[codex] add safe Datadog read tools
@sjd9021checks…codex/datadog-safe-read-tools → master13 files · +1889 −0updated 2w agoloading diff…
@sjd9021checks…codex/datadog-safe-read-tools → master13 files · +1889 −0updated 2w ago@sjd9021checks…codex/datadog-safe-read-tools → master13 files · +1889 −0updated 2w agoAdds safe, read-only Datadog actions for AI-agent usage while avoiding production-mutating operations.
New actions:
validate_credentialget_roleget_role_userslist_all_permissionssearch_permissionslist_role_permissionslist_global_variablesget_downtimelist_downtimesget_metricquery_timeseriessearch_incidentsAlso registers the actions in the Datadog toolkit and adds the missing read scopes needed by the new endpoints.
This PR intentionally does not add create, update, delete, remove, invite, or role-permission mutation actions. The new actions use the base_url supplied by the connection metadata/contract; they do not silently fall back to any Datadog site. Downtime responses now preserve the raw Datadog resource shape instead of applying custom parser helpers.
uv run nox -s chk_app -- apps/datadogrun_with_client.py for all new actions using explicit US5 metadata