Skip to main content

Datadog

Investigate alerts across Datadog logs, metrics, and traces right from your AI client.

Tools

414 available tools

Search the tool definitions captured from the MCP server. The live list can vary with version, deployment, and credentials.

414 tools found.

  • Dd gff

    Tool name: _dd_gff

    Do-not-call

  • Dd guc

    Tool name: _dd_guc

    Do-not-call

  • Dd rfw

    Tool name: _dd_rfw

    Do-not-call

  • Dd wfd

    Tool name: _dd_wfd

    Do-not-call

  • Aap get activation options

    Tool name: aap_get_activation_options

    Aap get activation options.

  • Aap onboarding

    Tool name: aap_onboarding

    Returns the authoritative step-by-step instructions for enabling Datadog App and API Protection (AAP) to monitor and secure your application.

  • Add comment to Datadog case

    Tool name: add_comment_to_datadog_case

    Add a comment to a Datadog Work Item (also called a Case) timeline.

  • Add llmobs annotation queue interactions

    Tool name: add_llmobs_annotation_queue_interactions

    Queue traces, sessions, or spans for human review in an annotation queue.

  • Add llmobs dataset records

    Tool name: add_llmobs_dataset_records

    Create records in a dataset.

  • Aggregate Datadog ci pipeline events

    Tool name: aggregate_datadog_ci_pipeline_events

    Aggregate and analyze CI pipeline events to produce statistics, metrics, and grouped analytics.

  • Aggregate Datadog test events

    Tool name: aggregate_datadog_test_events

    Aggregate Datadog test events for reliability, performance, and execution trends.

  • Aggregate dora events

    Tool name: aggregate_dora_events

    Aggregate DORA events into scalar values or timeseries using composable queries and formulas (like get_datadog_metric) — delivery-performance analytics across deployments, commits, and pull requests.

  • Aggregate events

    Tool name: aggregate_events

    Aggregate Datadog events to compute counts, sums, averages, min, max, cardinality, and percentiles (P50, P75, P90, P95, P98, P99), with optional grouping by fields or time intervals.

  • Aggregate RUM events

    Tool name: aggregate_rum_events

    Aggregate Datadog RUM events to compute counts, sums, averages, min, max, cardinality, and percentiles (P50, P75, P90, P95, P98, P99), with optional grouping by fields or time intervals.

  • Aggregate spans

    Tool name: aggregate_spans

    Aggregate Datadog APM spans to compute counts, sums, averages, min, max, cardinality, and percentiles (P50, P75, P90, P95, P98, P99), with optional grouping by fields or time intervals.

  • Analyse Datadog k8s rollout

    Tool name: analyse_datadog_k8s_rollout

    Assemble a Kubernetes Deployment rollout in one call: status, progress, timing (ETA while in progress, duration once finished), the new/previous/old ReplicaSet split by revision, and before/after…

  • Analyze cloud network monitoring

    Tool name: analyze_cloud_network_monitoring

    Queries Cloud Network Monitoring (CNM) data to view network/transport level information.

  • Analyze Datadog error tracking errors

    Tool name: analyze_datadog_error_tracking_errors

    Analyze Datadog Error Tracking error samples with SQL — aggregations, breakdowns by tag/service/version, or raw sample inspection.

  • Analyze Datadog logs

    Tool name: analyze_datadog_logs

    Analyze Datadog logs using SQL.

  • Analyze Datadog security findings

    Tool name: analyze_datadog_security_findings

    Primary tool for analyzing security findings.

  • Analyze Datadog security signals

    Tool name: analyze_datadog_security_signals

    Count, group, or trend security signals using DDSQL — for any aggregate question: 'how many', 'top N', 'by severity', 'over time', or breakdown.

  • Analyze security findings

    Tool name: analyze_security_findings

    Primary tool for analyzing security findings.

  • Append new RUM retention filter

    Tool name: append_new_rum_retention_filter

    Create a new RUM retention filter, appended at the end of the evaluation order.

  • Append reference table rows

    Tool name: append_reference_table_rows

    Append (add) new rows to an existing reference table.

  • Archive feature flag

    Tool name: archive-feature-flag

    Archive a single feature flag by ID or key; pair with list-stale-feature-flags to discover candidates.

  • Archive saved filter

    Tool name: archive-saved-filter

    Archive a saved filter (reversible via unarchive-saved-filter).

  • Ask widget expert

    Tool name: ask_widget_expert

    Required first step for creating or editing a Datadog dashboard or notebook widget.

  • Assign Datadog security findings

    Tool name: assign_datadog_security_findings

    Assign or unassign security findings to a user.

  • Batch update llmobs dataset records

    Tool name: batch_update_llmobs_dataset_records

    Insert, update, and delete dataset records in one versioned operation.

  • Browser onboarding

    Tool name: browser_onboarding

    Step-by-step instructions for adding initial Datadog setup to a frontend browser-based project environment.

  • Build audit trail query

    Tool name: build_audit_trail_query

    Translates a natural-language description into a correct Audit Trail query string.

  • Cancel Datadog workflow instance

    Tool name: cancel_datadog_workflow_instance

    Cancel a running Datadog Workflow Automation execution instance.

  • Check flag implementation

    Tool name: check-flag-implementation

    Check my flags are used properly?

  • Clean up flag

    Tool name: clean-up-flag

    Clean up a stale feature flag by key — auto-archives if no code references are known, otherwise returns the repos and files where the flag is still referenced plus a Datadog UI link and instructs the…

  • Clone Datadog form

    Tool name: clone_datadog_form

    Clone an existing Datadog form.

  • Clone llmobs dataset

    Tool name: clone_llmobs_dataset

    Copy a dataset's current records into a new dataset in the same project.

  • Code coverage onboarding

    Tool name: code_coverage_onboarding

    Configure Datadog Code Coverage for a project by adding coverage report uploads to the CI pipeline.

  • Cost recommendations

    Tool name: cost_recommendations

    Lists an organization's Cloud Cost Management (CCM) cost-saving recommendations.

  • Create environment

    Tool name: create-environment

    Create a new Feature Management environment.

  • Create experiment feature flag

    Tool name: create-experiment-feature-flag

    Create a new feature flag with a FEATURE_GATE allocation linked to a standard experiment.

  • Create feature flag

    Tool name: create-feature-flag

    PRIMARY TOOL FOR NEW FLAGS in a project that already has Datadog feature flags wired up!

  • Create onboarding flag

    Tool name: create-onboarding-flag

    Create the onboarding proof flag: a predictable boolean flag (disabled=false, enabled=true; default disabled) with a catch-all FEATURE_GATE allocation serving enabled=true in the selected…

  • Create saved filter

    Tool name: create-saved-filter

    Create a saved filter: a reusable, named set of targeting rules that feature flags can reference.

  • Create Datadog case

    Tool name: create_datadog_case

    Create a new Datadog Work Item (also called a Case).

  • Create Datadog form

    Tool name: create_datadog_form

    Create a new Datadog form with a name.

  • Create Datadog monitor

    Tool name: create_datadog_monitor

    Creates a Datadog monitor in DRAFT mode (no notifications sent, priority 5).

  • Create Datadog notebook

    Tool name: create_datadog_notebook

    Creates a new Datadog notebook.

  • Create Datadog published analysis

    Tool name: create_datadog_published_analysis

    Creates a published analysis (also called a published dataset) from a notebook cell.

  • Create Datadog security detection rule

    Tool name: create_datadog_security_detection_rule

    Create a new Cloud SIEM detection rule by POSTing the supplied payload to POST /api/v2/security_monitoring/rules.

  • Create Datadog security findings automation rule

    Tool name: create_datadog_security_findings_automation_rule

    Create a security findings automation rule.

  • Create Datadog security findings ticket

    Tool name: create_datadog_security_findings_ticket

    Create a case, Jira issue, ServiceNow ticket, or Linear issue for security findings.

  • Create Datadog security iac custom rule

    Tool name: create_datadog_security_iac_custom_rule

    Create a draft IaC custom rule.

  • Create Datadog security suppression

    Tool name: create_datadog_security_suppression

    Create a new security monitoring suppression rule in Datadog.

  • Create Datadog skill

    Tool name: create_datadog_skill

    Create a new library skill in your organization's Skills Library — a separate, user-authored set of task guides, distinct from any built-in "Skills" your own agent tooling may already have.

  • Create Datadog workflow

    Tool name: create_datadog_workflow

    Create an unpublished Datadog Workflow Automation workflow from a complete spec.

  • Create global variables

    Tool name: create_global_variables

    Create a Synthetics global variable.

  • Create llmobs annotation queue

    Tool name: create_llmobs_annotation_queue

    Create an Agent Observability annotation queue and, optionally, its label schema in the same call.

  • Create llmobs dataset

    Tool name: create_llmobs_dataset

    Create an empty dataset inside a project.

  • Create llmobs experiment

    Tool name: create_llmobs_experiment

    Create a new LLM Observability experiment object in a project.

  • Create llmobs project

    Tool name: create_llmobs_project

    Create an LLM Observability experiments project — the container that owns datasets and experiments.

  • Create or update llmobs evaluator

    Tool name: create_or_update_llmobs_evaluator

    Create or update an LLM-judge evaluator configuration.

  • Create reference table

    Tool name: create_reference_table

    Create a new reference table.

  • Create RUM operation

    Tool name: create_rum_operation

    Create a web-UI-configured RUM operation: the same object created by clicking "Create Operation" in the RUM Operations UI.

  • Cws agent events schema

    Tool name: cws_agent_events_schema

    Get the schema (available fields) for Workload Protection agent events — the raw runtime security events (process, file, network, and DNS activity) collected by the Datadog Agent.

  • Ddsql create link

    Tool name: ddsql_create_link

    Generate a Datadog UI link to the DDSQL editor with the given query pre-populated.

  • Ddsql get spec

    Tool name: ddsql_get_spec

    Get a compact DDSQL capability spec with supported SQL functions, SQL keywords, and DDSQL-specific deltas from vanilla PostgreSQL.

  • Ddsql read saved query

    Tool name: ddsql_read_saved_query

    Read a single saved DDSQL query by its query_id.

  • Ddsql run query

    Tool name: ddsql_run_query

    Run a DDSQL query and return results.

  • Ddsql schema get table columns

    Tool name: ddsql_schema_get_table_columns

    Get static SQL columns for a DDSQL table from schema metadata.

  • Ddsql schema search tables

    Tool name: ddsql_schema_search_tables

    Search DDSQL datasets across four providers: public tables, reference tables, metrics, and published analyses.

  • Ddsql schema search unstructured fields

    Tool name: ddsql_schema_search_unstructured_fields

    Search and rank fields for an unstructured DDSQL source.

  • Ddsql search saved queries

    Tool name: ddsql_search_saved_queries

    Search and list saved DDSQL queries.

  • Ddsql upsert saved query

    Tool name: ddsql_upsert_saved_query

    Create or update a saved DDSQL query.

  • Delete data observability monitor annotations

    Tool name: delete_data_observability_monitor_annotations

    Delete Data Quality monitor annotations by id.

  • Delete Datadog dashboard

    Tool name: delete_datadog_dashboard

    Permanently deletes a Datadog dashboard by ID.

  • Delete Datadog published analysis

    Tool name: delete_datadog_published_analysis

    Unpublishes a published analysis by ID.

  • Delete Datadog security aap custom rule

    Tool name: delete_datadog_security_aap_custom_rule

    Delete an AAP (App & API Protection) WAF custom rule by id.

  • Delete Datadog security detection rules

    Tool name: delete_datadog_security_detection_rules

    Delete one or more Cloud SIEM detection rules by ID.

  • Delete Datadog security findings automation rule

    Tool name: delete_datadog_security_findings_automation_rule

    Delete a security findings automation rule.

  • Delete Datadog security iac custom rule

    Tool name: delete_datadog_security_iac_custom_rule

    Permanently delete an IaC custom rule.

  • Delete Datadog security suppression

    Tool name: delete_datadog_security_suppression

    Delete a security monitoring suppression rule in Datadog.

  • Delete Datadog security trace passlist

    Tool name: delete_datadog_security_trace_passlist

    Delete an AAP (App & API Protection) passlist/allowlist entry — also known as a WAF exclusion filter — by exclusion_filter_id.

  • Delete Datadog skill

    Tool name: delete_datadog_skill

    Delete one of your own library skills from your organization's Skills Library — a separate, user-authored set of task guides, distinct from any built-in "Skills" your own agent tooling may already…

  • Delete Datadog spreadsheet

    Tool name: delete_datadog_spreadsheet

    Permanently delete a Datadog spreadsheet by ID.

  • Delete Datadog workflow

    Tool name: delete_datadog_workflow

    Delete a Datadog Workflow Automation workflow by ID.

  • Delete llmobs annotation queue

    Tool name: delete_llmobs_annotation_queue

    Permanently delete an annotation queue and everything in it — its queued interactions and all human review labels recorded on them.

  • Delete llmobs annotation queue interactions

    Tool name: delete_llmobs_annotation_queue_interactions

    Remove interactions from an annotation queue.

  • Delete llmobs annotations

    Tool name: delete_llmobs_annotations

    Delete annotations from a queue, discarding those review labels.

  • Delete llmobs evaluator

    Tool name: delete_llmobs_evaluator

    Delete an LLM-judge evaluator configuration by name.

  • Delete llmobs experiments

    Tool name: delete_llmobs_experiments

    Delete experiment runs by ID.

  • Delete RUM metric

    Tool name: delete_rum_metric

    Delete a RUM custom metric by ID.

  • Delete RUM operation

    Tool name: delete_rum_operation

    Permanently delete a web-UI-configured RUM operation: the same object deleted by removing an operation in the RUM Operations UI.

  • Delete RUM retention filter

    Tool name: delete_rum_retention_filter

    Permanently delete a RUM retention filter by ID.

  • Deployment gates onboarding

    Tool name: deployment_gates_onboarding

    Configure a Datadog Deployment Gate for a project so a bad deployment is halted automatically.

  • Describe Datadog k8s resource

    Tool name: describe_datadog_k8s_resource

    Get detailed information about a specific Kubernetes resource.

  • Detach Datadog security findings ticket

    Tool name: detach_datadog_security_findings_ticket

    Detach security findings from their linked case (and any downstream Jira issue, ServiceNow ticket, or Linear issue).

  • Devices onboarding

    Tool name: devices_onboarding

    Step-by-step instructions for adding initial Datadog RUM SDK to a project environment.

  • Diff network device configurations

    Tool name: diff_network_device_configurations

    Compare two ndm network device configuration snapshots and return a unified diff.

  • Do not call refresh widget

    Tool name: do_not_call_refresh_widget

    Do-not-call

  • Docker onboarding

    Tool name: docker_onboarding

    Installs and configures the Datadog Agent container to collect infrastructure metrics, container telemetry, APM traces, and logs.

  • Ecs onboarding

    Tool name: ecs_onboarding

    Step-by-step instructions for adding initial Datadog Observability setup to ECS applications and configurations.

  • Edit Datadog notebook

    Tool name: edit_datadog_notebook

    Edits an existing notebook.

  • Edit global variables

    Tool name: edit_global_variables

    Partially edit a Synthetics global variable by id.

  • Edit synthetics tests

    Tool name: edit_synthetics_tests

    Edit the configuration of a Synthetics test.

  • Estimate Datadog metric cardinality

    Tool name: estimate_datadog_metric_cardinality

    Estimate the timeseries cardinality for a metric with a given allowlist of tag keys using the Metrics without Limits cardinality estimator.

  • Execute code

    Tool name: execute_code

    Execute JavaScript in a sandbox with access to Datadog through the official TypeScript-SDK-shaped API and explicitly enabled code-exec extensions.

  • Execute Datadog workflow

    Tool name: execute_datadog_workflow

    Start a new execution instance for a Datadog Workflow Automation workflow by ID.

  • Expand llmobs spans

    Tool name: expand_llmobs_spans

    Load the children of specific spans in a trace, enabling progressive tree exploration.

  • Explore profiling call graph

    Tool name: explore_profiling_call_graph

    Explore a call graph to identify hot call relationships for the provided profile type.

  • Explore profiling flame graph

    Tool name: explore_profiling_flame_graph

    Obtain a list of top stacktraces based on their value contribution for the provided profile type.

  • Explore profiling RUM flamegraph

    Tool name: explore_profiling_rum_flamegraph

    Returns a flamegraph for profiles scoped to RUM events matching a given metric and optional filter.

  • Explore profiling timeline

    Tool name: explore_profiling_timeline

    Analyze timeline activity showing lane groups (threads, GC, etc.) and their CPU/I/O activities.

  • Find Datadog database instances

    Tool name: find_datadog_database_instances

    Discover and rank database instances for DBM investigation.

  • Find llmobs error spans

    Tool name: find_llmobs_error_spans

    Find all error spans in a trace with propagation context.

  • Find new jumps

    Tool name: find_new_jumps

    Detects jumps (sudden anomalies) in a single APM timeseries for a service.

  • Forecast timeseries

    Tool name: forecast_timeseries

    Forecast future values of a time series using Datadog's time-series foundation model.

  • Generate Datadog security iac custom rule

    Tool name: generate_datadog_security_iac_custom_rule

    Generate a Rego IaC custom rule from a natural-language description.

  • Generate monitor message

    Tool name: generate_monitor_message

    Generates a monitor message with What's Happening, Impact, and Links sections from a monitor query.

  • Get canary results

    Tool name: get-canary-results

    Review the performance of a canary deployment

  • Get feature flag

    Tool name: get-feature-flag

    Gets variants and status in environment for a specific feature flag by ID or key.

  • Get guardrail metric

    Tool name: get-guardrail-metric

    Get details for a specific guardrail metric by ID.

  • Get onboarding step

    Tool name: get-onboarding-step

    Get onboarding step.

  • Get saved filter

    Tool name: get-saved-filter

    Get a saved filter by id, including its targeting rules.

  • Get active feature flags

    Tool name: get_active_feature_flags

    Do-not-call

  • Get autonomous system status

    Tool name: get_autonomous_system_status

    Get the health status of an autonomous system (AS) using Network Path data.

  • Get change stories

    Tool name: get_change_stories

    Retrieve change events for an APM service over a time range.

  • Get cloud resource details

    Tool name: get_cloud_resource_details

    Get detailed information about a specific cloud resource using its provider-native identifier.

  • Get data catalog schema

    Tool name: get_data_catalog_schema

    Return the entity type schema for every platform this org has data in.

  • Get data entity details

    Tool name: get_data_entity_details

    Fetch full details and attributes for one or more data entities by their entity IDs.

  • Get data entity hierarchy

    Tool name: get_data_entity_hierarchy

    Fetch the containment hierarchy (ancestors and descendants) for one or more entities.

  • Get data entity lineage

    Tool name: get_data_entity_lineage

    Fetch the live reachable lineage subgraph from one or more anchor entities.

  • Get data observability monitor

    Tool name: get_data_observability_monitor

    Retrieves data observability metrics for a given monitor ID.

  • Get data observability monitor coverage

    Tool name: get_data_observability_monitor_coverage

    Fetch all Data Quality monitors for this org and resolve each monitor's entity filter to return the full set of entities it is configured to cover.

  • Get data observability monitor group statuses

    Tool name: get_data_observability_monitor_group_statuses

    Query the current alert and warn state of DQ monitor groups from the alerting service.

  • Get data observability recommendation

    Tool name: get_data_observability_recommendation

    Gets the full details of a single Data Observability recommendation by id, including its structured body_sections describing the problem, evidence, and proposed change.

  • Get Datadog case

    Tool name: get_datadog_case

    Retrieve a Datadog Work Item (also called a Case) by ID (uuid), key (e.g., CASE-1234), or public ID.

  • Get Datadog code coverage branch summary

    Tool name: get_datadog_code_coverage_branch_summary

    Fetch aggregated code coverage summary metrics for a repository branch.

  • Get Datadog code coverage commit summary

    Tool name: get_datadog_code_coverage_commit_summary

    Fetch aggregated code coverage summary metrics for a repository commit.

  • Get Datadog code coverage files

    Tool name: get_datadog_code_coverage_files

    Fetch per-file code coverage line data for a repository commit, branch, or pull request.

  • Get Datadog code coverage PR summary

    Tool name: get_datadog_code_coverage_pr_summary

    Fetch aggregated code coverage summary metrics for a pull request.

  • Get Datadog dashboard

    Tool name: get_datadog_dashboard

    Retrieves a custom or integration Datadog dashboard by ID, returning its title, description, tags, widgets, and template variables.

  • Get Datadog database calling services

    Tool name: get_datadog_database_calling_services

    Identify upstream APM services and resources that call database queries.

  • Get Datadog database explain plans

    Tool name: get_datadog_database_explain_plans

    Retrieve explain plans for a query or plan signature within a timeframe.

  • Get Datadog database health signals

    Tool name: get_datadog_database_health_signals

    Run database health checks to identify potential issues.

  • Get Datadog database instance settings

    Tool name: get_datadog_database_instance_settings

    Fetch collected configuration settings for one Database Monitoring instance (the same values as the Configuration tab).

  • Get Datadog database query performance

    Tool name: get_datadog_database_query_performance

    Analyze a specific SQL query's performance — use when investigating slow queries, high database load, or resource-intensive queries.

  • Get Datadog database query statement

    Tool name: get_datadog_database_query_statement

    Retrieve the SQL statement text for a given query signature.

  • Get Datadog database recommendations

    Tool name: get_datadog_database_recommendations

    Retrieve live database recommendations for a database, query, table, host, or index.

  • Get Datadog database schemas

    Tool name: get_datadog_database_schemas

    Fetch schema definitions (columns, indexes, foreign keys, partitions) for one or more database objects.

  • Get Datadog error tracking issue

    Tool name: get_datadog_error_tracking_issue

    Get detailed information about a specific Error Tracking Issue from Datadog.

  • Get Datadog flaky tests

    Tool name: get_datadog_flaky_tests

    Search flaky tests from Datadog Test Optimization.

  • Get Datadog flaky tests management policies

    Tool name: get_datadog_flaky_tests_management_policies

    Return the Flaky Tests Management (FTM) policies configured for a repository.

  • Get Datadog form

    Tool name: get_datadog_form

    Get a specific Datadog form by its ID, including full metadata and datastore configuration.

  • Get Datadog incident

    Tool name: get_datadog_incident

    Get detailed information about a specific Datadog incident by ID, including status, severity, timeline, associated users, and attachments.

  • Get Datadog k8s manifest

    Tool name: get_datadog_k8s_manifest

    Get the YAML manifest for a specific Kubernetes resource.

  • Get Datadog metric

    Tool name: get_datadog_metric

    Query metrics data from Datadog.

  • Get Datadog metric context

    Tool name: get_datadog_metric_context

    Get metadata (description, type, unit, integration), available tags/dimensions, and optionally related assets for a metric.

  • Get Datadog notebook

    Tool name: get_datadog_notebook

    Retrieve information about a specific Datadog notebook by ID.

  • Get Datadog security aap blocking config

    Tool name: get_datadog_security_aap_blocking_config

    Get the org-wide AAP (App & API Protection, formerly ASM / Application Security Monitoring) blocking configuration.

  • Get Datadog security aap custom rules

    Tool name: get_datadog_security_aap_custom_rules

    Get AAP (App & API Protection, formerly ASM / Application Security Monitoring) WAF custom rules — user-authored in-app WAF rules that match request traffic and either monitor it or block it.

  • Get Datadog security aap denylist

    Tool name: get_datadog_security_aap_denylist

    List AAP (App & API Protection) denylist entries — IPs, users, user-agents AAP currently BLOCKS or monitors via automated security response.

  • Get Datadog security detection rules

    Tool name: get_datadog_security_detection_rules

    Provide rule_id — always returns the full rule object regardless of fields or full_rule.

  • Get Datadog security detection rules schema

    Tool name: get_datadog_security_detection_rules_schema

    Return the schema / authoring reference for Datadog Cloud SIEM detection rules.

  • Get Datadog security findings schema

    Tool name: get_datadog_security_findings_schema

    Call this first before using analyze_datadog_security_findings.

  • Get Datadog security findings ticket suggestions

    Tool name: get_datadog_security_findings_ticket_suggestions

    Get ranked project and integration suggestions for creating Jira issues, ServiceNow tickets, or Linear issues.

  • Get Datadog security iac custom rules

    Tool name: get_datadog_security_iac_custom_rules

    Get Datadog IaC custom rules.

  • Get Datadog security iac custom rules schema

    Tool name: get_datadog_security_iac_custom_rules_schema

    Return the static schema for Datadog IaC custom rules: allowed platforms, AI generation platforms, categories, severities, rule id format, and the fields each write tool accepts.

  • Get Datadog security IOC indicator

    Tool name: get_datadog_security_ioc_indicator

    Retrieve full detail for one IoC indicator by value (score, category, AS info, GeoIP, log sources, services, signal counts, OCSF fields).

  • Get Datadog security IOC schema

    Tool name: get_datadog_security_ioc_schema

    Discover filterable fields and their values for IoC Explorer.

  • Get Datadog security signal

    Tool name: get_datadog_security_signal

    Get the full details of a single Datadog security signal by ID.

  • Get Datadog security signals schema

    Tool name: get_datadog_security_signals_schema

    Get the schema (available fields) for security signals.

  • Get Datadog security suppressions

    Tool name: get_datadog_security_suppressions

    Call with no ID arguments (optionally filter with query, sort, page_size, page_number)

  • Get Datadog security trace passlist

    Tool name: get_datadog_security_trace_passlist

    List all AAP (App & API Protection) allowlist / passlist entries that exempt specific traces from AAP security analysis and WAF blocking.

  • Get Datadog spreadsheet

    Tool name: get_datadog_spreadsheet

    Retrieve a Datadog spreadsheet by ID.

  • Get Datadog spreadsheet reference

    Tool name: get_datadog_spreadsheet_reference

    Returns the field reference guides for building inputs to upsert_datadog_spreadsheet.

  • Get Datadog spreadsheet tab data

    Tool name: get_datadog_spreadsheet_tab_data

    Retrieve paginated data from a table, sheet, or legacy pivot in a Datadog spreadsheet.

  • Get Datadog spreadsheet table data

    Tool name: get_datadog_spreadsheet_table_data

    DEPRECATED: use get_datadog_spreadsheet_tab_data instead, which provides a unified interface for table tabs.

  • Get Datadog test optimization settings

    Tool name: get_datadog_test_optimization_settings

    Return which Test Optimization features are enabled or disabled for a service.

  • Get Datadog trace

    Tool name: get_datadog_trace

    Retrieve a trace by trace ID from Datadog APM.

  • Get Datadog workflow

    Tool name: get_datadog_workflow

    Retrieve a single Datadog Workflow Automation workflow by ID.

  • Get Datadog workflow action

    Tool name: get_datadog_workflow_action

    Get the full definition of a Datadog Workflow Automation action by actionId.

  • Get Datadog workflow instance

    Tool name: get_datadog_workflow_instance

    Retrieve a Datadog Workflow Automation execution instance.

  • Get Datadog workflow spec schema

    Tool name: get_datadog_workflow_spec_schema

    Get the JSON schema for a Datadog Workflow Automation spec.

  • Get Datadog workflow step data

    Tool name: get_datadog_workflow_step_data

    Retrieve the execution data for a single step of a Datadog Workflow Automation instance: its status, error message, inputs, evaluated inputs/outputs, and the execution context the step's expressions…

  • Get dora fields

    Tool name: get_dora_fields

    List the valid measures, facets, aggregations, and cardinality_fields for aggregate_dora_events, per DORA index (deployment, commit, pull_request, failure).

  • Get entity descriptions

    Tool name: get_entity_descriptions

    Get custom user-defined descriptions for data entities by their IDs.

  • Get entity tags

    Tool name: get_entity_tags

    Get custom user-defined tags for data entities.

  • Get external provider status

    Tool name: get_external_provider_status

    Check if external provider outages could be causing service issues.

  • Get form definition schema

    Tool name: get_form_definition_schema

    Get the JSON Schema used to validate a Datadog form's data_definition and ui_definition.

  • Get form responses

    Tool name: get_form_responses

    Get submitted responses for a Datadog form.

  • Get global variables

    Tool name: get_global_variables

    Read this org's Synthetics global variables.

  • Get influential tags

    Tool name: get_influential_tags

    Identify the root cause of a metric anomaly by finding which tag values are driving it.

  • Get kafka client configs

    Tool name: get_kafka_client_configs

    Return producer- and/or consumer-side Kafka client configuration for one or more services, as collected by Data Streams Monitoring (DSM).

  • Get llmobs agent insight

    Tool name: get_llmobs_agent_insight

    Get one Agent Insight by UUID, including its full current payload, normalized recommendation summaries, and feedback_targets.

  • Get llmobs agent loop

    Tool name: get_llmobs_agent_loop

    Get a chronological view of an agent's execution loop, showing each step (LLM calls, tool invocations, decisions) in order.

  • Get llmobs all dataset records

    Tool name: get_llmobs_all_dataset_records

    Walk a dataset's records page by page server-side and return them as shaped previews, with a cursor that always resumes exactly where the walk stopped.

  • Get llmobs annotated interactions

    Tool name: get_llmobs_annotated_interactions

    Read what is in an annotation queue: every queued interaction with the annotations recorded on it.

  • Get llmobs annotation label schema

    Tool name: get_llmobs_annotation_label_schema

    Read the label definitions of an annotation queue: what each label is called, what kind of value it accepts, and its server-assigned id.

  • Get llmobs annotations by content IDS

    Tool name: get_llmobs_annotations_by_content_ids

    Look up, across every annotation queue in the org, whether given traces, sessions, or spans are queued for review, whether anyone has reviewed them, and what the reviewers said.

  • Get llmobs dataset records

    Tool name: get_llmobs_dataset_records

    Read dataset records with structured previews + a schema summary.

  • Get llmobs eval aggregate stats

    Tool name: get_llmobs_eval_aggregate_stats

    Get aggregate statistics for a specific evaluator over a time window, optionally filtered by ML application.

  • Get llmobs evaluator

    Tool name: get_llmobs_evaluator

    Retrieve an LLM-judge evaluator configuration by name.

  • Get llmobs experiment dimension values

    Tool name: get_llmobs_experiment_dimension_values

    Get the unique values for a dimension, with counts.

  • Get llmobs experiment event

    Tool name: get_llmobs_experiment_event

    Get full details for a single experiment event, including its input, output, expected_output, all metrics, and dimensions.

  • Get llmobs experiment metric values

    Tool name: get_llmobs_experiment_metric_values

    Get statistical analysis for a specific evaluation metric, optionally segmented by a dimension.

  • Get llmobs experiment summary

    Tool name: get_llmobs_experiment_summary

    Get a high-level summary of an experiment with pre-computed statistics for all evaluation metrics.

  • Get llmobs full dataset records

    Tool name: get_llmobs_full_dataset_records

    Fetch up to 3 specific records with untrimmed input / expected_output / metadata.

  • Get llmobs model pricing

    Tool name: get_llmobs_model_pricing

    Get canonical LLM Observability model pricing rate cards.

  • Get llmobs pattern config

    Tool name: get_llmobs_pattern_config

    Get the most-recently-modified Topics Discovery (Patterns) configuration for the caller's org.

  • Get llmobs pattern points

    Tool name: get_llmobs_pattern_points

    Get a cursor-paginated page of clustering points (individual spans) assigned to a single topic.

  • Get llmobs pattern run status

    Tool name: get_llmobs_pattern_run_status

    Get the status and per-activity progress of the most recent Topics Discovery run for a config.

  • Get llmobs patterns

    Tool name: get_llmobs_patterns

    Get the topic hierarchy discovered by a Topics Discovery run.

  • Get llmobs patterns with points

    Tool name: get_llmobs_patterns_with_points

    Get the topic hierarchy for a run with the clustering point span IDs inlined on each leaf (hierarchy-0) topic.

  • Get llmobs project

    Tool name: get_llmobs_project

    Look up an LLM Observability experiments project by ID or name.

  • Get llmobs span content

    Tool name: get_llmobs_span_content

    Retrieve the actual content of a specific field from a span.

  • Get llmobs span details

    Tool name: get_llmobs_span_details

    Get detailed metadata for one or more spans within a trace.

  • Get llmobs trace

    Tool name: get_llmobs_trace

    Get the full structure of a trace as a span hierarchy tree.

  • Get metric cardinality profile

    Tool name: get_metric_cardinality_profile

    Identify observed tag-level drivers of a metric's indexed volume.

  • Get metric governance status

    Tool name: get_metric_governance_status

    Get the MWL governance status for 1-20 metrics: tag configuration, exemption (if any), and optionally which policy applies.

  • Get metric tag configuration

    Tool name: get_metric_tag_configuration

    Get the exact direct per-metric MWL tag configuration for 1-20 metrics.

  • Get metric tags

    Tool name: get_metric_tags

    Get indexed and ingested tag keys with one sample observed value per key for a Datadog metric over the last four hours.

  • Get metric volume

    Tool name: get_metric_volume

    Get indexed and ingested series counts for 1-20 metrics.

  • Get monitor coverage

    Tool name: get_monitor_coverage

    Finds monitoring gaps and coverage for services or hosts.

  • Get monitor templates

    Tool name: get_monitor_templates

    Retrieves official Datadog monitor templates as starting points for creating monitors.

  • Get ndm device

    Tool name: get_ndm_device

    Get detailed information about a network device by its device_id.

  • Get network device configuration

    Tool name: get_network_device_configuration

    Retrieve the full text of an NDM network device configuration snapshot (running config or startup config) for review, compliance auditing, or troubleshooting.

  • Get network path test runs

    Tool name: get_network_path_test_runs

    Search and retrieve Network Path test runs using a query.

  • Get popular warehouse tables by query frequency

    Tool name: get_popular_warehouse_tables_by_query_frequency

    Rank database tables by query activity, broken out by who is querying them.

  • Get profiling field values

    Tool name: get_profiling_field_values

    The value string (e.g. "web-server", "us-east-1").

  • Get profiling fields

    Tool name: get_profiling_fields

    One of "frame" (stack frame attributes like function, file, package), "top_frame" (top-of-stack frame), "top_mycode_frame" (top user-code frame), "context" (label-based context like endpoint),…

  • Get profiling profile types

    Tool name: get_profiling_profile_types

    Returns profile types and families that can be used by other profiling tools given a query context.

  • Get profiling runtime IDS

    Tool name: get_profiling_runtime_ids

    Returns individual profiled runtime IDs (processes/containers).

  • Get profiling service insights

    Tool name: get_profiling_service_insights

    A high-level summary explaining the issue and why it matters

  • Get profiling services

    Tool name: get_profiling_services

    Returns profiled services along with their profiling families that can be queried for profiling data in the given query context.

  • Get profiling tag names

    Tool name: get_profiling_tag_names

    Discover available tag names (e.g. service, host, env, version, family, runtime-id) from the profile metadata track.

  • Get profiling tag values

    Tool name: get_profiling_tag_values

    Get the values for a specific tag (e.g. service, host, env, version, family, runtime-id) from the profile metadata track.

  • Get profiling timeseries

    Tool name: get_profiling_timeseries

    Query profiling data as timeseries, aggregated into time buckets.

  • Get PRS by head branch

    Tool name: get_prs_by_head_branch

    Retrieves all pull requests for a repository that have a specific head branch.

  • Get reference table rows

    Tool name: get_reference_table_rows

    Retrieve specific rows from a reference table by their primary key values.

  • Get replay summary

    Tool name: get_replay_summary

    Get an AI-generated play-by-play of what a user did during a session replay — what pages they visited, what actions they took, and what happened step by step.

  • Get RUM insight

    Tool name: get_rum_insight

    Get a pre-computed performance insight for a specific RUM view.

  • Get RUM operation insights

    Tool name: get_rum_operation_insights

    Top failing endpoints, custom context attributes on failed runs, and correlated crash errors.

  • Get RUM operation summary

    Tool name: get_rum_operation_summary

    Get a deep-dive health summary for a single RUM operation, identified by operation_id (preferred — skips name resolution) or operation_name (at least one is required).

  • Get RUM summary

    Tool name: get_rum_summary

    Returns a performance summary for a RUM application with period-over-period diffs and anomaly windows.

  • Get RUM view waterfall

    Tool name: get_rum_view_waterfall

    Reconstruct the chronological load timeline for ONE specific RUM view occurrence, web or mobile.

  • Get spark job health

    Tool name: get_spark_job_health

    Retrieves detailed health metrics for a single Spark or Databricks job run.

  • Get spark SQL plan

    Tool name: get_spark_sql_plan

    Retrieves the Spark SQL physical execution plan from a spark.stage span.

  • Get subject kafka schemas

    Tool name: get_subject_kafka_schemas

    Return all Kafka Schema Registry versions for a single subject on a given Kafka cluster.

  • Get synthetics tests

    Tool name: get_synthetics_tests

    Search and retrieve details about Synthetics tests configured in Datadog.

  • Get tag indexing rules

    Tool name: get_tag_indexing_rules

    List all Metrics Without Limits (MWL) tag indexing rules in priority order.

  • Get user config

    Tool name: get_user_config

    Do-not-call

  • Get warehouse query history

    Tool name: get_warehouse_query_history

    Fetch recent queries that touched one or more specific entities, in reverse chronological order (most recent first).

  • Get watchdog story

    Tool name: get_watchdog_story

    Retrieve the full payload of a specific Watchdog Story by its key: insight attributes (metrics, queries, scores), timeline, hero/usl/summary sections, and automated root-cause analysis.

  • Get widget

    Tool name: get_widget

    Retrieve and visualize Datadog metrics, traces, logs, and other data as interactive charts.

  • Get widget reference

    Tool name: get_widget_reference

    Get TypeScript schemas and building instructions for widget types.

  • Inspect data observability monitor annotations

    Tool name: inspect_data_observability_monitor_annotations

    Inspect Data Quality monitor data, anomaly bounds, and existing annotations before proposing a change.

  • Kubernetes onboarding

    Tool name: kubernetes_onboarding

    Step-by-step instructions for adding initial Datadog Observability setup to Kubernetes applications and configurations.

  • Linux onboarding

    Tool name: linux_onboarding

    Installs and configures the Datadog Agent on a Linux host to collect infrastructure metrics, APM traces, and logs.

  • List allocations for feature flag

    Tool name: list-allocations-for-feature-flag

    List allocations for a specific feature flag.

  • List environments

    Tool name: list-environments

    List all flagging environments for the organization.

  • List feature flags

    Tool name: list-feature-flags

    List all feature flags for the organization.

  • List guardrail metrics

    Tool name: list-guardrail-metrics

    List all available guardrail metrics for the organization.

  • List onboarding flags

    Tool name: list-onboarding-flags

    Check for existing flags tagged source:agentic-onboarding that qualify for reuse: a non-production environment, currently ENABLED, whose queries already cover the given dd_env under the runtime…

  • List saved filters

    Tool name: list-saved-filters

    List saved filters for the organization.

  • List stale feature flags

    Tool name: list-stale-feature-flags

    List stale feature flags in the organization, each enriched with the reason it is stale and a tool_hints array of suggested next-step tools to clean it up.

  • List all kafka schemas

    Tool name: list_all_kafka_schemas

    List every Kafka Schema Registry schema known to Data Streams Monitoring (DSM) for the current org within a time window.

  • List audit events

    Tool name: list_audit_events

    List Datadog Audit Trail events over a time window.

  • List autonomous system statuses

    Tool name: list_autonomous_system_statuses

    Get an overview of autonomous system (AS) health from Network Path data, without needing a specific ASN.

  • List data observability recommendations

    Tool name: list_data_observability_recommendations

    Lists Data Observability cost- and performance-optimization recommendations for data jobs and queries (Spark, Databricks, Snowflake, BigQuery), each with estimated cost and duration savings.

  • List Datadog case projects

    Tool name: list_datadog_case_projects

    List Datadog Work Management (Case Management) projects (id, name, key).

  • List Datadog database optimizations

    Tool name: list_datadog_database_optimizations

    List a database's ready-to-apply, benchmark-validated query optimizations — the same set shown on the Datadog DBM Optimizations page.

  • List Datadog security findings automation rules

    Tool name: list_datadog_security_findings_automation_rules

    List automation rules for security findings.

  • List Datadog skills

    Tool name: list_datadog_skills

    List available Datadog skill guides.

  • List Datadog workflow instances

    Tool name: list_datadog_workflow_instances

    List the execution instances of a Datadog Workflow Automation workflow.

  • List Datadog workflows

    Tool name: list_datadog_workflows

    Find Datadog Workflow Automation workflows and inspect their metadata.

  • List downtimes

    Tool name: list_downtimes

    Lists Datadog downtimes with their ID, status, scope, monitor target and schedule.

  • List kafka broker configs

    Tool name: list_kafka_broker_configs

    List configuration versions for a Kafka broker on a given cluster, as collected by Data Streams Monitoring (DSM).

  • List kafka topic configs

    Tool name: list_kafka_topic_configs

    List configuration versions for a Kafka topic on a given cluster, as collected by Data Streams Monitoring (DSM).

  • List llmobs agent insights

    Tool name: list_llmobs_agent_insights

    List Agent Insights for the caller's organization as compact triage cards.

  • List llmobs annotation queues

    Tool name: list_llmobs_annotation_queues

    List Agent Observability annotation queues — the review lists where humans (or agents) grade traces, sessions, and spans against a defined set of labels.

  • List llmobs datasets

    Tool name: list_llmobs_datasets

    List experiments datasets within a project, with optional id or name filter.

  • List llmobs evals

    Tool name: list_llmobs_evals

    List every evaluator configured for the caller's organization, across all ML applications.

  • List llmobs evals by ml app

    Tool name: list_llmobs_evals_by_ml_app

    List all evaluators configured for an ML application.

  • List llmobs experiment events

    Tool name: list_llmobs_experiment_events

    List experiment events with minimal summaries, supporting filtering by dimension or metric and sorting by metric value.

  • List llmobs experiments

    Tool name: list_llmobs_experiments

    List experiment runs in a project or against a dataset, newest first.

  • List llmobs feedback events

    Tool name: list_llmobs_feedback_events

    List the individual feedback events submitted over a time window, newest first, one page at a time.

  • List llmobs feedback labels

    Tool name: list_llmobs_feedback_labels

    List the feedback labels submitted for an ML application over a time window.

  • List llmobs pattern configs

    Tool name: list_llmobs_pattern_configs

    List all Topics Discovery (Patterns) configurations for the caller's org.

  • List llmobs pattern runs

    Tool name: list_llmobs_pattern_runs

    List the completed Topics Discovery runs for a config, newest first.

  • List llmobs projects

    Tool name: list_llmobs_projects

    List all LLM Observability experiments projects for the org.

  • List reference table rows

    Tool name: list_reference_table_rows

    Fetch a page of rows from a reference table in primary-key order.

  • List reference tables

    Tool name: list_reference_tables

    List reference tables in the organization.

  • List synthetics locations

    Tool name: list_synthetics_locations

    Returns all Synthetics locations available to this org — managed (aws:, gcp:, azure: prefixes) and private (pl: prefix).

  • LLM observability onboarding

    Tool name: llm_observability_onboarding

    Step-by-step instructions for adding initial Datadog LLM Observability (AKA, 'LLMObs') setup to applications with an LLM or AI agent.

  • Load Datadog skill

    Tool name: load_datadog_skill

    Load a Datadog skill guide before using related Datadog tools.

  • Manage Datadog error tracking issue comments

    Tool name: manage_datadog_error_tracking_issue_comments

    Add, update, or delete a comment on a Datadog Error Tracking issue.

  • Manage metric tag configuration

    Tool name: manage_metric_tag_configuration

    Create, update, or delete a per-metric MWL tag configuration.

  • Manage tag indexing rule

    Tool name: manage_tag_indexing_rule

    Create, update, delete, or reorder a Metrics Without Limits tag indexing rule.

  • Monitor groups search

    Tool name: monitor_groups_search

    Searches monitor groups to find which specific groups (e.g. host:web-1) are alerting across monitors.

  • Mute Datadog security findings

    Tool name: mute_datadog_security_findings

    Mute or unmute security findings.

  • Optimize Datadog database query

    Tool name: optimize_datadog_database_query

    Analyze a SQL query for optimization opportunities using deterministic rules plus LLM-assisted analysis.

  • Publish Datadog form

    Tool name: publish_datadog_form

    Publish a specific draft version of a Datadog form, making it the active published version.

  • Publish Datadog security iac custom rule

    Tool name: publish_datadog_security_iac_custom_rule

    Publish a draft IaC custom rule so it becomes active for scans.

  • Publish Datadog workflow

    Tool name: publish_datadog_workflow

    Publish a Datadog Workflow Automation workflow.

  • Rank data entities by lineage degree

    Tool name: rank_data_entities_by_lineage_degree

    Rank entities by their transitive lineage connectivity using a pre-built snapshot.

  • Rank data observability monitor candidates

    Tool name: rank_data_observability_monitor_candidates

    Rank tables by their importance for monitoring, combining lineage impact and query activity into a single composite score.

  • Read kafka messages

    Tool name: read_kafka_messages

    Read messages from a given Kafka cluster/topic via the Datadog Agent.

  • Recommend monitor threshold

    Tool name: recommend_monitor_threshold

    Recommends a threshold value for a metric monitor query based on peer-group statistics.

  • Reorder Datadog security findings automation rules

    Tool name: reorder_datadog_security_findings_automation_rules

    Move a security findings automation rule up or down in the evaluation order.

  • Reorder RUM retention filters

    Tool name: reorder_rum_retention_filters

    Set the full evaluation order of a RUM application's retention filters.

  • Restore llmobs dataset version

    Tool name: restore_llmobs_dataset_version

    Roll a dataset's records back to a previous version.

  • Retry Datadog ci job

    Tool name: retry_datadog_ci_job

    ⚠️ WRITE OPERATION — queues a retry for a failed CI job via Datadog's CI Action backend.

  • Run synthetics tests

    Tool name: run_synthetics_tests

    Trigger on-demand runs for one or more existing Synthetics tests by public_id; optionally apply shared locations, headers, body, variables, or start URL overrides.

  • Search audit events

    Tool name: search_audit_events

    Search Datadog Audit Trail events using a query string.

  • Search cws agent events

    Tool name: search_cws_agent_events

    Search and retrieve raw Workload Protection agent events — the low-level runtime security events collected by the Datadog Agent (eBPF-based) on hosts and containers.

  • Search data entities

    Tool name: search_data_entities

    Search for data entities in the data catalog.

  • Search Datadog cases

    Tool name: search_datadog_cases

    Search Datadog Work Items (also called Cases) with filters (status, priority, project, assignee).

  • Search Datadog ci pipeline events

    Tool name: search_datadog_ci_pipeline_events

    Search and retrieve CI pipeline events from Datadog with timing, failure reasons, error messages, and retry history.

  • Search Datadog dashboards

    Tool name: search_datadog_dashboards

    List and retrieve information about Datadog dashboards.

  • Search Datadog database plans

    Tool name: search_datadog_database_plans

    Search and retrieve Database Monitoring (DBM) query execution plans from Datadog.

  • Search Datadog database samples

    Tool name: search_datadog_database_samples

    Search and retrieve Database Monitoring (DBM) query samples from Datadog.

  • Search Datadog entities

    Tool name: search_datadog_entities

    Search Datadog services through the entity graph, including service ownership and direct upstream or downstream relationships.

  • Search Datadog error tracking issues

    Tool name: search_datadog_error_tracking_issues

    Search Error Tracking Issues from Datadog.

  • Search Datadog events

    Tool name: search_datadog_events

    Search and retrieve raw Datadog events (deployments, alerts, system activities, infrastructure changes, etc.).

  • Search Datadog forms

    Tool name: search_datadog_forms

    Search Datadog forms for the authenticated organization.

  • Search Datadog hosts

    Tool name: search_datadog_hosts

    Explore Datadog hosts inventory with SQL.

  • Search Datadog incidents

    Tool name: search_datadog_incidents

    Search Datadog incidents.

  • Search Datadog k8s resources

    Tool name: search_datadog_k8s_resources

    Search for Kubernetes resources.

  • Search Datadog logs

    Tool name: search_datadog_logs

    Search and retrieve raw log entries or log patterns.

  • Search Datadog metrics

    Tool name: search_datadog_metrics

    List available metrics in Datadog with optional filtering by name and tags.

  • Search Datadog monitors

    Tool name: search_datadog_monitors

    List and retrieve information about Datadog monitors.

  • Search Datadog notebooks

    Tool name: search_datadog_notebooks

    Search Datadog notebooks.

  • Search Datadog RUM events

    Tool name: search_datadog_rum_events

    Search and retrieve raw Datadog RUM events using advanced query syntax.

  • Search Datadog SDK

    Tool name: search_datadog_sdk

    Discover the exact operations and types needed for execute_code.

  • Search Datadog security findings

    Tool name: search_datadog_security_findings

    Fallback tool for retrieving full security finding details.

  • Search Datadog security IOC indicators

    Tool name: search_datadog_security_ioc_indicators

    List IoC Explorer indicators (IPs, domains, URLs, file hashes) matched against threat intel feeds.

  • Search Datadog security signals

    Tool name: search_datadog_security_signals

    Filter and list security signals from Datadog Security Monitoring matching criteria (status, time range, rule type, severity, service).

  • Search Datadog slos

    Tool name: search_datadog_slos

    Searches Datadog SLOs by name, tags, or type.

  • Search Datadog spans

    Tool name: search_datadog_spans

    Retrieve raw Datadog APM spans matching a query.

  • Search Datadog spreadsheets

    Tool name: search_datadog_spreadsheets

    Search Datadog spreadsheets by name or owner.

  • Search Datadog test events

    Tool name: search_datadog_test_events

    Search individual Datadog test events with execution metadata, error messages, stack traces, retry history, and flaky status.

  • Search Datadog users

    Tool name: search_datadog_users

    Search for Datadog users by email, name, or handle.

  • Search Datadog workflow actions

    Tool name: search_datadog_workflow_actions

    Search the Datadog Workflow Automation action catalog.

  • Search dora events

    Tool name: search_dora_events

    Search DORA deployments or merged-and-deployed pull requests, or fetch one event by ID.

  • Search llmobs spans

    Tool name: search_llmobs_spans

    Search for LLM Observability spans.

  • Search ndm devices

    Tool name: search_ndm_devices

    Search SNMP-monitored network devices (routers, switches, firewalls) in Datadog NDM.

  • Search ndm interfaces

    Tool name: search_ndm_interfaces

    Get all network interfaces (e.g., GigabitEthernet0/0/1, Vlan100) for a device.

  • Search network device configurations

    Tool name: search_network_device_configurations

    Search NDM network device configuration snapshots (running config, startup config) for change tracking, config drift detection, or compliance auditing.

  • Search PR insights

    Tool name: search_pr_insights

    Retrieves issues blocking a pull request to help resolve and fix problems.

  • Search replays

    Tool name: search_replays

    Search Datadog Session Replay recordings and return a list of sessions with replay links.

  • Search RUM applications

    Tool name: search_rum_applications

    Search RUM applications in the organization.

  • Search RUM metrics

    Tool name: search_rum_metrics

    Search the organization's RUM metrics.

  • Search RUM operations

    Tool name: search_rum_operations

    Search or list RUM operations in the organization.

  • Search RUM retention filters

    Tool name: search_rum_retention_filters

    Search RUM retention filters for an application.

  • Search watchdog insights

    Tool name: search_watchdog_insights

    Search the Watchdog Insights API for AI/ML-generated signals — stories, outliers, anomalies, recommendations, and correlations — aggregated from across the Datadog platform into a single response.

  • Search watchdog stories

    Tool name: search_watchdog_stories

    Automated anomalies and root-cause analyses Watchdog produces by correlating APM, infrastructure, and log signals.

  • Serverless onboarding

    Tool name: serverless_onboarding

    Step-by-step instructions for instrumenting serverless workloads with Datadog.

  • Source map uploads

    Tool name: source_map_uploads

    Step-by-step instructions for configuring source map uploads for a project to Datadog.

  • Studio onboarding

    Tool name: studio_onboarding

    Step-by-step instructions for adding Datadog Studio to a project.

  • Submit llmobs agent insight feedback

    Tool name: submit_llmobs_agent_insight_feedback

    Submit structured usefulness feedback for one Agent Insight after evaluating its evidence or acting on its recommendations, even if no status change is needed.

  • Submit llmobs experiment events

    Tool name: submit_llmobs_experiment_events

    Submit evaluation-metric events to an existing experiment.

  • Submit MCP feedback

    Tool name: submit_mcp_feedback

    Submit feedback about capabilities provided by this Datadog MCP server only.

  • Suggest data observability monitor filters

    Tool name: suggest_data_observability_monitor_filters

    Analyze a set of entities to find common attributes and naming patterns, then suggest monitor filter expressions that group subsets of those entities for use in monitor definitions.

  • Summarize data entity lineage

    Tool name: summarize_data_entity_lineage

    Get aggregate statistics about the lineage graph reachable from anchor entities.

  • Sync allocations for feature flag environment

    Tool name: sync-allocations-for-feature-flag-environment

    Synchronize allocations for a feature flag in a specific environment.

  • Sync experiment allocations for feature flag environment

    Tool name: sync-experiment-allocations-for-feature-flag-environment

    Synchronize allocations that include a FEATURE_GATE allocation linked to a standard experiment.

  • Synthetics test wizard

    Tool name: synthetics_test_wizard

    Validate (preview) or create (create) a Synthetics API http test.

  • Test optimization onboarding

    Tool name: test_optimization_onboarding

    Step-by-step instructions for adding Datadog Test Optimization setup this project.

  • Unarchive feature flag

    Tool name: unarchive-feature-flag

    Unarchive a previously archived feature flag, making it visible in the main list again.

  • Unarchive saved filter

    Tool name: unarchive-saved-filter

    Unarchive a previously archived saved filter.

  • Unblock Datadog security aap denylist

    Tool name: unblock_datadog_security_aap_denylist

    Remove AAP (App & API Protection) denylist entry — stop blocking IP/user/user-agent.

  • Unpublish Datadog workflow

    Tool name: unpublish_datadog_workflow

    Stop a Datadog Workflow Automation workflow from starting new automatic executions by unpublishing it, while preserving its base spec and any saved draft.

  • Update environment

    Tool name: update-environment

    Replace the attributes of an existing Feature Management environment.

  • Update feature flag environment

    Tool name: update-feature-flag-environment

    Update a feature flag in a specific environment by enabling/disabling it, changing the default variant, setting an override variant, or clearing an override variant.

  • Update saved filter

    Tool name: update-saved-filter

    Update a saved filter's name, description, and/or targeting rules.

  • Update data observability recommendation status

    Tool name: update_data_observability_recommendation_status

    Sets the lifecycle status of a Data Observability recommendation, e.g. to mark it applied (RESOLVED) or dismissed (IGNORED) after acting on it.

  • Update Datadog case

    Tool name: update_datadog_case

    Update a Datadog Work Item (also called a Case).

  • Update Datadog error tracking issue

    Tool name: update_datadog_error_tracking_issue

    Update an Error Tracking Issue in Datadog.

  • Update Datadog flaky test states

    Tool name: update_datadog_flaky_test_states

    ⚠️ WRITE OPERATION — updates the state of one or more flaky tests.

  • Update Datadog form

    Tool name: update_datadog_form

    Create a new draft version of a Datadog form, updating its schema and/or UI layout.

  • Update Datadog monitor

    Tool name: update_datadog_monitor

    Updates a SINGLE existing Datadog monitor identified by its numeric ID.

  • Update Datadog published analysis

    Tool name: update_datadog_published_analysis

    Updates a published analysis (also called a published dataset) by re-syncing it with the current notebook cell definitions.

  • Update Datadog security detection rule

    Tool name: update_datadog_security_detection_rule

    Update an existing Cloud SIEM detection rule by PUTing the supplied payload to PUT /api/v2/security_monitoring/rules/{rule_id}.

  • Update Datadog security findings automation rule

    Tool name: update_datadog_security_findings_automation_rule

    Update an existing security findings automation rule.

  • Update Datadog security iac custom rule

    Tool name: update_datadog_security_iac_custom_rule

    Create a new revision of an IaC custom rule, draft or published.

  • Update Datadog security IOC indicator triage

    Tool name: update_datadog_security_ioc_indicator_triage

    Set the triage state of an IoC indicator.

  • Update Datadog security signals triage

    Tool name: update_datadog_security_signals_triage

    Update the triage state and/or assignee of security signals.

  • Update Datadog security suppression

    Tool name: update_datadog_security_suppression

    Update an existing security monitoring suppression rule in Datadog.

  • Update Datadog skill

    Tool name: update_datadog_skill

    Update one of your own library skills in your organization's Skills Library — a separate, user-authored set of task guides, distinct from any built-in "Skills" your own agent tooling may already…

  • Update Datadog workflow

    Tool name: update_datadog_workflow

    Update an existing Datadog Workflow Automation workflow by ID.

  • Update entity description

    Tool name: update_entity_description

    Set or update the custom user-defined description for a data entity.

  • Update entity tags

    Tool name: update_entity_tags

    Add or remove custom user-defined tags on data entities.

  • Update jump state

    Tool name: update_jump_state

    Refreshes a previously-detected jump with a new analysis window to see if it has resolved, expired, or is still ongoing.

  • Update llmobs agent insight status

    Tool name: update_llmobs_agent_insight_status

    Update an Agent Insight lifecycle status.

  • Update llmobs annotation label schema

    Tool name: update_llmobs_annotation_label_schema

    Replace an annotation queue's label schema.

  • Update llmobs annotation queue

    Tool name: update_llmobs_annotation_queue

    Edit an annotation queue's name, description, or reviewer access.

  • Update llmobs experiment

    Tool name: update_llmobs_experiment

    Update the mutable properties of an existing experiment.

  • Update RUM operation

    Tool name: update_rum_operation

    Update a web-UI-configured RUM operation in place: the same object edited by the RUM Operations UI's operation editor.

  • Update RUM retention filter

    Tool name: update_rum_retention_filter

    Update an existing RUM retention filter's attributes in place.

  • Upsert data observability monitor annotations

    Tool name: upsert_data_observability_monitor_annotations

    Create, update, or extend Data Quality monitor annotations.

  • Upsert Datadog dashboard

    Tool name: upsert_datadog_dashboard

    Creates or updates a Datadog ordered-grid dashboard.

  • Upsert Datadog security aap custom rule

    Tool name: upsert_datadog_security_aap_custom_rule

    Create or update an AAP (App & API Protection) WAF custom rule — a user-authored in-app WAF rule that matches request traffic and monitors or blocks it.

  • Upsert Datadog security aap denylist

    Tool name: upsert_datadog_security_aap_denylist

    Add/refresh AAP (App & API Protection) denylist entry — block IP/user/user-agent via auto security response.

  • Upsert Datadog security trace passlist

    Tool name: upsert_datadog_security_trace_passlist

    Create or update an AAP (App & API Protection) passlist/allowlist entry — also known as a WAF exclusion filter — that exempts traces from WAF analysis/blocking.

  • Upsert Datadog spreadsheet

    Tool name: upsert_datadog_spreadsheet

    Create or update a Datadog spreadsheet's tables, sheets, and pivots in a single call.

  • Upsert llmobs annotations

    Tool name: upsert_llmobs_annotations

    Write label values onto interactions queued in an annotation queue — the graded judgement itself.

  • Upsert reference table rows

    Tool name: upsert_reference_table_rows

    Insert new rows or update existing rows in a reference table.

  • Upsert RUM metric

    Tool name: upsert_rum_metric

    Create or update a RUM custom metric.

  • Validate dashboard widget

    Tool name: validate_dashboard_widget

    Validate a widget definition against the dashboard schema.

  • Validate Datadog security iac custom rule

    Tool name: validate_datadog_security_iac_custom_rule

    Compile-check plaintext Rego for an IaC custom rule.

  • Validate Datadog workflow

    Tool name: validate_datadog_workflow

    A read-only check of a complete candidate workflow spec.

  • Validate monitor definition

    Tool name: validate_monitor_definition

    Validates a monitor JSON definition.

  • Verify onboarding flag

    Tool name: verify-onboarding-flag

    Verify a client-side onboarding flag through the public Datadog CDN using the user's own client token — the same path browser/mobile client SDKs use.

  • Visualize tabular data

    Tool name: visualize_tabular_data

    Render tabular data as an interactive visualization (sunburst, treemap, or toplist).

Compatibility

Connect Datadog to the clients your teams already use

27 AI clients can connect to Datadog through Runlayer. Pick one for its setup steps and controls.

Why Runlayer

Why connect Datadog through Runlayer?

One approved path

Approve Datadog once and everyone gets it in the AI clients they already use. Runlayer holds the credentials, so nothing sits in client configuration.

Fine-grained policy

Control who can use each server, tool, and resource, and under which runtime conditions.

Runtime security

Scan tool inputs and outputs for prompt injection, credential exposure, PII, and data exfiltration, then alert, mask, or block.

Audit and observability

Trace every request across users, clients, tools, policies, scanner decisions, and downstream systems.

Frequently asked questions