Create the credential in Datadog
Create an API key under a service account in Datadog. Also create an Application key under the same service account. The Application key carries the read scopes, so restrict it to read-only roles. The form doesn’t require the Application key, but reading metrics, monitors, and dashboards does. Datadog’s own guide for creating the credential is at docs.datadoghq.com.Add the connector
Go to Organization settings > Claude Tag > Connectors, click Add, and select the Datadog entry for your Datadog account’s site. Datadog has a separate API host per site, and a key only works against its own.
Every entry asks for the same fields in the connect form.
If the connect form offers to include the Datadog plugin, leave that box selected; otherwise add the plugin on the Skills and plugins tab. The first credential you add for a service from the Connectors tab is on in every workspace and channel as soon as you save it. To give it narrower reach, see where a new connector applies before you save the connector. Click Connect to save the connector.
The connector is created with path prefixes that cover Datadog’s read and query routes: metric, log, trace, and RUM queries, monitors, downtimes, dashboards, SLOs, notebooks, events, hosts, service definitions, and incident search. It doesn’t cover Datadog’s key, user, integration, or log-configuration management routes, so Claude can’t call those through it. To narrow the connector further, for example to
GET only, or to allow another route, go to Organization settings > Claude Tag > Connectors, click your Datadog connector, open the menu on the credential’s row in the Access from table, and click Edit. See Restrict by path or method.
The Agent Proxy injects the credential at the network boundary; the model and the sandbox are not given the key. See how Agent Proxy works.
Verify the connection
In a channel where the connector is on, in a new thread:Related resources
- What this connection adds: the monitoring use cases
- Give Claude access: the full credential-type and allowed-hosts reference