| name | datadog |
| description | Query Datadog observability data (logs, metrics, monitors, dashboards, hosts) via direct API. Use when investigating production issues, checking monitors, searching logs, or accessing Datadog data. |
Datadog CLI
Direct API access to Datadog observability data — logs, metrics, monitors, dashboards, hosts, and APM spans.
Prerequisites
Set these environment variables:
export DD_API_KEY="your-32-char-hex-api-key"
export DD_APP_KEY="your-application-key"
export DD_SITE="us5.datadoghq.com"
Get keys from Datadog:
- API Key: Organization Settings → API Keys
- App Key: Organization Settings → Application Keys
Required scopes (for read-only access):
dashboards_read, monitors_read, metrics_read, logs_read_data, incidents_read, hosts_read, apm_read
Quick Start
npx tsx <skill-path>/scripts/datadog.ts validate
npx tsx <skill-path>/scripts/datadog.ts search-logs "status:error" --from -1h
npx tsx <skill-path>/scripts/datadog.ts query-metrics "avg:system.cpu.user{*}" --from -4h
npx tsx <skill-path>/scripts/datadog.ts list-monitors
Commands
Logs
npx tsx <skill-path>/scripts/datadog.ts search-logs "service:api status:error"
npx tsx <skill-path>/scripts/datadog.ts search-logs "env:prod" --from -30m --limit 100
Metrics
npx tsx <skill-path>/scripts/datadog.ts query-metrics "avg:system.cpu.user{*}" --from -4h
npx tsx <skill-path>/scripts/datadog.ts query-metrics "sum:requests.count{service:api}.as_count()" --from -1d
Monitors
npx tsx <skill-path>/scripts/datadog.ts list-monitors
npx tsx <skill-path>/scripts/datadog.ts list-monitors --query "status:alert"
npx tsx <skill-path>/scripts/datadog.ts get-monitor 12345
Dashboards
npx tsx <skill-path>/scripts/datadog.ts list-dashboards
Hosts
npx tsx <skill-path>/scripts/datadog.ts list-hosts
npx tsx <skill-path>/scripts/datadog.ts list-hosts --filter "env:production"
Incidents
npx tsx <skill-path>/scripts/datadog.ts list-incidents
APM (Spans & Services)
npx tsx <skill-path>/scripts/datadog.ts search-spans "service:api @http.status_code:500" --from -1h
npx tsx <skill-path>/scripts/datadog.ts list-services
Time Formats
The --from and --to flags accept:
- Relative:
-1h, -30m, -1d, -4h
- ISO 8601:
2026-03-20T00:00:00Z
Datadog Sites
| Region | DD_SITE value |
|---|
| US1 | datadoghq.com |
| US3 | us3.datadoghq.com |
| US5 | us5.datadoghq.com |
| EU | datadoghq.eu |
| AP1 | ap1.datadoghq.com |
Troubleshooting
403 Forbidden:
- Check DD_SITE matches your Datadog region
- Verify app key has required scopes
- Confirm API key is active
Credentials not found:
- Ensure DD_API_KEY and DD_APP_KEY are exported
- Check for typos in env var names