Skip to main content
You need the user_app_keys permission to create Personal Access Tokens.

​
Identify Your Datadog Site

Datadog operates across multiple regional sites. You must select the correct site that matches your organization’s Datadog instance.

1

Determine Your Site Region

Log in to your Datadog account for your region (for example, https://app.datadoghq.com for US1, or regional hosts such as https://us3.datadoghq.com or https://ap1.datadoghq.com) and check the URL in your browser to identify your site. Your browser will show either an app.datadoghq.* host or a regional subdomain (for example, us3.datadoghq.com, us5.datadoghq.com, ap1.datadoghq.com) — when connecting your account, select the corresponding api. host from the options below.

  • US1 - api.datadoghq.com (most common)
  • US3 - api.us3.datadoghq.com
  • US5 - api.us5.datadoghq.com
  • EU - api.datadoghq.eu
  • AP1 - api.ap1.datadoghq.com
  • US1-FED - api.ddog-gov.com (government)

​
Create a Personal Access Token

A Personal Access Token authenticates on its own (no API key required) and inherits permissions from the user who creates it, restricted by the scopes you select. Datadog reserves API keys for telemetry submission, so the Submit Metrics action requires the API Key & Application Key method instead.

1

Navigate to Access Tokens

In your Datadog dashboard, navigate to Personal Settings > Access Tokens.

2

Create a New Token

Click the New Access Token button.

  • Enter a descriptive Name for your token (e.g., “StackOne Integration”).
3

Configure scopes

Enables actions: Aggregate Logs, Aggregate Spans, Create Log Index, Create Monitor, Create Service Definition, Delete Service Definition, Get Metric Metadata, Get Metric Tag Configuration, Get Monitor, Get Service Definition, Get Unified Group, Get Unified Organization, Get Unified Role, Get Unified User, List Active Metrics, List Log Indexes, List Logs, List Monitors, List Retention Filters, List Service Definitions, List Service Dependencies, List Spans, List Tags By Metric, List Unified Groups, List Unified Organizations, List Unified Roles, List Unified Users, Query Metrics, Scalar Query, Search Logs, Search Spans, Timeseries Query, Update Monitor

Click Select Scopes and enable only the scopes required for the actions you intend to use. At least one scope is required for a Personal Access Token.

4

Set Expiration

Select an expiration date for your token.

  • Minimum 24 hours, maximum 1 year.
  • Tokens cannot be refreshed or extended. When a token expires, the connection will fail with a 403 error until a new token is created.
5

Copy the Token

Save your token. Datadog displays the token secret only once at creation time. Copy it immediately and store it securely for use later.

​
Using a Service Access Token (Alternative)

For shared or long-lived integrations, you can use a Service Access Token instead. Service Access Tokens belong to a service account rather than an individual user, so they remain valid when team members leave the organization and can optionally be set to never expire.

1

Create or Select a Service Account

Navigate to Organization Settings > Service Accounts and click on an existing service account or create a new one.

2

Create a Service Access Token

In the service account details, under Access Tokens, click New Token. Enter a name, select the required scopes, and choose an expiration (including Never for non-expiring tokens). Save and copy the token immediately.

​
Linking the Account from the Hub

1

Navigate to the Hub

Use one of the three Linking Account Methods to access the Hub.
2

Fill out the fields

Fill out the following fields using details from your provider:
  • Datadog Site
  • Personal Access Token
3

Connect

  • Click Connect
  • If applicable, the provider will redirect you to a sign-in or authorization page. Complete the provider’s authorization flow.
  • Once authorization is successful, you will see a confirmation popup

If the account linking is successful, you will see the newly linked account in your Accounts page.