Datadog Splunk Observability Fabric Capability

naftiko: 1.0.0-alpha2
info:
  title: Datadog Splunk Observability Fabric Capability
  description: A capability over Datadog and Splunk that exposes a unified observability fabric — metrics, logs, traces queryable through a single surface.
  tags: [Naftiko, Datadog, Splunk, Observability]
  created: '2026-05-01'
  modified: '2026-05-04'
binds:
- namespace: datadog-env
  keys: {DD_API_KEY: DD_API_KEY, DD_APP_KEY: DD_APP_KEY}
- namespace: splunk-env
  keys: {SPLUNK_HOST: SPLUNK_HOST, SPLUNK_TOKEN: SPLUNK_TOKEN}
capability:
  consumes:
  - namespace: datadog
    type: http
    baseUri: https://api.datadoghq.com
    authentication: {type: bearer, token: '{{DD_API_KEY}}'}
    resources:
    - {name: metrics-query, path: /api/v1/query, operations: [{name: query-metrics, method: GET}]}
    - {name: logs-search, path: /api/v2/logs/events/search, operations: [{name: search-logs, method: POST}]}
  - namespace: splunk
    type: http
    baseUri: https://{{SPLUNK_HOST}}
    authentication: {type: bearer, token: '{{SPLUNK_TOKEN}}'}
    resources:
    - {name: search-jobs, path: /services/search/jobs, operations: [{name: create-search-job, method: POST}]}
  exposes:
  - type: rest
    address: 0.0.0.0
    port: 8080
    namespace: datadog-splunk-observability-fabric-capability-rest
    description: REST surface for unified observability.
    resources:
    - {name: search, path: /observability/search, operations: [{method: POST, name: cross-platform-search, call: datadog.search-logs}]}
  - type: mcp
    address: 0.0.0.0
    port: 3010
    namespace: datadog-splunk-observability-fabric-capability-mcp
    description: MCP for unified observability.
    tools:
    - {name: query-datadog-metrics, hints: {readOnly: true}, call: datadog.query-metrics}
    - {name: search-datadog-logs, hints: {readOnly: true}, call: datadog.search-logs}
    - {name: search-splunk, call: splunk.create-search-job}
  - type: skill
    address: 0.0.0.0
    port: 3011
    namespace: datadog-splunk-observability-fabric-capability-skills
    description: Skill for observability fabric.
    skills:
    - name: datadog-splunk-observability-fabric-capability
      description: Datadog + Splunk observability fabric.
      location: file:///opt/naftiko/skills/datadog-splunk-observability-fabric-capability
      allowed-tools: query-datadog-metrics,search-datadog-logs,search-splunk
      tools:
      - {name: query-datadog-metrics, from: {sourceNamespace: datadog-splunk-observability-fabric-capability-mcp, action: query-datadog-metrics}}
      - {name: search-datadog-logs, from: {sourceNamespace: datadog-splunk-observability-fabric-capability-mcp, action: search-datadog-logs}}
      - {name: search-splunk, from: {sourceNamespace: datadog-splunk-observability-fabric-capability-mcp, action: search-splunk}}