How we brought agentic workflows to Cloud SIEM with the Datadog MCP Server

2026-07-24

Datadog built Cloud SIEM MCP tools around real user workflows, using progressive disclosure and query-based design to reduce context usage while enabling large-scale security investigations and triage. A custom evaluation framework and lightweight governance help ensure reliable agent behavior, prevent regressions, and support scalable multi-team tool development.