Evidence
observed · not disputed
Coverage
complete · 16/16 graded0/5 barrier checks verified
Freshness
fresh
Last tested
Revision
sha256:969753203d29…

Agent report card

Can an agent use Datadog API through Monitor operations?

Grade C+: Machine credentials exist but require manual copying, broad authority, or weak lifecycle support.

Datadog / active

Agent ReadinessC+Limited

Five-stage assessment

Where agent autonomy holds and where it breaks

Five states · each from its own evidence · lifecycle order, not a journey
  1. EvaluateReady
  2. Sign upLimited
  3. PayLimited
  4. ProvisionLimited
  5. OperateLimited
  1. 01

    Evaluate

    Ready

    The exact service and stable evaluation or access entrypoints are publicly discoverable.

    Applicable terms are stable, readable, retrievable, and materially complete.

    Eligibility conditions and required inputs are explicit and decidable.

    Price or no-charge status, variables, currency, and material conditions are explicit.

    Evidence and actions6 signals

    Can an agent decide every material eligibility condition before commitment?

    supported: fresh

    Eligibility conditions and required inputs are explicit and decidable.

    Datadog explicitly sets eligibility conditions in its Master Subscription Agreement: individuals using the services for their own purposes represent that they are legally permitted and competent to enter into the agreement, and users on behalf of an entity or organization represent that they have the right, power, and authority to enter into the agreement.

    eligibility_decidability: Ready: tested 20 Aug

    Method public-http-semantic-assessment 2026-08-20

    Can an agent estimate cost or confirm no-charge status before commitment?

    supported: fresh

    Price or no-charge status, variables, currency, and material conditions are explicit.

    Datadog explicitly discloses pricing rates, currency (USD), billing variables (e.g., per ingested or scanned GB per month, per million log events per month), and material commitment conditions such as annual vs. on-demand billing options on its pricing page.

    pricing_decidability: Ready: tested 20 Aug

    Method public-http-semantic-assessment 2026-08-20

    Can an agent find the exact service and its stable entrypoints?

    supported: fresh

    The exact service and stable evaluation or access entrypoints are publicly discoverable.

    Datadog provides stable public API documentation entrypoints, including a direct markdown version endpoint at https://docs.datadoghq.com/api/latest.md and an LLM documentation index at /llms.txt.

    service_discovery: Ready: tested 20 Aug

    Method public-http-semantic-assessment 2026-08-20

    Are verified structured discovery artifacts available?

    missing: unknown

    Current admissible evidence does not resolve this finding.

    structured_evaluation_discovery: Unknown

    Can an agent retrieve and understand the applicable commitment terms?

    supported: fresh

    Applicable terms are stable, readable, retrievable, and materially complete.

    The Master Subscription Agreement contains terms governing the purchase and use of Datadog's services, taking effect upon entering into an Order, and includes sections covering Access and Use, Customer Restrictions, and applicable compliance and responsibilities.

    terms_access: Ready: tested 20 Aug

    Method public-http-semantic-assessment 2026-08-20

    Does the vendor deliberately describe access for web agents?

    missing: unknown

    Current admissible evidence does not resolve this finding.

    verified_web_agent_access: Unknown

  2. 02

    Sign up

    Limited

    Machine credentials exist but require manual copying, broad authority, or weak lifecycle support.

    A stable canonical route begins the required access bootstrap.

    Evidence and actions5 signals

    Can an agent operate the access controls and safe handoffs deterministically?

    supported: fresh

    Current admissible evidence does not resolve this finding.

    The captured endpoint for signup returns an application error stating Datadog requires an up-to-date browser. The evidence does not resolve whether access controls and handoffs can be operated deterministically.

    access_control_operability: Unknown: tested 20 Aug

    Method bounded-headless-semantic-assessment 2026-08-20

    Can an agent obtain access without an unsupported CAPTCHA boundary?

    supported: fresh

    Current admissible evidence does not resolve this finding.

    The retained evidence across all targets consists of browser update warnings or user management documentation that does not discuss CAPTCHA challenges or alternatives.

    captcha_compatible_access: Unknown: tested 20 Aug

    Method bounded-headless-semantic-assessment 2026-08-20

    Can an agent obtain scoped, revocable authority for this service?

    supported: fresh

    Machine credentials exist but require manual copying, broad authority, or weak lifecycle support.

    Application keys provide programmatic API access associated with user accounts and support authorization scopes, but key management like revoking and creating new keys involves manual steps.

    delegated_identity_access: Limited: tested 20 Aug

    Method public-http-semantic-assessment 2026-08-20

    What would improve this stage

    • Provide scoped delegated authorization with consent, revocation, and deterministic resumption.
  3. 03

    Pay

    Limited

    The public commitment omits a material component until later in the flow.

    Self-service is tier- or condition-limited, or a bounded vendor review exposes status.

    Evidence and actions4 signals

    Can an agent construct checkout, hand off approval safely, and resume?

    supported: fresh

    Current admissible evidence does not resolve this finding.

    The retained documentation states that Datadog accepts credit card payments through the Plan page and details payment collection schedules and retry attempts. However, it does not disclose or establish a flow for an agent to construct checkout, hand off approval safely, and resume.

    checkout_operability: Unknown: tested 20 Aug

    Method public-http-semantic-assessment 2026-08-20

    Is the exact commercial commitment disclosed before authorization?

    supported: fresh

    The public commitment omits a material component until later in the flow.

    Datadog's pricing page discloses starting prices in US dollars (such as App and API Protection starting at $31 per host, per month) and recurring options, but notes that overages and customized plans may apply depending on volume or commitment.

    commitment_disclosure: Limited: tested 20 Aug

    Method public-http-semantic-assessment 2026-08-20

    Can payment be authorized within scoped agent or explicit human authority?

    supported: fresh

    Current admissible evidence does not resolve this finding.

    The retained documentation notes that administrators can manage credit card payment methods on the Plan page and that bills are auto-charged. It does not document scoped delegation or explicit human-confirmed payment authorization rails with receipts.

    payment_authorization: Unknown: tested 20 Aug

    Method public-http-semantic-assessment 2026-08-20

    Is a direct self-service path to paid access documented?

    supported: fresh

    Self-service is tier- or condition-limited, or a bounded vendor review exposes status.

    Datadog provides a documented self-service path for credit card billing where administrators navigate to Plan & Usage -> Plan. However, switching to an annual plan or handling specific billing adjustments requires contacting a Customer Success Manager.

    self_service_purchase: Limited: tested 20 Aug

    Method public-http-semantic-assessment 2026-08-20

    What would improve this stage

    • Disclose the complete commitment before payment authorization.
    • Document a direct purchase path or bounded vendor review with machine-readable status.
  4. 04

    Provision

    Limited

    Delivery needs additional human transfer or has weak scope or lifecycle semantics.

    Provisioning is machine-triggerable or follows deterministically from an allowed handoff.

    A synchronous success response returns a usable created resource or access material; otherwise asynchronous work exposes progress, terminal state, reconciliation, and a documented bound.

    Evidence and actions3 signals

    Can usable access material be delivered securely to an authorized agent?

    supported: fresh

    Delivery needs additional human transfer or has weak scope or lifecycle semantics.

    When One-Time Read (OTR) mode is enabled, application key secrets are displayed only once during creation and cannot be retrieved later.

    access_material_delivery: Limited: tested 20 Aug

    Method public-http-semantic-assessment 2026-08-20

    Can an agent determine successful provisioning completion and reconcile asynchronous failure?

    supported: fresh

    A synchronous success response returns a usable created resource or access material; otherwise asynchronous work exposes progress, terminal state, reconciliation, and a documented bound.

    The create monitor API endpoint synchronously returns the created monitor object containing its created timestamp, id, and status.

    provisioning_completion: Ready: tested 20 Aug

    Method public-http-semantic-assessment 2026-08-20

    Can provisioning be initiated within supported agent authority?

    supported: fresh

    Provisioning is machine-triggerable or follows deterministically from an allowed handoff.

    Provisioning a monitor can be initiated programmatically by making an HTTP request to the create monitor API endpoint.

    provisioning_operability: Ready: tested 20 Aug

    Method public-http-semantic-assessment 2026-08-20

    What would improve this stage

    • Deliver scoped access material through a secure documented machine-usable flow.
  5. 05

    Operate

    Limited

    Safe failure handling is documented only partially.

    Only part of the credential lifecycle is agent-operable.

    Every essential target has a stable documented agent-usable interface alternative.

    Request-time authentication is documented and usable under scoped agent authority.

    Essential operations have stable readable request, response, and effect semantics.

    Evidence and actions6 signals

    Is an agent-native protocol interface verified against the essential targets?

    missing: unknown

    Current admissible evidence does not resolve this finding.

    agent_protocol_interface: Unknown

    Can an agent manage credential expiry, rotation, revocation, compromise, and recovery?

    supported: fresh

    Only part of the credential lifecycle is agent-operable.

    Datadog documentation explicitly details key revocation and token deletion, as well as managed rotation for API keys via AWS Secrets Manager. However, full agent-operable credential recovery and lifecycle automation across all credential types are not completely established.

    credential_lifecycle: Limited: tested 20 Aug

    Method public-http-semantic-assessment 2026-08-20

    Can an agent handle applicable failure modes safely?

    supported: fresh

    Safe failure handling is documented only partially.

    Datadog documents rate limits and error responses (429 HTTP status code) along with backing off until a reset period (X-RateLimit-Period) expires. It does not fully establish idempotency, cancellation, or reconciliation semantics.

    failure_contract: Limited: tested 20 Aug

    Method public-http-semantic-assessment 2026-08-20

    Can an agent authenticate service operations with scoped authority?

    supported: fresh

    Request-time authentication is documented and usable under scoped agent authority.

    Datadog API operations require authentication via API keys (using DD-API-KEY header) and application keys (using DD-APPLICATION-KEY header). Application keys can be assigned granular authorization scopes for fine-grained access control with minimal required permissions.

    operation_authentication: Ready: tested 20 Aug

    Method public-http-semantic-assessment 2026-08-20

    Are essential operation inputs, outputs, and effects stable and decidable?

    supported: fresh

    Essential operations have stable readable request, response, and effect semantics.

    Datadog API is a REST API using standard HTTP methods, status codes, resource-oriented URLs, and JSON responses. Monitor creation and rate limits define exact input parameters, queries, and rate limit response headers.

    operation_contract: Ready: tested 20 Aug

    • monitor-api

    Method public-http-semantic-assessment 2026-08-20

    Can an agent perform every essential assessment target through a usable interface?

    supported: fresh

    Every essential target has a stable documented agent-usable interface alternative.

    Datadog provides an accessible HTTP REST API interface across multiple regional endpoints to programmatically execute monitor operations and core platform capabilities.

    target_interface_access: Ready: tested 20 Aug

    • monitor-api

    Method public-http-semantic-assessment 2026-08-20

    What would improve this stage

    • Document applicable structured errors, retry, cancellation, and reconciliation semantics.
    • Provide scoped expiry, rotation, revocation, compromise, and recovery operations.

What works

  • Evaluate: The exact service and stable evaluation or access entrypoints are publicly discoverable.

What blocks agents

  • Sign up: Machine credentials exist but require manual copying, broad authority, or weak lifecycle support.
  • Pay: The public commitment omits a material component until later in the flow.
  • Provision: Delivery needs additional human transfer or has weak scope or lifecycle semantics.
  • Operate: Safe failure handling is documented only partially.

Startup offers

Datadog on the startup-offers board

catalog record →

Improve the report

Correct it, rerun it, or improve the funnel.

Profile
arp_01kzf0m4x7n0qb42yj8v6ce9ds
Projection
sha256:2f9b5f41ec4f853595cc4aa235d4296f2adb9f475dd3dbecdc0811bd4143c123
Policy
service-use-2026-08-20-public-evidence-r9 · sha256:57bf95fd6d0fe6fe9173a68b60e8d8dc2179b357c88ff4349675a72d0e1d4139