests. | no |
+
+[http]: #http
diff --git a/internal/tools/alloygen/testdata/test1/expected_output/__exports.md b/internal/tools/alloygen/testdata/test1/expected_output/__exports.md
new file mode 100644
index 0000000000..f5391d7979
--- /dev/null
+++ b/internal/tools/alloygen/testdata/test1/expected_output/__exports.md
@@ -0,0 +1 @@
+There are no exports.
\ No newline at end of file
diff --git a/internal/tools/alloygen/testdata/test1/expected_output/http.md b/internal/tools/alloygen/testdata/test1/expected_output/http.md
new file mode 100644
index 0000000000..aab24d4225
--- /dev/null
+++ b/internal/tools/alloygen/testdata/test1/expected_output/http.md
@@ -0,0 +1,8 @@
+| Name  | Type  | Description  | Default  | Required |
+| ----- | ----- | ------------ | -------- | -------- |
+| `conn_limit` | `int` | Maximum number of simultaneous HTTP connections. Defaults to no limit. | `0` | no |
+| `listen_address` | `string` | Network address on which the server listens for new connections. Defaults to accepting all incoming connections.	 | `""` | no |
+| `listen_port` | `int` | Port number on which the server listens for new connections.	 | `8080` | no |
+| `server_idle_timeout` | `duration` | Idle timeout for HTTP server. | `"120s"` | no |
+| `server_read_timeout` | `duration` | Read timeout for HTTP server. | `"30s"` | no |
+| `server_write_timeout` | `duration` | Write timeout for HTTP server. | `"30s"` | no |
diff --git a/internal/tools/alloygen/testdata/test1/metadata.yml b/internal/tools/alloygen/testdata/test1/metadata.yml
new file mode 100644
index 0000000000..564453c72f
--- /dev/null
+++ b/internal/tools/alloygen/testdata/test1/metadata.yml
@@ -0,0 +1,53 @@
+arguments:
+  type: object
+  description: "Configuration parameters for loki.source.api."
+  required:
+    - forward_to
+  allOf:
+    - "$ref": "./subschema/schema.yml"
+  properties:
+    forward_to:
+      description: >-
+        List of receivers to send enriched logs to.
+      type: array
+      alloy:
+        type_override: "list(LogsReceiver)"
+
+    max_send_message_size:
+      description: >-
+        Maximum size of a request to the push API.	
+      type: integer
+      alloy:
+        default_override: "\"100MiB\""
+
+    labels:
+      description: >-
+        The labels to associate with each received logs record.
+      type: object
+      items:
+        # TODO: this should display as "map(string)" without a type_override
+        type: object
+        additionalProperties:
+          type: string
+      alloy:
+        type: attribute
+        type_override: "map(string)"
+        default_override: "{}"
+
+    relabel_rules:
+      description: >-
+        Relabeling rules to apply on log entries.
+      type: array
+      items:
+        type: object
+      alloy:
+        type_override: "RelabelRules"
+        default_override: "{}"
+
+    use_incoming_timestamp:
+      description: >-
+        Whether to use the timestamp received from request.	
+      type: boolean
+      alloy:
+        default_override: false
+
diff --git a/internal/tools/alloygen/testdata/test1/subschema/schema.yml b/internal/tools/alloygen/testdata/test1/subschema/schema.yml
new file mode 100644
index 0000000000..9143de7889
--- /dev/null
+++ b/internal/tools/alloygen/testdata/test1/subschema/schema.yml
@@ -0,0 +1,50 @@
+id: grafana/alloy/internal/component/common/net
+"$defs":
+  http:
+    description: >-
+      Configures the HTTP server that receives requests.
+    type: object
+    properties:
+      conn_limit:
+        description: >-
+          Maximum number of simultaneous HTTP connections. Defaults to no limit.
+        type: integer
+        default: 0
+
+      listen_address:
+        description: >-
+          Network address on which the server listens for new connections. Defaults to accepting all incoming connections.	
+        type: string
+        alloy:
+          # TODO: We shouldn't have to set this explicitly.
+          default_override: "\"\""
+
+      listen_port:
+        description: >-
+          Port number on which the server listens for new connections.	
+        type: integer
+        default: 8080
+
+      server_idle_timeout:
+        description: >-
+          Idle timeout for HTTP server.
+        type: string
+        default: "120s"
+        alloy:
+          type_override: "duration"
+
+      server_read_timeout:
+        description: >-
+          Read timeout for HTTP server.
+        type: string
+        default: "30s"
+        alloy:
+          type_override: "duration"
+
+      server_write_timeout:
+        description: >-
+          Write timeout for HTTP server.
+        type: string
+        default: "30s"
+        alloy:
+          type_override: "duration"
diff --git a/internal/tools/alloygen/validate/internal/ast.go b/internal/tools/alloygen/validate/internal/ast.go
new file mode 100644
index 0000000000..bb3bdd071e
--- /dev/null
+++ b/internal/tools/alloygen/validate/internal/ast.go
@@ -0,0 +1,120 @@
+package internal
+
+import (
+	"fmt"
+	"go/ast"
+	"go/parser"
+	"go/printer"
+	"go/token"
+	"os"
+	"path/filepath"
+	"strings"
+)
+
+type API struct {
+	Exports   *Struct
+	Arguments *Struct
+}
+
+type Struct struct {
+	Fields []StructField
+}
+
+type StructField struct {
+	Name string
+	Type string
+	Tag  []string
+}
+
+func Parse(path string) (*API, error) {
+	entries, err := os.ReadDir(path)
+	if err != nil {
+		return nil, fmt.Errorf("failed to read files at %s: %w", path, err)
+	}
+
+	var files []*ast.File
+	fset := token.NewFileSet()
+	for _, e := range entries {
+		// We skip directories, non go files and test files.
+		if e.IsDir() || !strings.HasSuffix(e.Name(), ".go") || strings.HasSuffix(e.Name(), "test.go") {
+			continue
+		}
+
+		file, err := parser.ParseFile(fset, filepath.Join(path, e.Name()), nil, 0)
+		if err != nil {
+			return nil, fmt.Errorf("failed to parse file: %w", err)
+		}
+
+		files = append(files, file)
+	}
+
+	var (
+		exports   *ast.TypeSpec
+		arguments *ast.TypeSpec
+	)
+	// Find Exports and Arguments
+	for _, f := range files {
+		ast.Inspect(f, func(n ast.Node) bool {
+			typ, ok := n.(*ast.TypeSpec)
+			if !ok {
+				return true
+			}
+			if typ.Name.String() == "Arguments" {
+				arguments = typ
+			}
+
+			if typ.Name.String() == "Exports" {
+				exports = typ
+			}
+
+			return arguments == nil || exports == nil
+		})
+	}
+
+	return &API{
+		Exports:   buildStruct(exports, fset),
+		Arguments: buildStruct(arguments, fset),
+	}, nil
+
+}
+
+func buildStruct(spec *ast.TypeSpec, fset *token.FileSet) *Struct {
+	if spec == nil {
+		return nil
+	}
+
+	structSpec := spec.Type.(*ast.StructType)
+	s := Struct{Fields: make([]StructField, 0, len(structSpec.Fields.List))}
+	for _, f := range structSpec.Fields.List {
+		s.Fields = append(s.Fields, StructField{
+			Name: f.Names[0].String(),
+			Type: exprToString(f.Type, fset),
+			Tag:  parseTag(f.Tag.Value),
+		})
+	}
+	return &s
+}
+
+func parseTag(str string) []string {
+	if str == "" {
+		return nil
+	}
+	str = strings.TrimPrefix(str, "`alloy:\"")
+	str = strings.TrimSuffix(str, "\"`")
+	parts := strings.Split(str, ",")
+
+	var out []string
+	for _, p := range parts {
+		if p == "" {
+			continue
+		}
+		out = append(out, p)
+	}
+	return out
+}
+
+func exprToString(expr ast.Expr, fset *token.FileSet) string {
+	var sb strings.Builder
+	_ = printer.Fprint(&sb, fset, expr)
+	return sb.String()
+}
diff --git a/internal/tools/alloygen/validate/validate.go b/internal/tools/alloygen/validate/validate.go
new file mode 100644
index 0000000000..097f9ce908
--- /dev/null
+++ b/internal/tools/alloygen/validate/validate.go
@@ -0,0 +1,86 @@
+package validate
+
+import (
+	_ "embed"
+	"errors"
+	"fmt"
+	"path/filepath"
+	"slices"
+
+	"github.com/grafana/alloy/internal/tools/alloygen/metadata"
+	"github.com/grafana/alloy/internal/tools/alloygen/validate/internal"
+)
+
+const metadataFileName = "metadata.yml"
+
+func Run(args []string) error {
+	if len(args) < 1 {
+		return errors.New("Missing required path")
+	}
+
+	api, err := internal.Parse(args[0])
+	if err != nil {
+		return fmt.Errorf("failed to parse api: %w", err)
+	}
+
+	metadata, err := metadata.FromPath(filepath.Join(args[0], metadataFileName))
+	if err != nil {
+		return fmt.Errorf("failed to parse metadata: %w", err)
+	}
+
+	if err := validate(api, metadata); err != nil {
+		return fmt.Errorf("failed to validate schema: %w", err)
+	}
+
+	return nil
+}
+
+func validate(api *internal.API, metadata *metadata.Metadata) error {
+	if err := validateStruct("Arguments", api.Arguments, metadata.Arguments); err != nil {
+		return fmt.Errorf("invalid arguments: %s", err)
+	}
+
+	if err := validateStruct("Exports", api.Exports, metadata.Exports); err != nil {
+		return fmt.Errorf("invalid exports: %s", err)
+	}
+	return nil
+}
+
+func validateStruct(typ string, s *internal.Struct, schema *metadata.Schema) error {
+	if s == nil && schema == nil {
+		return nil
+	}
+
+	if s == nil && schema != nil {
+		return fmt.Errorf("%s is defined in schema but not in code", typ)
+	}
+
+	if s != nil && schema == nil {
+		return fmt.Errorf("%s is defined in code but not in schema", typ)
+	}
+
+	for _, f := range s.Fields {
+		// FIXME: handle squashed properties
+		if len(f.Tag) == 1 && f.Tag[0] == "squash" {
+			continue
+		}
+
+		if len(f.Tag) < 1 {
+			return fmt.Errorf("malformat tag for field %s", f.Name)
+		}
+
+		if _, ok := schema.Properties[f.Tag[0]]; !ok {
+			return fmt.Errorf("property present in code but missing in schema %s", f.Tag[0])
+		}
+	}
+
+	for name := range schema.Properties {
+		if !slices.ContainsFunc(s.Fields, func(f internal.StructField) bool {
+			return name == f.Tag[0]
+		}) {
+			return fmt.Errorf("property is present in schema but missing in code: %s", name)
+		}
+	}
+
+	return nil
+}
diff --git a/tools/validate-metadata b/tools/validate-metadata
new file mode 100755
index 0000000000..058ee973c1
--- /dev/null
+++ b/tools/validate-metadata
@@ -0,0 +1,6 @@
+#!/usr/bin/env bash
+
+for dir in $(find . -type f -name "metadata.yml" -exec dirname {} \; | sort -u); do
+	echo $dir
+	go run ./internal/tools/alloygen validate $dir
+done