How do I install the Datadog Incidents skill?

Run npx skillmds@latest add gabrielmoreira/datadog-incidents in your terminal (requires Node.js), paste this page's agent-chat prompt into Claude, Cursor, or any MCP-connected agent, or download the SKILL.md file and copy it into your agent's skills directory.

What does the Datadog Incidents skill do?

Manage incidents in Datadog Incident Management. It is listed under Coding & Dev Tools on SkillMD.

Is Datadog Incidents safe to use?

This skill has not completed SkillMD's automated safety review yet. Capability flags: docs only. SkillMD never runs a skill's scripts for you; review the SKILL.md before installing.

Which AI agents work with Datadog Incidents?

This skill is tagged as working with Claude Code, Claude.ai, OpenAI Codex. SKILL.md is an open format, so most agents that read a skills directory can load it too.

Is Datadog Incidents free to use?

Yes. Installing skills from SkillMD is free. This skill is licensed under Apache-2.

Who published Datadog Incidents?

gabrielmoreira (@gabrielmoreira) published this skill. Their other Agent Skills are listed on their SkillMD profile.

Datadog Incidents by gabrielmoreira

Name: Datadog Incidents
Rating: 4.2 (5 reviews)
Author: gabrielmoreira

File contents

Datadog Incidents Skill

Manage incidents in Datadog Incident Management.

Tools

Tool	Description
`list_incidents`	List incidents with optional filters
`get_incident`	Get detailed incident information
`create_incident`	Create a new incident (read-only by default)
`update_incident`	Update incident status or fields (read-only by default)

Example Queries

List all active incidents
→ list_incidents(status="active")

Get details of a specific incident
→ get_incident(incident_id="INC-12345")

List recent network-related incidents
→ list_incidents(tags=["service:network"], time_range="7d")

List SEV1 incidents from the past month
→ list_incidents(severity="SEV-1", time_range="30d")

Workflows

Incident Investigation

List active incidents: list_incidents(status="active")
Get incident details: get_incident(incident_id="INC-12345")
Review timeline and related monitors
Check correlated metrics and logs
Document findings in incident

Network Outage Tracking

Search network incidents: list_incidents(tags=["service:network"])
Filter by impact: list_incidents(severity="SEV-1,SEV-2")
Review affected services and dependencies
Track MTTR and resolution patterns

Post-Incident Review

Get incident timeline: get_incident(incident_id="INC-12345")
Extract key events and decisions
Identify detection and response gaps
Document lessons learned

Prerequisites

DD_API_KEY Datadog API key
DD_APP_KEY Datadog application key
DD_SITE Datadog site (optional, defaults to datadoghq.com)

Server

This skill uses the datadog-mcp server via remote MCP transport.

Notes

Create and update operations may require additional permissions
NetClaw operates in read-only mode by default for safety
Incident creation should follow your organization's incident process

---name: datadog-incidentsdescription: Manage incidents in Datadog Incident Management.license: Apache-2.0--- # Datadog Incidents Skill Manage incidents in Datadog Incident Management. ## Tools | Tool | Description | |------|-------------| | `list_incidents` | List incidents with optional filters | | `get_incident` | Get detailed incident information | | `create_incident` | Create a new incident (read-only by default) | | `update_incident` | Update incident status or fields (read-only by default) | ## Example Queries ``` List all active incidents → list_incidents(status="active") Get details of a specific incident → get_incident(incident_id="INC-12345") List recent network-related incidents → list_incidents(tags=["service:network"], time_range="7d") List SEV1 incidents from the past month → list_incidents(severity="SEV-1", time_range="30d") ``` ## Workflows ### Incident Investigation 1. List active incidents: `list_incidents(status="active")` 2. Get incident details: `get_incident(incident_id="INC-12345")` 3. Review timeline and related monitors 4. Check correlated metrics and logs 5. Document findings in incident ### Network Outage Tracking 1. Search network incidents: `list_incidents(tags=["service:network"])` 2. Filter by impact: `list_incidents(severity="SEV-1,SEV-2")` 3. Review affected services and dependencies 4. Track MTTR and resolution patterns ### Post-Incident Review 1. Get incident timeline: `get_incident(incident_id="INC-12345")` 2. Extract key events and decisions 3. Identify detection and response gaps 4. Document lessons learned ## Prerequisites - `DD_API_KEY` Datadog API key - `DD_APP_KEY` Datadog application key - `DD_SITE` Datadog site (optional, defaults to datadoghq.com) ## Server This skill uses the `datadog-mcp` server via remote MCP transport. ## Notes - Create and update operations may require additional permissions - NetClaw operates in read-only mode by default for safety - Incident creation should follow your organization's incident process

Frequently asked questions

Datadog Incidents