Connect Datadog
Set up the Datadog connector with API-key authentication — select your site and enter an API key plus an unscoped application key.
Datadog is a built-in connector backed by Datadog's official hosted MCP server. It exposes observability tools — dashboards, monitors, incidents, logs, metrics, traces, and more. Datadog authenticates with API keys, not OAuth.
Before you start
- Datadog must be approved for your team.
- You'll need access to your Datadog org to create keys, and you need to know which Datadog site your org uses.
1. Select the right server (Datadog site)
Open Teams → [Team] → Connectors → Datadog and pick your Datadog site in the config dropdown. This selects the correct regional MCP endpoint — Datadog hosts a different server per site, so this must match your account.
| Site | Datadog domain |
|---|---|
| US1 | datadoghq.com |
| US3 | us3.datadoghq.com |
| US5 | us5.datadoghq.com |
| EU1 | datadoghq.eu |
| AP1 | ap1.datadoghq.com |
| AP2 | ap2.datadoghq.com |
| US1-FED | ddog-gov.com |
Pick the site your org actually uses
If you choose the wrong site, authentication and tool calls will fail. The site is the domain you log in to Datadog with.
2. Create the keys in Datadog
In your Datadog org, create:
- An API key.
- An application key — it must be unscoped. A scoped application key will not work.
3. Connect with API keys
Back on the Datadog connector page, choose Connect with API keys and enter both keys as a single colon-separated value:
<api_key>:<application_key>Wato encrypts the credential server-side and sends it to Datadog as the
DD_API_KEY and DD_APPLICATION_KEY headers when calling tools.
4. Sync tools
After saving, sync the connector to load Datadog's tools. Once verified, agents on the team can call Datadog tools through the gateway — subject to your team's tool-access policy.
Troubleshooting
- "Datadog credentials must be formatted as api-key:application-key." — Re-enter the value with a single colon between the two keys.
- Auth fails after saving — confirm the application key is unscoped and that the selected site matches your Datadog account.
- OAuth prompt — Datadog doesn't use OAuth here; use Connect with API keys instead.