Datadog offers an agentless OTLP intake, so MCP Manager can send logs directly to Datadog’s per-site OTLP/HTTP endpoint over HTTPS without running the Datadog Agent or an OpenTelemetry Collector. This guide covers the Datadog-specific details. For what MCP Manager sends, how forwarding behaves, who can configure it, and general troubleshooting, see Export to SIEM.Documentation Index
Fetch the complete documentation index at: https://docs.mcpmanager.ai/llms.txt
Use this file to discover all available pages before exploring further.
Configuring log forwarding requires the Manage OpenTelemetry collector capability and an Enterprise plan that includes the OpenTelemetry integration. If you do not see the Logging → Integrations panel, see Who can set up log export.
What you’ll need
- A Datadog account, and the site your organization is on (US1, US3, US5, EU, AP1, AP2, and so on).
- A Datadog API key (an ingest key), not an Application key.
- Access to MCP Manager with the Manage OpenTelemetry collector capability.
Step 1: Determine your collector URL
Datadog’s OTLP intake host is per-site, and the logs path is/v1/logs on port 443. For the US1 site the endpoint is:
403 Forbidden. Append /v1/logs to that host; MCP Manager appends nothing itself.
Step 2: Create an API key
In Datadog, go to Organization Settings → API Keys and create or copy an API key. This is an ingest key, distinct from an Application key (which is used for the Datadog API and will not work for OTLP ingestion).Step 3: Connect MCP Manager to Datadog
Datadog authenticates with a customdd-api-key header rather than the standard Authorization header. Because MCP Manager’s Request headers field is an open key/value list, you add dd-api-key directly.
Open the OpenTelemetry collector panel
In MCP Manager, go to Logs → Integrations and find the OpenTelemetry collector panel.
Enter the collector URL
In Collector URL, paste your site’s OTLP logs endpoint, for example
https://otlp.datadoghq.com/v1/logs for US1.Add the dd-api-key request header
Under Request headers, add one header:
- Field name:
dd-api-key - Field value: your Datadog API key
Step 4: Verify logs are flowing
Trigger an MCP call through a gateway (atools/list call is enough), then check Alerts in MCP Manager for a “Failed to export telemetry logs to OTEL collector” alert. For Datadog:
403 Forbidden— the endpoint host is wrong for your organization’s site, or the API key is invalid.404 Not Found— the URL path is wrong (missing/v1/logs).400 Bad Request— the payload was rejected, which can mean the logs intake did not accept the JSON encoding (see the caveat above).
service.name resource attribute maps to Datadog’s service facet, so filter on the service.name shown in MCP Manager’s Filter your logs by panel.
Troubleshooting
Export is failing with 403
Export is failing with 403
A
403 on the Datadog intake means the endpoint URL is wrong for your organization’s site, or the key is bad. Confirm your site with the Datadog site selector and use that exact host, and confirm you used an API key (not an Application key) that belongs to the right account.Export is failing with 404
Export is failing with 404
The URL path is wrong. MCP Manager appends nothing, so the URL must end in
/v1/logs on your site’s OTLP host.Export is failing with 400 (payload rejected)
Export is failing with 400 (payload rejected)
Datadog’s OTLP logs intake documents the HTTP/Protobuf exporter, and MCP Manager sends OTLP/HTTP JSON. A
400 rejecting the payload can mean the logs intake did not accept JSON. Route MCP Manager through a self-hosted OpenTelemetry Collector and let the collector export to Datadog, or confirm JSON support with Datadog.Test the connection manually
Test the connection manually
From any machine with outbound HTTPS access:A
terminal
2xx or a 400 rejecting only the empty body means the site host and key are valid; 403 means the site host is wrong or the key is bad; 404 means the path is wrong.Further reading
Honeycomb
The next per-vendor guide — US/EU endpoints and the x-honeycomb-team key.
Export to SIEM
What MCP Manager sends, how forwarding behaves, and general troubleshooting.
Self-hosted Collector
Re-encode JSON to protobuf and forward to Datadog from your own collector.
External sources
Datadog OTLP intake overview
The agentless intake and the per-site host selector for your exact endpoint.
Datadog OTLP logs intake
The
/v1/logs path, the dd-api-key header, and the protobuf-exporter examples.Datadog API and Application keys
Where keys live and the API-key-vs-Application-key distinction.
OTLP specification
The protocol spec, including the success and partial-success response contract.
.png?fit=max&auto=format&n=gKqTvJPtsRi2bLNx&q=85&s=8abbce3efb590630de2102c43d32aadf)
.png?fit=max&auto=format&n=Dy9YsIECUbR9JZiT&q=85&s=a1f404cd7f7aeb1727c89d81137ae1ac)