
Datto SaaS Protection
Connects Claude to the Datto SaaS Protection (Backupify) API so you can query M365 and Google Workspace backup status without leaving your chat. You get tools to list customer orgs, inspect protected domains and seats, browse backup history, queue restores, and pull activity logs or license usage reports. The restore tool is marked destructive and requires confirmation. Useful if you're an MSP or IT admin who wants to check backup posture, troubleshoot missing snapshots, or kick off a restore job through conversation instead of clicking through the Datto portal. Credentials flow in via environment variables locally or per-request headers when running behind the WYRE MCP Gateway.
- GitHub stars
- 2
- tools
- 6
- auth
- Secret needed
- transport
- STDIO
- env vars
- 5
- last updated
- Aug 20, 2026
Tools
6 toolsPublic tool metadata for what this MCP can expose to an agent.
datto_saas_list_domainsReturns the saasCustomerId and externalSubscriptionId every other tool needs.
Returns the saasCustomerId and externalSubscriptionId every other tool needs.
No parameter schema in public metadata yet.
datto_saas_list_seats
No parameter schema in public metadata yet.
datto_saas_get_seatRenders as an interactive read-only card in MCP Apps hosts, showing seat type and Datto seat state.
Renders as an interactive read-only card in MCP Apps hosts, showing seat type and Datto seat state.
No parameter schema in public metadata yet.
datto_saas_list_applications
No parameter schema in public metadata yet.
datto_saas_get_backup_stats
No parameter schema in public metadata yet.
datto_saas_bulk_seat_changeWrite, destructive operation that asks for confirmation.
Write, destructive operation that asks for confirmation.
No parameter schema in public metadata yet.
Sponsors
Configuration
DATTO_SAAS_API_KEY*secretDatto SaaS Protection (Backupify) API key
DATTO_SAAS_REGIONdefault: usRegion: 'us' (default) or 'eu'
MCP_TRANSPORTdefault: stdioTransport mode for the server. Set to 'stdio' for local CLI use; the image defaults to 'http' for gateway hosting.
AUTH_MODEdefault: envCredential source: 'env' reads vars locally, 'gateway' expects header injection from the WYRE MCP Gateway.
LOG_LEVELdefault: infoLog verbosity: debug, info, warn, error
Readme
Datto SaaS Protection MCP Server
A Model Context Protocol server exposing the Datto SaaS Protection (Backupify) API to Claude and other MCP clients.
What it does
Surfaces SaaS backup posture for your Microsoft 365 and Google Workspace
customers to AI assistants, using the documented Datto REST API
(https://api.datto.com/v1/saas/...): list protected customers/domains,
inspect seats and their protection state, review backup status per
application, and (with confirmation) license, pause or unlicense seats in bulk.
Details
- Repository
- github.com/wyre-technology/datto-saas-protection-mcp
- Website
- github.com/wyre-technology/datto-saas-protection-mcp
- Package
ghcr.io/wyre-technology/datto-saas-protection-mcp:v2.1.4- Transport
- STDIO
- Auth
- Required
- Registry
- MCP registry, active