# Search Datadog incidents

Canonical URL: https://docs.fuse.init.inc/integrations/datadog/actions/incidents.search

Search incidents by closed state filters. Requires incident_read. The adapter generates Datadog search syntax; callers cannot submit raw queries.

Action ID: `incidents.search`
Provider: Datadog (`datadog`)
Contract version: 1

## Risk and exposure

- Risk: Read
- Idempotency: Safe — Safe to retry without coordination; repeats do not create additional side effects.
- Availability: Default
- Exposure: REST, SDK, MCP
- MCP hints: readOnly=true, destructive=false, idempotent=true, openWorld=true

## Required scopes

None.

## Input schema fields

- `states`
- `states[]`
- `page_size`
- `cursor`

## Output schema fields

- `incidents`
- `incidents[]`
- `incidents[].id`
- `incidents[].title`
- `incidents[].customer_impact_scope`
- `incidents[].customer_impact_status`
- `incidents[].severity`
- `incidents[].state`
- `incidents[].created_at`
- `incidents[].modified_at`
- `next_cursor`

Provider overview: https://docs.fuse.init.inc/integrations/datadog
Actions index: https://docs.fuse.init.inc/integrations/datadog/actions
Exact canonical JSON contract: https://docs.fuse.init.inc/api/catalog/v1/providers/datadog/actions/incidents.search
Deployment-effective discovery: https://api.fuse.init.inc/v1/tenants/%7Btenant_id%7D/providers/datadog/actions