You signed in with another tab or window. Reload to refresh your session.You signed out in another tab or window. Reload to refresh your session.You switched accounts on another tab or window. Reload to refresh your session.Dismiss alert
The Datadog MCP server your AI deserves. 117 read-only tools. Every observability pillar. Zero writes. Zero regrets.
Why This One?
Look, we get it. You searched "datadog mcp server" and got seven results. You're wondering which one to pick. Let us save you approximately forty-five seconds of reading other READMEs that say "supports monitors and dashboards" like that's supposed to impress someone.
We're not saying the other MCP servers are bad. That would be rude, and also legally questionable. They're all built by talented engineers who are contributing to open source and making the ecosystem better. Some of them have features we don't, like the ability to write to your Datadog account from an AI chat window. We chose not to include those. On purpose. You're welcome.
The Philosophy
Read everything. Write nothing.
Your AI assistant should be able to see all of Datadog. It should not be able to silence your pager at 3 AM because it decided your alerts were "probably fine." That's not a hypothetical scenario. That's a Tuesday. We have opinions about this, and they are all correct.
Quick Start
npx github:dreamiurg/datadog-mcp --help
That's it. No installation required. Node.js 20+. Works in 8 seconds. We timed it.
Organization Settings -> Application Keys -> New Key
Also easy
Tip: For least-privilege access, scope your Application Key to only the permissions you need. Or give it everything. We won't judge. (We will judge a little.)
"Which archives are checked first for rehydration?"
list-logs-metrics
List log-based custom metrics
"What metrics are generated from logs?"
APM & Traces (7 tools)
Tool
What It Does
Try Asking
search-spans
Search APM spans with query syntax
"Find slow requests in payment service"
aggregate-spans
Compute APM statistics (p99, error rates)
"Show p99 latency by service"
get-services
List APM-instrumented services
"What services are being traced?"
get-trace
Get a full distributed trace by ID
"Show all spans for trace abc123"
search-apm-events
Search raw APM events
"Find APM events with errors in checkout"
list-active-apm-events
List currently active APM events
"What APM events are happening right now?"
list-spans-metrics
List span-based APM metrics
"What custom span metrics are configured?"
Metrics (6 tools)
Tool
What It Does
Try Asking
query-metrics
Query timeseries metric data
"Show CPU usage for web hosts last 4 hours"
get-metrics
List available metrics
"What metrics are available?"
get-metric-metadata
Get metric metadata and descriptions
"Describe the system.cpu.user metric"
search-metric-volumes
Search metrics by name with volume data
"Which metrics matching 'aws.' have the highest volume?"*
get-metric-tag-config
Get tag configuration for a specific metric
"What tags are indexed for system.cpu.user?"
list-metric-tag-configs
List metric tag configurations
"Which metrics have custom tag configurations?"
Monitors & Alerting (4 tools)
Tool
What It Does
Try Asking
get-monitors
List monitors (filter by state, tags)
"Show all alerting monitors"
get-monitor
Get monitor details by ID
"Get details for monitor 12345"
search-monitors
Search monitors by query
"Find monitors related to database"
get-monitor-config-policies
Get monitor configuration policies
"What monitor config policies are enforced?"
Dashboards (3 tools)
Tool
What It Does
Try Asking
get-dashboards
List all dashboards
"What dashboards do we have?"
get-dashboard
Get dashboard details and widgets
"Show the API metrics dashboard"
list-dashboard-lists
List dashboard collections
"What dashboard lists are organized?"
SLOs (5 tools)
Tool
What It Does
Try Asking
get-slos
List Service Level Objectives
"Which SLOs are breaching?"
get-slo
Get SLO details by ID
"Show error budget for SLO xyz"
get-slo-history
Get historical SLO performance
"How has our API SLO trended this month?"
get-slo-corrections
List SLO correction periods
"What SLO corrections have been applied?"
search-slos
Search SLOs with query filters
"Find all SLOs with error budget below 10%"
Synthetics (5 tools)
Tool
What It Does
Try Asking
get-synthetic-tests
List synthetic tests
"What synthetic checks do we have?"
get-synthetic-results
Get results for a specific test
"Show recent results for the checkout test"
list-synthetics-global-variables
List Synthetics global variables
"What global variables are available for tests?"
list-synthetics-locations
List available Synthetics testing locations
"Where can I run Synthetics tests from?"
list-synthetics-private-locations
List Synthetics private locations
"What private locations are configured for testing?"
Real User Monitoring (RUM) (3 tools)
Tool
What It Does
Try Asking
search-rum-events
Search RUM events with filters
"Find RUM errors on the checkout page"
list-rum-applications
List registered RUM applications
"What apps have RUM enabled?"
aggregate-rum-events
Analytics on RUM data (counts, averages, group-by)
"Average page load time by country"
Infrastructure (8 tools)
Tool
What It Does
Try Asking
get-hosts
List infrastructure hosts
"Show all production hosts"
get-host-tags
Get tags for all hosts
"What tags are on our hosts?"
get-active-hosts-count
Get total active/up host count
"How many hosts are running?"
list-host-totals
Get total active and up host counts
"Show me the total host count breakdown"
list-network-devices
List NDM network devices
"Show network device status"
list-fleet-agents
List Datadog agents across fleet
"Which agents are outdated?"
get-containers
List running containers
"Show containers filtered by image"
list-processes
List running processes
"Find java processes across hosts"
Service Catalog (3 tools)
Tool
What It Does
Try Asking
list-service-definitions
List all service definitions
"What services are in the catalog?"
get-service-definition
Get a single service definition
"Who owns the auth service?"
get-service-dependencies
Get service dependency map
"What does the payment service depend on?"
CI Visibility (4 tools)
Tool
What It Does
Try Asking
list-ci-pipelines
List CI pipeline events
"Show recent CI pipeline runs"
get-ci-pipeline-events
Aggregate CI pipeline analytics
"Average pipeline duration by repo"
list-ci-tests
List CI test events
"Show failed tests in the last hour"
search-ci-test-events
Search CI test events with filters
"Find flaky tests in the checkout service"
Security (10 tools)
Tool
What It Does
Try Asking
search-security-findings
Search Cloud Security findings
"Find high-severity security findings"
get-security-finding
Get a specific security finding
"Get finding abc123"
list-posture-findings
List compliance/posture findings
"Show failed compliance checks"
search-security-signals
Search security monitoring signals
"Recent threat detections"
get-csm-coverage
Get CSM coverage across cloud accounts
"Which AWS accounts lack security coverage?"
list-vulnerabilities
List vulnerability findings (SAST, SCA, IAST, Infra)
"Show open SAST vulnerabilities in production"
list-csm-threats-agent-rules
List CSM Threats agent rules
"What workload security rules are enabled?"
list-security-rules
List security monitoring rules
"What detection rules are active?"
list-security-monitoring-rules
List security monitoring detection rules
"What security detection rules are configured?"
get-sensitive-data-scanner-config
Get Sensitive Data Scanner configuration
"What sensitive data scanning rules are active?"
Organization (5 tools)
Tool
What It Does
Try Asking
get-organization
Get Datadog organization info
"Show organization details and settings"
list-teams
List Datadog teams
"What teams exist in our org?"
list-team-members
List members of a Datadog team
"Who is on the platform team?"
list-users
List Datadog users
"Who has access to Datadog?"
list-authn-mappings
List SAML/OIDC authentication mappings
"How do IdP groups map to Datadog roles?"
Events, Downtimes & Database Monitoring (6 tools)
Tool
What It Does
Try Asking
get-events
Fetch events in a time range
"What events happened today?"
get-downtimes
List scheduled maintenance
"Any active downtimes?"
list-downtime-schedules
List scheduled downtimes (v2)
"What downtimes are scheduled?"
get-dbm-samples
Get Database Monitoring query samples
"Show slow postgres queries"
get-dbm-query-metrics
Get Database Monitoring query metrics
"Which queries have the highest latency?"
get-ip-ranges
Get Datadog IP ranges for firewall config
"What IPs should I allowlist for Datadog?"
Audit & Usage (4 tools)
Tool
What It Does
Try Asking
search-audit-logs
Search audit trail with filters
"Who changed configs in the last hour?"
get-hourly-usage
Get hourly usage metering by product
"Show log ingestion usage trends"
get-top-avg-metrics
Get top custom metrics by hourly average
"Which custom metrics drive cardinality costs?"
get-estimated-cost
Get estimated usage cost data
"What's our projected Datadog bill this month?"
Notebooks (2 tools)
Tool
What It Does
Try Asking
list-notebooks
List Datadog notebooks with filtering
"Find investigation notebooks"
get-notebook
Get a specific notebook by ID
"Show notebook 12345"
Containers & Processes (2 tools)
Tool
What It Does
Try Asking
list-containers
List containers with tag filtering
"Show running containers in us-east-1"
list-processes
List processes across hosts
"Find Java processes with high memory"
Network Monitoring (2 tools)
Tool
What It Does
Try Asking
list-network-devices
List NDM network devices
"Show network device status"
aggregate-network-connections
Aggregate network flow analytics
"Top network flows by bandwidth"
Security & Compliance (6 tools)
Tool
What It Does
Try Asking
list-security-rules
List security monitoring rules
"What detection rules are active?"
search-error-tracking-issues
Search error tracking issues
"Top errors by volume in production"
get-error-tracking-issue
Get error tracking issue details by ID
"Show details for issue abc123"
get-csm-coverage
Get CSM coverage across cloud accounts
"Which AWS accounts lack security coverage?"
list-vulnerabilities
List vulnerability findings (SAST, SCA, IAST, Infra)
"Show open SAST vulnerabilities in production"
list-csm-threats-agent-rules
List CSM Threats agent rules
"What workload security rules are enabled?"
Incidents (4 tools)
Tool
What It Does
Try Asking
search-incidents
Search incidents with advanced filters
"Find P1 incidents related to database"
get-incident-todos
Get action items for an incident
"What's pending for this P0?"
get-incident-timeline
Get timeline events for an incident
"Show the timeline for incident xyz"
get-incident-services
List incident services
"What services are configured for incident management?"
Cloud & Integrations (7 tools)
Tool
What It Does
Try Asking
list-aws-accounts
List integrated AWS accounts
"Which AWS accounts are connected?"
list-gcp-integration
List GCP integration accounts
"Which GCP projects are integrated?"
list-azure-integration
List Azure integration accounts
"Which Azure subscriptions are connected?"
list-cloudflare-accounts
List Cloudflare accounts
"What Cloudflare accounts are integrated?"
list-confluent-accounts
List Confluent Cloud accounts
"Which Confluent Cloud accounts are connected?"
list-webhooks
List webhook integrations
"What webhooks are configured?"
list-api-keys
List Datadog API keys
"What API keys are active?"
DevOps & Automation (6 tools)
Tool
What It Does
Try Asking
list-dora-deployments
List DORA deployment events
"Show deployment frequency for web service"
list-workflows
List workflow automations
"What incident response workflows exist?"
list-workflow-executions
List execution instances for a workflow
"Show run history for the incident workflow"
list-fleet-agents
List Datadog agents across fleet
"Which agents are outdated?"
list-monitor-notification-rules
List monitor notification routing
"Who gets alerted for this monitor?"
list-cost-budgets
List cloud cost budgets
"Are any teams over budget?"
Access Control (3 tools)
Tool
What It Does
Try Asking
list-restriction-policies
Get restriction policy for a resource
"What access restrictions are configured?"
list-app-keys
List application keys for the current user
"What application keys do I have?"
list-authn-mappings
List authentication mappings
"How do SAML groups map to Datadog roles?"
The Competitive Landscape (We Did the Research So You Don't Have To)
There are approximately seven thousand Datadog MCP servers on GitHub. We counted. Then we lost count. Then we counted again. Here's how they stack up:
Capability
Us
Project 1
Project 2
Project 3
Project 4
Total tools
117
~20
~10
~13
~29
Read-only by design
Yes
No
Yes
Yes
No
Can mute your hosts
No
Yes
No
No
No
Can delete your dashboards
No
No
No
No
Yes
Can schedule downtimes
No
Yes
No
No
Yes
Test suite
570 tests
-
-
-
-
Last meaningful update
Today
Recent
Dec 2025
Jan 2026
Dec 2025
A note on write operations: Some servers let your AI create monitors, delete dashboards, and schedule downtimes. That's a feature. It's also the plot of every "AI gone wrong" movie ever made. We chose the boring path: read everything, touch nothing. Our therapist says this is healthy.
What They Have That We Don't
In the interest of full transparency (and because our lawyers said we had to):
Some servers can mute/unmute hosts and schedule downtimes (write operations we intentionally excluded because we enjoy sleeping)
Some servers can CRUD monitors and dashboards (see above re: AI movies, and also re: sleeping)
Some servers have unique metric field exploration tools
We sleep extremely well at night.
Configuration Reference
Regional Endpoints
Set --site for your Datadog region:
Region
Site Value
US (default)
datadoghq.com
EU
datadoghq.eu
US3 (GovCloud)
ddog-gov.com
US5
us5.datadoghq.com
AP1
ap1.datadoghq.com
Environment Variables
Alternative to command-line arguments:
DD_API_KEY=your_api_key
DD_APP_KEY=your_app_key
DD_SITE=datadoghq.com # Optional, defaults to datadoghq.com
DD_LOGS_SITE=logs.datadoghq.com # Optional, override for logs API
DD_METRICS_SITE=api.datadoghq.com # Optional, override for metrics API
Logging
Variable
Values
Default
Description
LOG_LEVEL
debug, info, warn, error
info
Minimum log level
LOG_FORMAT
json, pretty
json
Output format (pretty for local dev)
# Pretty logs for development
LOG_FORMAT=pretty npx github:dreamiurg/datadog-mcp --apiKey ... --appKey ...
PRs welcome. We have strong opinions about read-only access, 90% test coverage, and cognitive complexity under 15. If that sounds like fun, you'll fit right in.
License
MIT - Use freely in personal and commercial projects.
Disclaimer
In case it wasn't abundantly, blindingly, neon-sign-in-the-desert obvious: the comparison tables above are written with tongue so firmly in cheek it's coming out the other side. This is sarcasm. We are being sarcastic. If you're still not sure, yes, that was also sarcasm.
Every single Datadog MCP server out there was built by engineers who cared enough to ship something real into the world. That's more than most people do on a Saturday. Open source is better when there are options, and the ecosystem is better because all of these projects exist.
If our 117 read-only tools aren't what you need, genuinely and sincerely: go find the one that is. Try them all. Mix and match. Build your own. Fork ours and add write operations if you're feeling brave (and have good backups). The best tool is the one that fits your workflow, not the one with the spiciest README.
Now go build something great. Sleep tight.
About
117 read-only Datadog tools for your AI. Every observability pillar. Zero writes. Zero regrets. Your pager is safe from the robots.