B

Datadog MCP Server

Datadog's official managed MCP server (mcp.datadoghq.com, repo datadog-labs/mcp-server) covering APM, logs, metrics, monitors, dashboards, incidents, security signals, and more. OAuth 2.0 (API + App keys as fallback) with mcp_read/mcp_write RBAC, over Streamable HTTP. Replaces the community winor30/mcp-server-datadog listing. Note: scores other than authentication are a provisional assessment from Datadog's documentation pending a live tool-level audit.

Overall Score76/100

Score Breakdown

Authentication & Identity1 finding↓23/25
Tool Schema Quality1 finding↓15/25
Permission Granularity1 finding↓17/20
LLM Safety11/15
Data Exposure1 finding↓5/10
Maintenance & Trust5/5

Server Info

Package
https://mcp.datadoghq.com
Registry
remote
Maintainer
DatadogVendor
Category
Developer Tools
Tags
monitoringmetricslogshostedoauth
Last Scanned
7 Apr 2026

Findings

4 issues

Authentication & Identity

LOWImplements MCP OAuth spec for per-user authentication

Official Datadog-managed remote MCP at https://mcp.datadoghq.com (regional variants exist). OAuth 2.0 for interactive auth, with Datadog API key + Application key headers as a fallback. Access is gated by two MCP-specific RBAC permissions, mcp_read and mcp_write, plus underlying resource permissions. Streamable HTTP transport.

Remediation

Document the required OAuth scopes for each tool.

Tool Schema Quality

MEDIUMTool schemas not independently audited

The hosted server has no public source repository, so tool input schemas, required fields, and parameter constraints could not be verified directly. Provisional score pending a live tool-level audit.

Remediation

Run a live audit against the hosted endpoint to enumerate and score tool schemas.

Permission Granularity

LOWRBAC read/write split (mcp_read / mcp_write)

Access is gated by distinct mcp_read and mcp_write permissions plus resource-level RBAC, so read-only access can be granted. Per-tool scope classification was not independently verified.

Remediation

Publish per-tool permission requirements.

Data Exposure

MEDIUMPagination and field selection not verified

Whether list operations paginate and support field selection could not be verified without a live audit of the hosted tool surface.

Remediation

Audit list operations for pagination and field-selection support.

Deploy Datadog MCP Server securely

CompleteFlow adds per-user authentication, permission scoping, and audit logging to any MCP server out of the box.

Deploy on CompleteFlow