Aggregate CI/CD pipeline data with statistical computations and grouping

Aggregate CI test data with statistical computations and grouping

Aggregate Datadog logs with statistical computations (count, avg, sum, percentiles) and grouping

Aggregate RUM data with statistical computations (count, avg, percentiles) and grouping by fields

Aggregated monitor view: config + current state + recent triggered events + active downtimes in one call. Replaces 3 round-trips of get-monitor + get-events + list-downtimes.

Cancel an active downtime by ID

Cancel an active fleet deployment and stop pending operations

Create an APM retention filter with query, sample rate, and enable/disable

Create a new case in Datadog Case Management

Create a new Datadog dashboard with widgets

Create a downtime to mute monitors by scope, monitor ID, or monitor tags

Create a deployment to apply configuration changes to hosts matching a filter

Create a deployment to upgrade Datadog Agent packages on matching hosts

Create an automated schedule for fleet agent upgrades with maintenance windows

Create a new Datadog incident with title and customer impact info

Create a metric based on log data (count or distribution, with filters and group-by)

Create a new Datadog monitor (metric alert, log alert, etc.)

Create a new RUM application (browser, ios, android, react-native, flutter, etc.)

Create a metric based on RUM data (count or distribution, with filters and group-by)

Create a RUM retention filter with event type, sample rate, and query

Create a security monitoring suppression rule to suppress signals matching a query

Create a new Service Level Objective (monitor-based, metric-based, or time-slice). Write-gated.

Create an SLO correction to exclude a time period from SLO calculations (maintenance, deployments)

Create a metric based on APM span data (count or distribution, with filters and group-by)

Create a new status page with name, domain prefix, and type (public/internal)

Create a component or group on a status page

Create a degradation incident on a status page with affected components

Schedule a maintenance window on a status page with affected components

Create a new Synthetics API test (HTTP, SSL, TCP, DNS, etc.)

Create a new Datadog team with name, handle, and description

Delete an APM retention filter by ID

Delete a Datadog dashboard by ID

Delete a fleet upgrade schedule permanently

Delete a Datadog incident by ID

Delete a log-based metric by name

Delete a Datadog monitor by ID

Delete a RUM application by ID

Delete a rum-based metric by name

Delete a RUM retention filter by ID

Delete a security monitoring detection rule by ID

Delete a security monitoring suppression rule by ID

Delete an SLO by ID. Pass force='true' to delete even if linked to dashboards. Write-gated.

Delete an SLO correction by ID

Delete a span-based metric by name

Delete a status page by ID

Delete a component from a status page

Delete a degradation incident from a status page

Delete one or more Synthetics tests by public ID

Delete a Datadog team by ID

Get detailed information about a specific APM retention filter

Get detailed information about a specific case by ID

Get a specific Datadog dashboard with all widgets and configuration

List all Datadog dashboards

Get detailed information about a specific error tracking issue

Get Datadog events within a time range, optionally filtered by priority, source, or tags

Get detailed info about a specific Datadog Agent including integrations and config

Get detailed deployment info including per-host status and package versions

Get detailed information about a specific fleet schedule

Get total number of active and up hosts

Get detailed information about a specific Datadog incident by ID

List Datadog incidents with pagination

Get a specific log-based metric definition by name

Get metadata for a specific Datadog metric (type, unit, description)

Search for available Datadog metrics by name pattern

Get detailed information about a specific Datadog monitor by ID

List Datadog monitors with optional filtering by name, tags, or state

Get detailed information about a specific network device by ID

Get a specific Datadog notebook with all cells and content

Get an on-call schedule by ID with layers and team information

Get detailed information about a specific RUM application by ID

Get a specific rum-based metric definition by name

Get a specific RUM retention filter by ID

Get detailed information about a specific security monitoring detection rule

Get detailed information about a specific security signal by ID

Get detailed information about a specific security monitoring suppression rule

Get a service definition from Datadog Software Catalog by entity ID

Get detailed information about a specific SLO

Get detailed information about a specific SLO correction by ID

Get SLO performance history over a time range (status, error budget, compliance)

Get a specific span-based metric definition by name

Get a specific status page by ID

Get a specific component by ID from a status page

Get detailed information about a specific degradation incident

Get detailed information about a specific maintenance window

Get latest results for a Synthetics API test by public ID

Get detailed information about a specific Datadog team by ID

Get members of a Datadog team with their roles

Get current on-call responders for a Datadog team

Get Datadog account usage summary for a billing period (hosts, logs, APM, RUM, etc.)

Get a Datadog workflow definition by ID (steps, triggers, conditions). The workflow UUID is in the UI URL at /workflow/.

Get full run details for a single workflow instance — step-by-step input, output, status, and error. Use this to debug failed runs (e.g., a Slack alert says 'Workflow X failed at step Y').

Aggregated incident triage: get-incident + get-events (lookback window) + search-incidents (similar on same service, last 14d) + aggregate-logs (error spike on incident's service) in one call. Replaces the 5-step triage-incident Prompt orchestration with a single structured response (incident metadata, related events, similar past incidents, log-spike heuristic, and a summary block with severity/duration/spike flag). Uses Promise.allSettled — per-fetcher failures populate caveats[].

List active metrics from a given time, optionally filtered by host or tag

List APM retention filters that control which traces are retained for search

List Datadog Case Management cases with search and filtering

List infrastructure containers with filtering and pagination

List scheduled downtimes (monitor mute periods)

List error tracking issues with search, filtering, and sorting

List Datadog Agents in the fleet with filtering, sorting, and pagination

List all available Datadog Agent versions for deployment

List fleet automation deployments with pagination

List automated fleet upgrade schedules

List fleet tracers (telemetry-derived service names) with filtering

List infrastructure hosts with filtering, sorting, and metadata

List all configured log-based metrics with their definitions

List tags for a specific metric (useful for understanding available groupings and filters)

List network devices (routers, switches, firewalls) monitored by Datadog NDM

List Datadog notebooks with search and filtering

List running processes across infrastructure with search and tag filtering

List all RUM applications in your Datadog organization

List all configured rum-based metrics with their definitions

List RUM retention filters for a RUM application

List security monitoring detection rules with optional search filtering

List security monitoring suppression rules

List services from Datadog Software Catalog with filtering

List SLO status corrections (maintenance windows, deployments excluded from SLO calculations)

List Service Level Objectives with optional filtering by query, tags, or IDs

List all configured span-based metrics with their definitions

List all components for a status page

List degradation incidents across status pages with optional status/page filtering

List maintenance windows across status pages with optional status/page filtering

List all Datadog status pages for the organization

List all Synthetics monitoring tests (API, Browser, Mobile)

List Datadog teams with optional search filtering and pagination

List Datadog organization users with filtering and pagination

List run instances (executions) for a workflow. Returns instance IDs to drill into with get-workflow-instance for step-level state and errors.

Mute a Datadog monitor (silence notifications) for a scope and optional duration

Post a custom event to Datadog (supports markdown, @mentions)

Publish a status page to make it accessible (public internet or internal org)

Query time-series metric data from Datadog. Supports any Datadog metric query syntax (e.g., avg:system.cpu.user{host:myhost} by {env})

Search Datadog audit logs for organization activity tracking (user actions, resource changes)

Search CI/CD pipeline events (builds, deploys) with query filtering

Search CI test events (unit tests, integration tests) with query filtering

Search Datadog incidents by query (state, severity, title keywords)

Search Datadog logs by query with time range filtering

Search Real User Monitoring events (sessions, views, errors, actions) from mobile/web apps

Search Datadog security monitoring signals with query filtering

Search APM spans/traces for performance analysis. Filter by service, resource, status, duration

Discover available tools by natural language query. Returns matching tool names + descriptions across all 158+ tools. Use this first to navigate the surface efficiently — call this, then call the specific tool you need.

Send a DORA deployment event for tracking deployment frequency and lead time

Send a DORA incident event for tracking change failure rate and MTTR

Send log entries to Datadog

Aggregated SLO health: config + history-window SLI + active corrections + each linked monitor's current state in one call. Computes errorBudgetRemainingPct and status (compliant | at-risk | breached). Replaces 3-5 round-trips of get-slo + get-slo-history + list-slo-corrections + get-monitor (per linked monitor). Uses Promise.allSettled — partial failures populate caveats[] instead of crashing. Renders an Apps SDK card on ChatGPT clients (Claude clients receive the same JSON text).

Manually trigger a fleet schedule to immediately create a deployment

Trigger one or more Synthetics tests on demand

Unpublish a status page to remove public/internal access

Update an APM retention filter's name, query, rate, or enabled state

Update the status of a Datadog case (OPEN, IN_PROGRESS, CLOSED)

Update an existing Datadog dashboard

Update a fleet schedule's name, query, recurrence rule, or status

Update a Datadog incident's title, customer impact, or timestamps

Update a log-based metric's filter, group-by, or percentile settings

Update an existing Datadog monitor's configuration

Update an existing RUM application's name or type

Update a rum-based metric's filter, group-by, or percentile settings

Update a RUM retention filter's name, event type, sample rate, or query

Update an existing SLO's name, description, thresholds, monitorIds, or tags. Fetches current SLO first to merge unspecified fields. Write-gated.

Update an existing SLO correction's category, time range, or description

Update a span-based metric's filter, group-by, or percentile settings

Update a status page's name, domain prefix, or subscription settings

Update a status page component's name or position

Update a degradation incident's status, title, or affected components

Update a maintenance window's status, schedule, or affected components

Update an existing Synthetics API test

Update a Datadog team's name, handle, or description

Validate a monitor definition without creating it (check query syntax, thresholds, etc.)