Tracecat

Datadog MCP server

Query logs, metrics, traces, monitors, and security signals from Datadog Bits AI.

Observability
http
Official docs

About

Connect Tracecat to Datadog to query logs, metrics, traces, monitors, and security signals for SRE on-call responders and SOC analysts using Datadog as their front door for production telemetry. You can search monitors when a page fires and pull the related incident with its full timeline. From there, pivot into APM traces, run SQL aggregations over logs, and search Cloud SIEM signals with confidence.

Setup

  1. 1

    Sign in with OAuth

    You'll authorize Tracecat to access Datadog on your behalf. No API keys to manage.

  2. 2

    Select the Datadog tile in the Tracecat MCP catalog

    Open the MCP catalog in your workspace, select the Datadog tile, and complete the OAuth flow.

  3. 3

    Enable Datadog in your agent

    In your ai.agent action or Agents tools tab, select Datadog from the MCP integrations dropdown.

Tools

search_datadog_logsSearch Datadog logs with time, service, and host filters.
analyze_datadog_logsRun SQL-style aggregations over logs for statistical analysis.
get_datadog_metricQuery historical or real-time metric data for any Datadog metric.
search_datadog_monitorsFind monitors by status, thresholds, and alert conditions.
search_datadog_incidentsRetrieve incidents filtered by state, severity, and metadata.
get_datadog_incidentPull a single incident with timeline, responders, and linked signals.
search_datadog_security_signalsSearch Cloud SIEM security signals and detections.
get_datadog_traceFetch a complete APM trace by trace ID.
search_datadog_servicesList services in the Software Catalog with ownership and dependencies.
create_datadog_caseOpen a new Datadog case from an agent investigation.

Deploy the Datadog MCP server in minutes

Connect your security agents to 50+ hosted MCP servers.

Self-host free