Tracecat

Datadog MCP server

Query logs, metrics, traces, monitors, and security signals from Datadog Bits AI.

Observability
http
Official docs

About

Connect Tracecat to Datadog to query logs, metrics, traces, monitors, and security signals for SRE on-call responders and SOC analysts using Datadog as their front door for production telemetry. You can search monitors when a page fires and pull the related incident with its full timeline. From there, pivot into APM traces, run SQL aggregations over logs, and search Cloud SIEM signals with confidence.

Setup

  1. 1

    Sign in with OAuth

    You'll authorize Tracecat to access Datadog on your behalf. No API keys to manage.

  2. 2

    Select the Datadog tile in the Tracecat MCP catalog

    Open the MCP catalog in your workspace, select the Datadog tile, and complete the OAuth flow.

  3. 3

    Enable Datadog in your agent

    In your ai.agent action or Agents → tools tab, select Datadog from the MCP integrations dropdown.

Tools

search_datadog_logs

Search Datadog logs with time, service, and host filters.

analyze_datadog_logs

Run SQL-style aggregations over logs for statistical analysis.

get_datadog_metric

Query historical or real-time metric data for any Datadog metric.

search_datadog_monitors

Find monitors by status, thresholds, and alert conditions.

search_datadog_incidents

Retrieve incidents filtered by state, severity, and metadata.

get_datadog_incident

Pull a single incident with timeline, responders, and linked signals.

search_datadog_security_signals

Search Cloud SIEM security signals and detections.

get_datadog_trace

Fetch a complete APM trace by trace ID.

search_datadog_services

List services in the Software Catalog with ownership and dependencies.

create_datadog_case

Open a new Datadog case from an agent investigation.

Deploy the Datadog MCP server in minutes

Connect your security agents to 50+ hosted MCP servers.

Self-host free