How AI is applied across API Evangelist and APIs.io. Read my AI disclosure →
API Evangelist API Evangelist
Discovery
Learnings
Guidance
Toolbox
Alignment
API Evangelist LLC

Datadog Agent API

The Agent API from Datadog — 4 operation(s) for agent.

Datadog Agent API is one of 290 APIs that Datadog publishes on the APIs.io network, described by a machine-readable OpenAPI specification.

This API exposes 4 JSON Schema definitions.

Tagged areas include Agents. The published artifact set on APIs.io includes an OpenAPI specification, API documentation, authentication docs, an API reference, and 4 JSON Schemas.

This API exposes 10 operations across 4 paths, and defines 20 schemas. It is described by OpenAPI 3.0.0, at version 1.0.

Requests are made against 3 base URLs: https://{subdomain}.{site}, {protocol}://{name}, https://{subdomain}.{site}.

10 operations 4 paths 20 schemas 2 DELETE4 GET2 PATCH2 POST

Metadata

The identity and technical contract details declared by the specification.

Specification
OpenAPI 3.0.0
API Version
1.0
Base URL
https://api.datadoghq.com
Authentication
OAuth 2.0, API Key, API Key, HTTP Bearer
Resource Areas
1

Authentication & Security 4

Datadog Agent API declares 4 security schemes for authenticating requests. It supports OAuth 2.0 (AuthZ) using the authorizationCode flow, exposing 68 scopes. An API key is passed in the header as DD-API-KEY (apiKeyAuth). An API key is passed in the header as DD-APPLICATION-KEY (appKeyAuth). It accepts HTTP bearer tokens (bearerAuth). By default, every request must be authenticated.

  • AuthZ — This API uses OAuth 2 with the implicit grant flow.
  • apiKeyAuth — Your Datadog API Key.
  • appKeyAuth — Your Datadog APP Key.

Paths & Operations 10

Across 4 paths, the API surfaces 10 operations — 2 DELETE, 4 GET, 2 PATCH, 2 POST. Each is listed below with its method, path, parameters, and response codes.

Agent 10
GET
/api/v2/remote_config/products/cws/agent_rules
Datadog Get All Workload Protection Agent Rules
ListCSMThreatsAgentRules 1 param → 200403429
POST
/api/v2/remote_config/products/cws/agent_rules
Datadog Create a Workload Protection Agent Rule
CreateCSMThreatsAgentRule body → 200400403409429
DELETE
/api/v2/remote_config/products/cws/agent_rules/{agent_rule_id}
Datadog Delete a Workload Protection Agent Rule
DeleteCSMThreatsAgentRule 2 params → 204403404429
GET
/api/v2/remote_config/products/cws/agent_rules/{agent_rule_id}
Datadog Get a Workload Protection Agent Rule
GetCSMThreatsAgentRule 2 params → 200403404429
PATCH
/api/v2/remote_config/products/cws/agent_rules/{agent_rule_id}
Datadog Update a Workload Protection Agent Rule
UpdateCSMThreatsAgentRule 2 params body → 200400403404409429
GET
/api/v2/security_monitoring/cloud_workload_security/agent_rules
Datadog Get All Workload Protection Agent Rules (us1-fed)
ListCloudWorkloadSecurityAgentRules → 200403429
POST
/api/v2/security_monitoring/cloud_workload_security/agent_rules
Datadog Create a Workload Protection Agent Rule (us1-fed)
CreateCloudWorkloadSecurityAgentRule body → 200400403409429
DELETE
/api/v2/security_monitoring/cloud_workload_security/agent_rules/{agent_rule_id}
Datadog Delete a Workload Protection Agent Rule (us1-fed)
DeleteCloudWorkloadSecurityAgentRule 1 param → 204403404429
GET
/api/v2/security_monitoring/cloud_workload_security/agent_rules/{agent_rule_id}
Datadog Get a Workload Protection Agent Rule (us1-fed)
GetCloudWorkloadSecurityAgentRule 1 param → 200403404429
PATCH
/api/v2/security_monitoring/cloud_workload_security/agent_rules/{agent_rule_id}
Datadog Update a Workload Protection Agent Rule (us1-fed)
UpdateCloudWorkloadSecurityAgentRule 1 param body → 200400403404409429

Schemas 20

The contract defines 20 schemas that model the data the API accepts and returns. The most detailed are CloudWorkloadSecurityAgentRuleAttributes (21 properties), CloudWorkloadSecurityAgentRuleCreateAttributes (11 properties), CloudWorkloadSecurityAgentRuleUpdateAttributes (9 properties), CloudWorkloadSecurityAgentRuleActionSet (7 properties). Each schema is shown below with its type and property counts.

CloudWorkloadSecurityAgentRuleAttributes
object
A Cloud Workload Security Agent rule returned by the API
21 properties
CloudWorkloadSecurityAgentRuleResponse
object
Response object that includes an Agent rule
1 property
CloudWorkloadSecurityAgentRuleData
object
Object for a single Agent rule
3 properties
CloudWorkloadSecurityAgentRuleCreateData
object
Object for a single Agent rule
2 properties 2 required
CloudWorkloadSecurityAgentRuleAction
object
The action the rule can perform if triggered
4 properties
CloudWorkloadSecurityAgentRuleKill
object
Kill system call applied on the container matching the rule
1 property
CloudWorkloadSecurityAgentRuleUpdateRequest
object
Request object that includes the Agent rule with the attributes to update
1 property 1 required
APIErrorResponse
object
API error response.
1 property 1 required
CloudWorkloadSecurityAgentRuleActions
array
The array of actions the rule can perform if triggered
CloudWorkloadSecurityAgentRuleActionMetadata
object
The metadata action applied on the scope matching the rule
3 properties
CloudWorkloadSecurityAgentRuleUpdaterAttributes
object
The attributes of the user who last updated the Agent rule
2 properties
CloudWorkloadSecurityAgentRuleID
string
The ID of the Agent rule
CloudWorkloadSecurityAgentRuleCreateRequest
object
Request object that includes the Agent rule to create
1 property 1 required
CloudWorkloadSecurityAgentRuleUpdateData
object
Object for a single Agent rule
3 properties 2 required
CloudWorkloadSecurityAgentRuleType
string
The type of the resource, must always be agentrule
CloudWorkloadSecurityAgentRuleUpdateAttributes
object
Update an existing Cloud Workload Security Agent rule
9 properties
CloudWorkloadSecurityAgentRulesListResponse
object
Response object that includes a list of Agent rule
1 property
CloudWorkloadSecurityAgentRuleCreateAttributes
object
Create a new Cloud Workload Security Agent rule.
11 properties 2 required
CloudWorkloadSecurityAgentRuleCreatorAttributes
object
The attributes of the user who created the Agent rule
2 properties
CloudWorkloadSecurityAgentRuleActionSet
object
The set action applied on the scope matching the rule
7 properties

Specification

The full machine-readable OpenAPI contract behind this narrative.

Source

datadog-agent-api-openapi.yml Raw ↑

Other APIs Datadog publishes across the network.

Datadog Dashboards API
Datadog Synthetics API
Datadog Service Level Objectives API
Datadog Security Monitoring API
Datadog Service Definition API
Datadog Software Catalog API
Datadog Users API
Datadog Roles API
Datadog Key Management API
Datadog Organizations API
Datadog Downtimes API
Datadog RUM API
Where this information came from

This is an independent, third-party profile of Datadog Agent API, published by API Evangelist. We do not operate, host, resell, or support these APIs, and we are not affiliated with or endorsed by the company unless stated above. Everything here is built from publicly available information — the company's own site, developer portal, documentation, public repositories, and the specifications it publishes for public use. Nothing is obtained by breaching a system, defeating an access control, or using credentials.

The Kin Score and Agent Readiness rating are independently calculated assessments of a company's public API artifacts, scored against a published rubric. They are not certifications, endorsements, security assessments, or audits.

Corrections, re-scores, and removal are free — no partnership or purchase required, and you do not need to justify the request. A removed company is recorded as unrated, never scored zero for having asked. Acknowledgement within one business day; removal within two.

info@apievangelist.com · Read the full data-sourcing policy →
On a security or compliance team? Put security in the subject line and you will get a person, not a form — we will tell you exactly which public URLs this profile was built from.