api-management

Manage Datadog API keys and Application keys via the pup CLI.

5|2|Updated Mar 9, 2026
One-click install
npx skills add https://github.com/lauhon/pi --skill api-management-lauhon
Or copy as Structured Prompt for Agent
Please help me install this Agent Skill.
Skill: api-management
Source: https://github.com/lauhon/pi/tree/main/skills/api-management
Command: npx skills add https://github.com/lauhon/pi --skill api-management-lauhon

SYSTEM DOCUMENTATION & REQUIREMENTS

What problem does it solve? Managing Datadog API keys and Application keys manually through the web UI is slow and error-prone, especially when rotating credentials, auditing key usage, or provisioning scoped keys for CI/CD pipelines and Infrastructure as Code workflows. ## Core Features & Use Cases - Full Key Lifecycle Management: List, inspect, create, update, and delete Datadog API keys and Application keys using the pup CLI with built-in confirmation safeguards for destructive operations. - Scoped Application Keys: Create user-owned application keys with granular permission scopes (e.g., dashboards_read, monitors_read) following the principle of least privilege. - Security Auditing & Rotation: Review key inventories, last-used timestamps, and unscoped keys to support rotation policies and compliance audits. - Use Case: A platform engineer needs a read-only key for a CI/CD pipeline. The agent creates a scoped application key, displays the one-time key value, and provides the environment variable configuration ready to paste into the pipeline. ## Quick Start Ask the agent to list all API keys in your Datadog organization and summarize which ones were recently used.

Frequently Asked Questions about api-management

High-intent search queries and answers about installing and using this skill.

FAQPage Schema
How do I create a Datadog API key from the command line?

Run pup keys api-keys create --name="Your Key Name" with DD_API_KEY and DD_APP_KEY environment variables set. The new key value is displayed only once at creation, so store it securely immediately.

How to create a scoped Datadog application key?

Use pup keys my-app-keys create --name="Key Name" --scopes="dashboards_read,monitors_read" to create a user-owned application key limited to specific permissions. This follows the principle of least privilege for CI/CD and automation use cases.

What is the difference between Datadog API keys and Application keys?

API keys are organization-wide credentials used for submitting data like metrics, logs, and traces. Application keys are used for programmatic API access, can be user-specific, and support granular permission scopes.

Why does key creation fail with an insufficient permissions error?

The DD_APP_KEY used for authentication must have key management permissions such as api_keys_write or app_keys_write scope. Verify your application key's scopes and update them in the Datadog organization settings if needed.

Can I retrieve a Datadog key value after creation?

No, Datadog key values are displayed only once at creation time and cannot be retrieved later. If the value is lost, you must create a new key and delete the old one.