Datadog MCP server
io.github.TANTIOPE/datadog-mcp·v1.0.9·6 starsFull Datadog API access: monitors, logs, metrics, traces, dashboards, and observability tools
6 stars
Reviews
Write oneNobody has reviewed Datadog yet.
If you have run it, two minutes of your experience saves the next person an afternoon.
Datadog tools (19)
write = sends, deletes, buys or postsRead from the package source without running it. The installed server may list more.
authValidate Datadog API credentials. Use this to verify that the API key and App key are correctly configured before performing other operations.
dashboardsAccess Datadog dashboards and visualizations. Actions: list (filter by name/tags), get, create, update, delete. Use for: finding existing views, team dashboards, understanding what is monitored. NOTE: Dashboard tags must use "team:" prefix (e.g., ["team:operations"]).
downtimesManage Datadog scheduled downtimes for maintenance windows. Actions: list, get, create, update, cancel, listByMonitor. Use for: scheduling maintenance, preventing false alerts during deployments, managing recurring maintenance windows.
eventsTrack Datadog events. Actions: list, get, create, search, aggregate, top, timeseries, incidents. IMPORTANT: For monitor alert history, use tags: ["source:alert"] to find all triggered monitors. Filters: query (text search), sources, tags, priority, time range. Use for: monitor alerts, deployments, incidents, change tracking. Use action:"top" with from:"7d" to find the noisiest monitors. Use action
hostsManage Datadog infrastructure hosts. Actions: list (with filters), totals (counts), mute (silence alerts), unmute. Use for: infrastructure inventory, host health, silencing noisy hosts during maintenance.
incidentsManage Datadog incidents for incident response. Actions: list, get, search, create, update, delete. Use for: incident management, on-call response, postmortems, tracking MTTR/MTTD.
logsSearch Datadog logs with grep-like text filtering. Actions: search (find logs), aggregate (count/group). Key filters: keyword (text grep), pattern (regex), service, host, status (error/warn/info). Time ranges: "1h", "3d@11:45:23". CORRELATION: Logs contain dd.trace_id in attributes for linking to traces and APM metrics. SAMPLING: Use sample:"diverse" for error investigation (dedupes by message pat
metricsQuery Datadog metrics. Actions: - query: Get timeseries data (requires from/to time range, PromQL query) - search: Find metrics by name (grep-like, NO time param needed) - list: Get recently active metrics (last 24h, optionally filter by tag) - metadata: Get metric details (unit, type, description) APM METRICS (auto-generated from traces): - trace.{service}.hits - Request count - trace.{service}.e
monitorsManage Datadog monitors. Actions: list, get, search, create, update, delete, mute, unmute. Filters: name, tags, groupStates (alert/warn/ok/no data). TIP: For alert HISTORY (which monitors triggered), use the events tool with tags: ["source:alert"].
notebooksManage Datadog Notebooks. Actions: list (search notebooks), get (by ID with cells), create (new notebook), update (modify notebook), delete (remove notebook). Use for: runbooks, incident documentation, investigation notes, dashboards as code.
rumQuery Datadog Real User Monitoring (RUM) data. Actions: applications (list RUM apps), events (search RUM events), aggregate (group and count events), performance (Core Web Vitals: LCP, FCP, CLS, FID, INP), waterfall (session timeline with resources/actions/errors). Use for: frontend performance, user sessions, page views, errors, resource loading.
securityQuery Datadog Security Monitoring. Actions: rules (list detection rules), signals (search security signals), findings (list security findings). Use for: threat detection, compliance, security posture, incident investigation.
slosManage Datadog Service Level Objectives. Actions: list, get, create, update, delete, history. SLO types: metric-based, monitor-based. Use for: reliability tracking, error budgets, SLA compliance, performance targets.
syntheticsManage Datadog Synthetic tests (API and Browser). Actions: list, get, create, update, delete, trigger, results. Use for: uptime monitoring, API testing, user journey testing, performance testing, canary deployments.
tagsManage Datadog host tags. Actions: list (all host tags), get (tags for specific host), add (create tags), update (replace tags), delete (remove all tags). Use for: infrastructure organization, filtering, grouping.
teamsManage Datadog teams. Actions: list (with filters), get (by ID), members (list team members). Use for: team organization, access management, collaboration.
tracesAnalyze APM traces for request flow and latency debugging. Actions: search (find spans), aggregate (group stats), services (list APM services). Key filters: minDuration/maxDuration ("500ms", "2s"), httpStatus ("5xx", ">=400"), status (ok/error), errorMessage (grep). APM METRICS: Traces auto-generate metrics in trace.{service}.* namespace. Use metrics tool to query: avg:trace.{service}.request.dura
usageQuery Datadog usage metering data. Actions: summary (overall usage), hosts (infrastructure), logs, custom_metrics, indexed_spans, ingested_spans. Use for: cost management, capacity planning, usage tracking, billing analysis.
usersManage Datadog users. Actions: list (with filters), get (by ID). Use for: access management, user auditing, team organization.
Public scan report
scanner v0.1.10 · 2026-10-01 · same rubric, same numbers if you re-run it
- Code scan3 source files scanned25/25
- –Live reliabilityno gateway calls yet and no remote to proben/a
- –Tool poisoningtools not inspected (local package is not executed); not countedn/a
- Auth qualitystatic API keys via environment variables6/15
- Maintenancelast push 0 days ago15/15
- Maintainer identityregistry namespace matches repository owner; GitHub account older than a year8/10
How Datadog compares
Against every graded MCP server, from our own scans and uptime checks. Updated after each scan run.
- Safety score
- 83/100
- higher than 65% of 48,273 servers
- Tools
- 19
- the typical server has 7
- Tools that change things
- 0%
- typical: 0%. Fewer write tools means less an agent can break
- GitHub stars
- 6
- more than 85% of 28,534 servers
What its tools let an agent do: 19 read
Install Datadog in Claude Code, Cursor or VS Code
Runs npx -y datadog-mcp on your machine. Read the scan report first; the gateway never runs local packages.
claude mcp add datadog-mcp -- npx -y datadog-mcp
What the publisher says
From the Datadog repository's README, as published. We do not edit it. Read it on GitHub
Datadog MCP Server
DISCLAIMER: This is a community-maintained project and is not officially affiliated with, endorsed by, or supported by Datadog, Inc. This MCP server utilizes the Datadog API but is developed independently.
MCP server providing AI assistants with full Datadog observability access. Features grep-like log search, APM trace filtering with duration/status/error queries, smart sampling modes for token efficiency, and cross-correlation between logs, traces, and metrics. Supports both stdio (local) and http (remote/Kubernetes) transports.
Quick Start
Minimal Claude Desktop / VS Code / Cursor config — just the two required keys:
{
"mcpServers": {
"datadog": {
"command": "npx",
"args": ["-y", "datadog-mcp"],
"env": {
"DD_API_KEY": "your-api-key",
"DD_APP_KEY": "your-app-key"
}
}
}
}With optional tuning (EU site, custom default limits, longer log windows):
{
"mcpServers": {
"datadog": {
"command": "npx",
"args": ["-y", "datadog-mcp"],
"env": {
"DD_API_KEY": "your-api-key",
"DD_APP_KEY": "your-app-key",
"DD_SITE": "datadoghq.eu",
"MCP_DEFAULT_LIMIT": "50",
"MCP_DEFAULT_LOG_LINES": "200",
"MCP_DEFAULT_METRIC_POINTS": "1000",
"MCP_DEFAULT_TIME_RANGE": "24"
}
}
}
}To run as an HTTP server (e.g. inside a container or Kubernetes pod), add transport variables to the same env block:
"env": {
"DD_API_KEY": "your-api-key",
"DD_APP_KEY": "your-app-key",
"MCP_TRANSPORT": "http",
"MCP_PORT": "3000",
"MCP_HOST": "0.0.0.0"
}Configuration
Required environment variables
DD_API_KEY=your-api-key
DD_APP_KEY=your-app-keyOptional environment variables
DD_SITE=datadoghq.com # Default. Use datadoghq.eu for EU, etc.
# Limit defaults (fallbacks when the AI doesn't specify)
MCP_DEFAULT_LIMIT=50 # General tools default limit
MCP_DEFAULT_LOG_LINES=200 # Logs tool default limit
MCP_DEFAULT_METRIC_POINTS=1000 # Metrics timeseries data points
MCP_DEFAULT_TIME_RANGE=24 # Default time range in hours
# Transport (alternative to CLI flags — useful in Kubernetes)
MCP_TRANSPORT=stdio # stdio | http
MCP_PORT=3000 # HTTP port
MCP_HOST=0.0.0.0 # HTTP hostOptional flags
--site=datadoghq.com # Datadog site (overrides DD_SITE)
--transport=stdio|http # Transport mode (default: stdio)
--port=3000 # HTTP port when using http transport
--host=0.0.0.0 # HTTP host when using http transport
--read-only # Block all write operations
--disable-tools=synthetics,rum,security # Comma-separated list of tools to disableTransports
Select with --transport=http or MCP_TRANSPORT=http.
Deployment
Docker
Shortened. The full README is on GitHub.
Nothing above is checked by us. What we check is on the safety report.
Datadog: common questions
- Is Datadog MCP server safe?
- Mostly: it is graded B (83/100). Read the Datadog safety report
- How do I install Datadog?
- It runs on your machine. Copy the Claude Code, Cursor, VS Code or Claude Desktop config from the install section.
- Does Datadog need an API key?
- Yes. The registry entry asks for
DD_API_KEY,DD_APP_KEY. - Is Datadog maintained?
- The last commit was 31 days ago (2026-10-01). The latest release is v1.0.9.
- What can I use instead of Datadog?
- Servers from other publishers that do the same job: Netdata MCP server.
- How does Datadog compare with other MCP servers?
- safety score 83/100 (higher than 65% of 48,273 servers); tools 19 (the typical server has 7); tools that change things 0% (typical: 0%. Fewer write tools means less an agent can break). Full comparison.
Alternatives to Datadog
Same job from other publishers: the closest match first, then the best rated.
- NetdataReal-time infrastructure monitoring with metrics, logs, alerts, and ML-based anomaly detection.not reviewedWidely usedA