Connect SIEM Alert Narrator

What you'll need to connect

This agent will ask you for the following. You enter them when you connect — they're encrypted and never shared with the creator.

• Datadog API Key · optionalOptional. Datadog API key for READ-ONLY security signals access (DD-API-KEY). Leave blank for offline/mock runs.Get this from datadoghq.com's account or API settings.Paste the value as a single line.Only sent to: api.datadoghq.com
• Datadog Application Key · optionalOptional. Datadog application key paired with the API key (DD-APPLICATION-KEY). Leave blank for offline/mock runs.Get this from datadoghq.com's account or API settings.Paste the value as a single line.Only sent to: api.datadoghq.com
• Generic SIEM API Token · optionalOptional. Alternative to Datadog keys: a bearer token for a generic read-only SIEM API. Leave blank for offline/mock runs.Get this from datadoghq.com's account or API settings.Paste the value as a single line.Only sent to: api.datadoghq.com
• Anthropic API Key · optionalOptional. Enables the LLM-written analyst narrative via Anthropic. Without a key (and no host sampling) the agent falls back to a deterministic template.Create a key on the Anthropic Console API keys page (console.anthropic.com → API keys).Paste the value as a single line.Only sent to: api.anthropic.com
• OpenAI API Key · optionalOptional. Enables the LLM-written analyst narrative via OpenAI instead of Anthropic.Create a secret key on the OpenAI API keys page (platform.openai.com → API keys).Paste the value as a single line.Only sent to: api.openai.com