# Datadog Logs MCP Server

An MCP (Model Context Protocol) server for searching Datadog logs via HTTP.

## Features

- Search Datadog logs with customizable queries
- Specify time ranges for log searches
- Control result limits
- Runs as an HTTP server on port 5000

## Prerequisites

- Docker and Docker Compose
- Datadog API Key
- Datadog Application Key

## Setup

1. Copy the example environment file and add your Datadog credentials:

```bash
cp .env.example .env
```

2. Edit `.env` and add your actual Datadog keys:

```
DD_API_KEY=your_actual_api_key
DD_APPLICATION_KEY=your_actual_application_key
PORT=4000
```

## Running with Docker Compose

Start the server:

```bash
docker-compose up
```

The server will be available at `http://localhost:5000`

To run in detached mode:

```bash
docker-compose up -d
```

To stop the server:

```bash
docker-compose down
```

## API Endpoints

### SSE Connection
- **GET** `/sse` - Establish SSE connection for MCP communication

### Message Endpoint
- **POST** `/messages` - Send MCP protocol messages

## MCP Tool: search_logs

Search Datadog logs with the following parameters:

- `query` (required): Log search query (e.g., "env:prd AND service:pms-connectors")
- `from` (required): Start time (e.g., "now-10m", "2024-01-01T00:00:00Z")
- `to` (required): End time (e.g., "now", "2024-01-01T01:00:00Z")
- `limit` (optional): Maximum number of logs to return (default: 10)

## Example Usage

The server will search Datadog logs using the API endpoint:
```
POST https://api.datadoghq.com/api/v2/logs/events/search
```

With the query parameters provided through the MCP tool invocation.

## Development

To build locally without Docker:

```bash
npm install
npm run build
npm start
```

## Environment Variables

- `DD_API_KEY`: Your Datadog API key (required)
- `DD_APPLICATION_KEY`: Your Datadog application key (required)
- `PORT`: Server port (default: 5000)