Back to integrations

Datadog integration for background agents

Enable hosted MCP access for Datadog observability search and tooling.

Integration details

Connection

  • Hosted MCP via API key + application key

Agent actions

Datadog MCP

  • search_datadog_events

    Search Datadog events.

  • get_datadog_incident

    Get details for a Datadog incident.

  • search_datadog_incidents

    Search Datadog incidents.

  • get_datadog_metric

    Query a Datadog metric.

  • get_datadog_metric_context

    Get context for a Datadog metric.

  • search_datadog_metrics

    Search Datadog metrics.

  • search_datadog_logs

    Search Datadog logs.

  • analyze_datadog_logs

    Analyze Datadog logs.

  • get_datadog_trace

    Get details for a Datadog trace.

  • search_datadog_spans

    Search Datadog spans.

  • search_datadog_services

    Search Datadog services.

  • search_datadog_service_dependencies

    Search Datadog service dependencies.

  • search_datadog_monitors

    Search Datadog monitors.

  • validate_datadog_monitor

    Validate a Datadog monitor definition.

  • create_datadog_monitor

    Create a Datadog monitor.

  • search_datadog_slos

    Search Datadog service level objectives.

  • search_datadog_dashboards

    Search Datadog dashboards.

  • get_datadog_dashboard

    Get a Datadog dashboard.

  • upsert_datadog_dashboard

    Create or update a Datadog dashboard.

  • delete_datadog_dashboard

    Delete a Datadog dashboard.

  • get_datadog_notebook

    Get a Datadog notebook.

  • search_datadog_notebooks

    Search Datadog notebooks.

  • create_datadog_notebook

    Create a Datadog notebook.

  • edit_datadog_notebook

    Edit a Datadog notebook.

Credential safety

Credential-less sandboxes

Mistle lets agents access connected services without placing provider credentials inside the sandbox. Approved outbound requests are routed through Mistle's credential proxy, where authentication happens outside the agent runtime.

Credentials stay encrypted in Mistle's control plane and are applied only when a request is authorized for the calling sandbox and organization.

Read the credential-less sandboxes article
Diagram showing sandbox traffic routed through an egress proxy before credential injection.