Datadog MCP

Detach security findings from their linked case (and any downstream Jira issue, ServiceNow ticket, or Linear issue). Since Jira/ServiceNow/Linear tickets are always linked via a case, detaching the case also detaches the ticket. Use analyze_datadog_security_findings or search_datadog_security_findings to find specific…

Untrusted display-only summary

Step-by-step instructions for adding initial Datadog RUM SDK to a project environment. This contains general instruction on how to enable the Datadog RUM SDK and all the features as session replay, logs or tracing. You must first review the user's project and this tool's arguments (including nested arguments) and fill…

Untrusted display-only summary

Compare two ndm network device configuration snapshots and return a unified diff. Inputs: - original_config_id (required) - modified_config_id (required) Use config IDs returned by search_network_device_configurations. The tool does not infer chronology; ordering is the caller's responsibility. If both snapshots are i…

Untrusted display-only summary

Installs and configures the Datadog Agent container to collect infrastructure metrics, container telemetry, APM traces, and logs. The agent runs as a Docker container alongside any workload on a Docker-enabled host. You must first review the user's project and this tool's arguments and fill out as many of them as poss…

Untrusted display-only summary

do-not-call

Untrusted display-only summary

Step-by-step instructions for adding initial Datadog Observability setup to ECS applications and configurations. You must first review the user's project and this tool's arguments (including any nested arguments) and fill out as many of them as possible before calling this tool. Check project files and dependencies to…

Untrusted display-only summary

Edits an existing notebook. Can edit cells, metadata (name, template_variables, tags), or both. Look up widget reference schemas before constructing graph cells. Cell modes: (1) Full-replace (default) — replaces all cells; destroys existing comment marks. (2) Append (append_only=true) — adds cells to the end; preserve…

Untrusted display-only summary

Partially edit a Synthetics global variable by id. Only name, description, tags (full array replace), and value (value + secure) are editable. Omitted fields are left unchanged; only the fields explicitly set in this call are updated. parse_test_options, parse_test_public_id, and restricted_roles are not editable with…

Untrusted display-only summary

Edit the configuration of a Synthetics test. Use this tool to update the configuration of a test.

Untrusted display-only summary

Execute JavaScript in a sandbox with access to Datadog through the official TypeScript-SDK-shaped API and explicitly enabled code-exec extensions. Quick start: ```javascript import { client, v1 } from "@datadog/datadog-api-client"; const monitors = new v1.MonitorsApi(client.createConfiguration()); return await monitor…

Untrusted display-only summary

Start a new execution instance for a Datadog Workflow Automation workflow by ID. The workflow may be published or unpublished, and the selected base or draft spec must have an 'agent' trigger. Each successful call starts a distinct run and returns workflowId, instanceId, and URL. It does not wait for completion. If th…

Untrusted display-only summary

Load the children of specific spans in a trace, enabling progressive tree exploration. Use this when **get_llmobs_trace** returns collapsed nodes you want to expand. Returns expanded_spans[] (recursive tree, each node with span_id, name, kind, status, duration_ms, content indicators like has_input/has_output, and nest…

Untrusted display-only summary

Explore a call graph to identify hot call relationships for the provided profile type. Best suited for investigating a single service at a time. For cross-service comparisons, use get_profiling_timeseries. Things of note: * Provide traceContext OR scope by service via queryString (e.g. service:my-svc). * Nodes represe…

Untrusted display-only summary

Obtain a list of top stacktraces based on their value contribution for the provided profile type. Best suited for investigating a single service at a time. For cross-service comparisons, use get_profiling_timeseries. Things of note: * Pay special attention to mentions of endpoints, attributes or stacktrace fields in t…

Untrusted display-only summary

Returns a flamegraph for profiles scoped to RUM events matching a given metric and optional filter. Works with any RUM-instrumented platform (browser, mobile, etc.) — use the family and service that match the instrumented application. Use this tool when the user asks which functions are responsible for a slow RUM metr…

Untrusted display-only summary

Analyze timeline activity showing lane groups (threads, GC, etc.) and their CPU/I/O activities. Best suited for investigating a single service instance at a time. For cross-service comparisons, use get_profiling_timeseries. Use for general thread analysis, or enable critical path (traceContext only) to identify latenc…

Untrusted display-only summary

Discover and rank database instances for DBM investigation. USE THIS TOOL FIRST before calling other DBM tools that require a database_instance parameter. This tool discovers database instances via trace/span correlation or tag matching, fetches telemetry for each instance, and uses LLM analysis to assess health and r…

Untrusted display-only summary

Find all error spans in a trace with propagation context. Returns error details, parent context, and whether errors propagated to child spans. Returns errors grouped by span kind, each with span_id, error message/type/stack, and propagation info. Use **get_llmobs_span_content** on an error span to see its full input/o…

Untrusted display-only summary

Generates a monitor message with What's Happening, Impact, and Links sections from a monitor query. Only 'metric alert' and 'query alert' monitor types are supported.

Untrusted display-only summary

do-not-call

Untrusted display-only summary

Get the health status of an autonomous system (AS) using Network Path data. Calls the Network Path aggregate endpoint to assess whether the AS has detected issues such as packet loss, latency spikes, or lowered visibility. **Input**: - asn: the autonomous system number, e.g. AS15169 or 15169 (both accepted) - from / t…

Untrusted display-only summary

Get results from completed or in-progress canary experiments for a feature flag. This tool retrieves experimental data showing how each variant performed during canary testing, including metric measurements, statistical significance, and traffic distribution. Use this when you need to: - Review the performance of a ca…

Untrusted display-only summary

Retrieve change events for an APM service over a time range. Use to correlate changes with performance issues, errors or incidents. Tracked Change types: deployment (code/version), feature_flag, traffic_anomaly, watchdog (Datadog anomaly detection), kubernetes (k8s deployment manifest updates), scale (manual k8s scale…

Untrusted display-only summary

Return the entity type schema for every platform this org has data in. Takes no arguments. Discovers active platforms by searching for root entities across all supported platform types, then returns the metaschema for each: entity types, containment hierarchy, and filterable attributes. Use this when you need to know:…

Untrusted display-only summary

Fetch aggregated code coverage summary metrics for a repository branch. Use this tool to retrieve total coverage, patch coverage, and service/codeowner breakdowns for a specific branch. Common prompts: • Coverage summary for main: repository_url=https://github.com/org/repo branch=main • Coverage summary for release br…

Untrusted display-only summary

Fetch aggregated code coverage summary metrics for a repository commit. Use this tool to retrieve total coverage, patch coverage, and service/codeowner breakdowns for a specific commit. Common prompts: • Coverage summary for a commit: repository_url=https://github.com/org/repo commit_sha=

Untrusted display-only summary

Fetch per-file code coverage line data for a repository commit, branch, or pull request. Returns executable lines, covered lines, and added lines for each file. Use this tool to inspect which specific lines are covered or uncovered. Exactly one of commit_sha, branch, or pr_number must be provided. At most one of servi…

Untrusted display-only summary

Fetch aggregated code coverage summary metrics for a pull request. Use this tool to retrieve total coverage, patch coverage, and service/codeowner breakdowns for a specific pull request. Common prompts: • Coverage summary for PR #123: repository_url=https://github.com/org/repo pr_number=123

Untrusted display-only summary

Retrieves a custom or integration Datadog dashboard by ID, returning its title, description, tags, widgets, and template variables. Use search_datadog_dashboards first to find dashboard IDs.

Untrusted display-only summary

Identify upstream APM services and resources that call database queries. Use this tool to correlate database activity with application traces, enabling root cause analysis across the APM-database boundary. Returns the primary (most frequent) calling service and its associated resources.

Untrusted display-only summary