How AI is applied across API Evangelist and APIs.io. Read my AI disclosure →
API Evangelist API Evangelist
Discovery
Learnings
Guidance
Toolbox
Alignment
API Evangelist LLC
Discovery
Learnings
Guidance
Toolbox
Alignment
API Evangelist LLC

Need help?

Contact us
Datadog

Datadog Security API

The Security API from Datadog — 8 operation(s) for security.

Documentation Provider Profile APIs.io OpenAPI GitHub

Datadog Security API is one of 290 APIs that Datadog publishes on the APIs.io network, described by a machine-readable OpenAPI specification.

This API exposes 4 JSON Schema definitions.

Tagged areas include Security. The published artifact set on APIs.io includes an OpenAPI specification, API documentation, authentication docs, an API reference, and 4 JSON Schemas.

This API exposes 11 operations across 8 paths, and defines 53 schemas. It is described by OpenAPI 3.0.0, at version 1.0.

Requests are made against 3 base URLs: https://{subdomain}.{site}, {protocol}://{name}, https://{subdomain}.{site}.

11 operations 8 paths 53 schemas 1 DELETE4 GET4 PATCH2 POST

Metadata

The identity and technical contract details declared by the specification.

Specification
OpenAPI 3.0.0
API Version
1.0
Base URL
https://api.datadoghq.com
Authentication
OAuth 2.0, API Key, API Key, HTTP Bearer
Contact
Datadog Support
Resource Areas
1

Authentication & Security 4

Datadog Security API declares 4 security schemes for authenticating requests. It supports OAuth 2.0 (AuthZ) using the authorizationCode flow, exposing 68 scopes. An API key is passed in the header as DD-API-KEY (apiKeyAuth). An API key is passed in the header as DD-APPLICATION-KEY (appKeyAuth). It accepts HTTP bearer tokens (bearerAuth). By default, every request must be authenticated.

  • AuthZ — This API uses OAuth 2 with the implicit grant flow.
  • apiKeyAuth — Your Datadog API Key.
  • appKeyAuth — Your Datadog APP Key.

Paths & Operations 11

Across 8 paths, the API surfaces 11 operations — 1 DELETE, 4 GET, 4 PATCH, 2 POST. Each is listed below with its method, path, parameters, and response codes.

Security 11
GET
/api/v2/security_monitoring/configuration/security_filters
Datadog Get All Security Filters
ListSecurityFilters → 200403429
POST
/api/v2/security_monitoring/configuration/security_filters
Datadog Create a Security Filter
CreateSecurityFilter body → 200400403409429
DELETE
/api/v2/security_monitoring/configuration/security_filters/{security_filter_id}
Datadog Delete a Security Filter
DeleteSecurityFilter 1 param → 204403404429
GET
/api/v2/security_monitoring/configuration/security_filters/{security_filter_id}
Datadog Get a Security Filter
GetSecurityFilter 1 param → 200403404429
PATCH
/api/v2/security_monitoring/configuration/security_filters/{security_filter_id}
Datadog Update a Security Filter
UpdateSecurityFilter 1 param body → 200400403404409429
GET
/api/v2/security_monitoring/signals
Datadog Get a Quick List of Security Signals
ListSecurityMonitoringSignals 6 params → 200400403429
POST
/api/v2/security_monitoring/signals/search
Datadog Get a List of Security Signals
SearchSecurityMonitoringSignals body → 200400403429
PATCH
/api/v2/security_monitoring/signals/{signal_id}/assignee
Datadog Modify the Triage Assignee of a Security Signal
EditSecurityMonitoringSignalAssignee 1 param body → 200400403404429
PATCH
/api/v2/security_monitoring/signals/{signal_id}/incidents
Datadog Change the Related Incidents of a Security Signal
EditSecurityMonitoringSignalIncidents 1 param body → 200400403404429
PATCH
/api/v2/security_monitoring/signals/{signal_id}/state
Datadog Change the Triage State of a Security Signal
EditSecurityMonitoringSignalState 1 param body → 200400403404429
GET
/api/v2/usage/application_securitydeprecated
Datadog Get Hourly Usage for Application Security
GetUsageApplicationSecurityMonitoring 2 params → 200400403429

Schemas 53

The contract defines 53 schemas that model the data the API accepts and returns. The most detailed are SecurityMonitoringSignalTriageAttributes (9 properties), SecurityFilterAttributes (7 properties), UsageAttributesObject (6 properties), SecurityFilterUpdateAttributes (6 properties). Each schema is shown below with its type and property counts.

SecurityMonitoringSignalIncidentsUpdateData
object
Data containing the patch for changing the related incidents of a signal.
1 property 1 required
SecurityFilterExclusionFilter
object
Exclusion filter for the security filter.
2 properties 2 required
SecurityMonitoringSignalListRequestFilter
object
Search filters for listing security signals.
3 properties
SecurityMonitoringSignalAssigneeUpdateAttributes
object
Attributes describing the new assignee of a security signal.
2 properties 1 required
HourlyUsageType
string
Usage type that is being measured.
SecurityMonitoringSignalIncidentsUpdateRequest
object
Request body for changing the related incidents of a given security monitoring signal.
1 property 1 required
SecurityFilterFilteredDataType
string
The filtered data type.
SecurityMonitoringSignalIncidentIds
array
Array of incidents that are associated with this signal.
SecurityFilterUpdateData
object
The new security filter properties.
2 properties 2 required
SecurityMonitoringSignalsSort
string
The sort parameters used for querying security signals.
SecurityMonitoringSignalArchiveComment
string
Optional comment to display on archived signals.
SecurityFiltersResponse
object
All the available security filters objects.
2 properties
SecurityMonitoringSignalType
string
The type of event.
SecurityMonitoringSignalsListResponse
object
The response object with all security signals matching the request and pagination information.
3 properties
APIErrorResponse
object
API error response.
1 property 1 required
SecurityFilter
object
The security filter's properties.
3 properties
SecurityMonitoringSignalStateUpdateAttributes
object
Attributes describing the change of state of a security signal.
4 properties 1 required
UsageTimeSeriesObject
object
Usage timeseries data.
2 properties
SecurityMonitoringSignalTriageAttributes
object
Attributes describing a triage state update operation over a security signal.
9 properties 3 required
SecurityMonitoringSignalTriageUpdateResponse
object
The response returned after all triage operations, containing the updated signal triage data.
1 property 1 required
SecurityMonitoringSignalsListResponseLinks
object
Links attributes.
1 property
SecurityMonitoringSignalsListResponseMeta
object
Meta attributes.
1 property
SecurityFilterType
string
The type of the resource. The value should always be securityfilters.
SecurityFilterCreateData
object
Object for a single security filter.
2 properties 2 required
SecurityMonitoringSignalVersion
integer
Version of the updated signal. If server side version is higher, update will be rejected.
UsageApplicationSecurityMonitoringResponse
object
Application Security Monitoring usage response.
1 property
SecurityMonitoringSignalAssigneeUpdateRequest
object
Request body for changing the assignee of a given security monitoring signal.
1 property 1 required
SecurityMonitoringSignalListRequestPage
object
The paging attributes for listing security signals.
2 properties
SecurityFilterMeta
object
Optional metadata associated to the response.
1 property
SecurityFilterExclusionFilterResponse
object
A single exclusion filter.
2 properties
SecurityMonitoringSignalListRequest
object
The request for a security signal list.
3 properties
UsageDataObject
object
Usage data.
3 properties
SecurityMonitoringSignalArchiveReason
string
Reason a signal is archived.
SecurityFilterID
string
The ID of the security filter.
UsageAttributesObject
object
Usage attributes data.
6 properties
SecurityMonitoringSignalIncidentsUpdateAttributes
object
Attributes describing the new list of related signals for a security signal.
2 properties 1 required
SecurityFilterUpdateAttributes
object
The security filters properties to be updated.
6 properties
SecurityMonitoringSignalStateUpdateRequest
object
Request body for changing the state of a given security monitoring signal.
1 property 1 required
SecurityFilterCreateAttributes
object
Object containing the attributes of the security filter to be created.
5 properties 5 required
SecurityMonitoringSignalAssigneeUpdateData
object
Data containing the patch for changing the assignee of a signal.
1 property 1 required
SecurityMonitoringSignalTriageUpdateData
object
Data containing the updated triage attributes of the signal.
3 properties
SecurityMonitoringSignalStateUpdateData
object
Data containing the patch for changing the state of a signal.
3 properties 1 required
SecurityFilterUpdateRequest
object
The new security filter body.
1 property 1 required
SecurityFilterCreateRequest
object
Request object that includes the security filter that you would like to create.
1 property 1 required
SecurityMonitoringTriageUser
object
Object representing a given user entity.
5 properties 1 required
SecurityMonitoringSignal
object
Object description of a security signal.
3 properties
SecurityMonitoringSignalsListResponseMetaPage
object
Paging attributes.
1 property
SecurityMonitoringSignalState
string
The new triage state of the signal.
SecurityMonitoringSignalAttributes
object
The object containing all signal attributes and their associated values.
4 properties
SecurityFilterResponse
object
Response object which includes a single security filter.
2 properties
SecurityFilterAttributes
object
The object describing a security filter.
7 properties
UsageTimeSeriesType
string
Type of usage data.
SecurityMonitoringSignalMetadataType
string
The type of event.

Specification

The full machine-readable OpenAPI contract behind this narrative.

Source

datadog-security-api-openapi.yml Raw ↑

Other APIs Datadog publishes across the network.

Datadog Dashboards API
AE Profile APIs.io
Datadog Synthetics API
AE Profile APIs.io
Datadog Service Level Objectives API
AE Profile APIs.io
Datadog Security Monitoring API
AE Profile APIs.io
Datadog Service Definition API
AE Profile APIs.io
Datadog Software Catalog API
AE Profile APIs.io
Datadog Users API
AE Profile APIs.io
Datadog Roles API
AE Profile APIs.io
Datadog Key Management API
AE Profile APIs.io
Datadog Organizations API
AE Profile APIs.io
Datadog Downtimes API
AE Profile APIs.io
Datadog RUM API
AE Profile APIs.io
#Security
← Back to D APIs
API Details
ID
datadog:datadog-security-api
Base URL
https://api.datadoghq.com
Docs
https://docs.datadoghq.com/api/latest/
Provider
Datadog
APIs.io →  GitHub →
Explore more
All APIs Providers APIs.io Network
Work with this as data

Every API here is available over the API and to AI agents over MCP. APIs is not yet its own endpoint on the v1 API. Reach this content through network search and the tag graph, or the MCP server below.

Installs https://mcp.apievangelist.com/mcp in Claude, Cursor, VS Code and the rest — one button, every client.

MCP tools for apis
4 tools reach this content
  • search_api_evangelistSearch every content type across the network at once.
  • find_relatedThe shared-tag relevance graph — what else covers this.
  • get_tagEverything one tag labels, across all content types.
  • guide_topicPRO — a curated bundle for a topic: area, guidance, rules, papers, stories, services.
All tools & prompts
Call it yourself
curl for this page
Search the network for this 
curl "https://api.apievangelist.com/v1/search?q=datadog-security-api&limit=10"
Everything under a tag 
curl "https://api.apievangelist.com/v1/tags/datadog-security-api"

Discovery needs no key. Full bodies and the synthesis endpoints are Pro.

Get an API key

Free tier, no email required. Sign in with whichever identity you already have.

GitHub Google LinkedIn

A second provider on the same verified email joins the account you already have. Your account

Where this information came from

This is an independent, third-party profile of Datadog Security API, published by API Evangelist. We do not operate, host, resell, or support these APIs, and we are not affiliated with or endorsed by the company unless stated above. Everything here is built from publicly available information — the company's own site, developer portal, documentation, public repositories, and the specifications it publishes for public use. Nothing is obtained by breaching a system, defeating an access control, or using credentials.

The Kin Score and Agent Readiness rating are independently calculated assessments of a company's public API artifacts, scored against a published rubric. They are not certifications, endorsements, security assessments, or audits.

Corrections, re-scores, and removal are free — no partnership or purchase required, and you do not need to justify the request. A removed company is recorded as unrated, never scored zero for having asked. Acknowledgement within one business day; removal within two.

info@apievangelist.com · Read the full data-sourcing policy →
On a security or compliance team? Put security in the subject line and you will get a person, not a form — we will tell you exactly which public URLs this profile was built from.