Skip to main content
Glama
WYRE-AI

datto-saas-protection-mcp

by WYRE-AI
OverviewSchemaSourceRelated ServersDiscussionsAdmin
TypeScript
Remote

Datto SaaS Protection MCP Server

CI License: Apache 2.0

A Model Context Protocol server exposing the Datto SaaS Protection (Backupify) API to Claude and other MCP clients.

What it does

Surface SaaS backup posture for your M365 and Google Workspace tenants directly to AI assistants — list customer organizations, inspect protected domains and seats, browse backup history, queue restores, and audit activity logs and license usage.

  • Interactive Seat Card (MCP Apps): datto_saas_get_seat renders as an interactive backup-status card in MCP Apps hosts (Claude Desktop/web) — read-only, showing seat type, Active/Archived status, and last backup; neutral by default, brandable via window.__BRAND__ injection or MCP_BRAND_* env vars; plain-JSON behavior is unchanged in other hosts

Related MCP server: action1-mcp

Tools

Tool

Purpose

datto_saas_list_clients

List all customer organizations

datto_saas_list_domains

List protected domains under a client

datto_saas_list_seats

List seats in a domain (toggle archived)

datto_saas_get_seat

Fetch a single seat detail

datto_saas_list_backups

List backup runs for a seat

datto_saas_queue_restore

Queue a restore (DESTRUCTIVE — requires confirmation)

datto_saas_get_restore_status

Check restore progress

datto_saas_list_activity

Org activity log (date-range elicitation)

datto_saas_get_license_usage

Seat counts vs purchased

Credentials

Local (env mode)

export DATTO_SAAS_PUBLIC_KEY="..."
export DATTO_SAAS_SECRET_KEY="..."
export DATTO_SAAS_REGION="us"   # or "eu"

Hosted (gateway mode)

The WYRE MCP Gateway injects credentials per request via headers:

  • X-Datto-SaaS-Public-Key (required, secret)

  • X-Datto-SaaS-Secret-Key (required, secret)

  • X-Datto-SaaS-Region (optional, default us)

Run

npm install
npm run build
npm start                       # stdio
MCP_TRANSPORT=http npm start    # HTTP on :8080

License

Apache 2.0 — see LICENSE.

This server cannot be deployed

One endpoint for every MCP toolRayrun runs every MCP server behind one URL and holds the credentials. Each call is decided per client, tool, and argument, then recorded.ray.runAd

Maintenance

ActivityActive
ResponsivenessUnresponsive

Resources

Related MCP Connectors

Related MCP Servers

  • datto-bcdr-mcp

    WYRE-AI
    A
    license
    Not graded
    quality
    A
    maintenance
    An MCP server for Datto BCDR (Business Continuity and Disaster Recovery), enabling management of backup jobs, restore points, and disaster recovery operations through Datto's API.
    Apache 2.0

  • action1-mcp

    WYRE-AI
    A
    license
    A
    quality
    A
    maintenance
    An MCP server for Action1, a cloud-native RMM platform, enabling remote monitoring, patch management, and endpoint management through Action1's API.
    6
    2
    Apache 2.0

  • cipp-mcp

    WYRE-AI
    F
    license
    B
    quality
    A
    maintenance
    An MCP server for CIPP (Community IT Professionals Platform), enabling MSPs to manage Microsoft 365 tenants, users, policies, and security settings through CIPP's API.
    45
    12
    -

  • blackpoint-mcp

    WYRE-AI
    A
    license
    Not graded
    quality
    A
    maintenance
    An MCP server for Blackpoint Cyber MDR platform, enabling management of security monitoring, threat detection, and incident response through Blackpoint's API.
    Apache 2.0