Datadog Code Security

What it does

Datadog Code Security MCP brings enterprise-grade security scanning to AI assistants. It allows the AI to proactively identify security vulnerabilities, hardcoded secrets, and dependency risks (SCA) within the codebase in real-time, rather than waiting for a CI/CD pipeline run.

Tools

• datadog_code_security_scan: Performs a comprehensive parallel scan (SAST + Secrets + SCA + IaC).
• datadog_sast_scan: Executes Static Application Security Testing to find logic flaws.
• datadog_secrets_scan: Scans for accidentally committed credentials and keys.
• datadog_sca_scan: Identifies vulnerable dependencies via Software Composition Analysis.
• datadog_iac_scan: Checks Infrastructure as Code files for security misconfigurations.
• datadog_generate_sbom: Generates a Software Bill of Materials for the project.

Installation

Install via Homebrew:

brew tap datadog-labs/pack
brew install datadog-labs/pack/datadog-code-security-mcp

Configure in Claude Desktop:

{
  "mcpServers": {
    "datadog-code-security": {
      "command": "datadog-code-security-mcp",
      "args": ["start"],
      "env": {
        "DD_API_KEY": "<your-api-key>",
        "DD_APP_KEY": "<your-app-key>",
        "DD_SITE": "datadoghq.com"
      }
    }
  }
}

Supported hosts

• Claude Desktop
• Cursor