C

Datadog MCP Server

Community MCP server for interacting with Datadog APIs including incidents, metrics, logs, monitors, dashboards, traces, hosts, downtimes, and RUM.

Overall Score64/100

Score Breakdown

Server Info

Package
@winor30/mcp-server-datadog
Registry
npm
Maintainer
Community
Category
Developer Tools
Tags
monitoringmetricslogs
Last Scanned
7 Apr 2026

Findings

5 issues

Authentication & Identity

HIGHNo per-request auth - requires instance-per-user

Stdio-only transport. Requires DATADOG_API_KEY and DATADOG_APP_KEY env vars (both mandatory, validated at startup). DATADOG_SITE and DATADOG_SUBDOMAIN are optional. Shared credentials with full API+APP key access. For multi-tenant deployment, the platform must spawn a separate server instance per user.

Remediation

Add HTTP/SSE transport to accept per-request Authorization headers, or implement the MCP OAuth spec.

Tool Schema Quality

MEDIUMOnly 5 of 21 schemas have parameter constraints

Most schemas lack maxLength, enum, or pattern constraints on string parameters.

Remediation

Add constraints to string parameters, especially on write operations.

Data Exposure

MEDIUM4 list operations lack pagination

list_incidents has pageSize/pageOffset pagination. get_logs and list_traces have limit params. list_hosts has start/count pagination. However, list_dashboards, get_monitors, list_downtimes, and get_rum_applications return all results without pagination. Full records are always returned.

Remediation

Add limit/offset or cursor-based pagination.

LOWNo field selection on responses

Responses return full records rather than projected fields.

Remediation

Implement field selection to return only relevant fields.

Maintenance & Trust

LOWCommunity-maintained by winor30

No official vendor backing.

Remediation

Seek vendor verification.

Tools

21 total
NameDescriptionRisk
list_incidentsGet incidents from Datadogread
get_incidentGet an incident from Datadogread
query_metricsQuery timeseries points of metrics from Datadogread
get_logsSearch and retrieve logs from Datadogread
get_all_servicesExtract all unique service names from logsread
get_monitorsGet monitors status from Datadogread
list_dashboardsGet list of dashboards from Datadogread
get_dashboardGet a dashboard from Datadogread
list_tracesGet APM traces from Datadogread
mute_hostMute a host in Datadogwrite
unmute_hostUnmute a host in Datadogwrite
list_hostsGet list of hosts from Datadogread
get_active_hosts_countGet the total number of active hosts in Datadog (defaults to last 5 minutes)read
list_downtimesList scheduled downtimes from Datadogread
schedule_downtimeSchedule a downtime in Datadogwrite
cancel_downtimeCancel a scheduled downtime in Datadogwrite
get_rum_applicationsGet all RUM applications in the organizationread
get_rum_eventsSearch and retrieve RUM events from Datadogread
get_rum_grouped_event_countSearch, group and count RUM events by a specified dimensionread
get_rum_page_performanceGet page (view) performance metrics from RUM dataread
get_rum_page_waterfallRetrieve RUM page (view) waterfall data filtered by application name and session IDread

Deploy Datadog MCP Server securely

CompleteFlow adds per-user authentication, permission scoping, and audit logging to any MCP server out of the box.

Deploy on CompleteFlow