wyre-technology avatar

Datto SaaS Protection

wyre-technology/datto-saas-protection-mcp

Connects Claude to the Datto SaaS Protection (Backupify) API so you can query M365 and Google Workspace backup status without leaving your chat. You get tools to list customer orgs, inspect protected domains and seats, browse backup history, queue restores, and pull activity logs or license usage reports. The restore tool is marked destructive and requires confirmation. Useful if you're an MSP or IT admin who wants to check backup posture, troubleshoot missing snapshots, or kick off a restore job through conversation instead of clicking through the Datto portal. Credentials flow in via environment variables locally or per-request headers when running behind the WYRE MCP Gateway.

GitHub stars
2
tools
6
auth
Secret needed
transport
STDIO
env vars
5
last updated
Aug 20, 2026

Tools

6 tools

Public tool metadata for what this MCP can expose to an agent.

datto_saas_list_domainsReturns the saasCustomerId and externalSubscriptionId every other tool needs.

Returns the saasCustomerId and externalSubscriptionId every other tool needs.

No parameter schema in public metadata yet.

datto_saas_list_seats

No parameter schema in public metadata yet.

datto_saas_get_seatRenders as an interactive read-only card in MCP Apps hosts, showing seat type and Datto seat state.

Renders as an interactive read-only card in MCP Apps hosts, showing seat type and Datto seat state.

No parameter schema in public metadata yet.

datto_saas_list_applications

No parameter schema in public metadata yet.

datto_saas_get_backup_stats

No parameter schema in public metadata yet.

datto_saas_bulk_seat_changeWrite, destructive operation that asks for confirmation.

Write, destructive operation that asks for confirmation.

No parameter schema in public metadata yet.

Sponsors

Configuration

DATTO_SAAS_API_KEY*secret

Datto SaaS Protection (Backupify) API key

DATTO_SAAS_REGIONdefault: us

Region: 'us' (default) or 'eu'

MCP_TRANSPORTdefault: stdio

Transport mode for the server. Set to 'stdio' for local CLI use; the image defaults to 'http' for gateway hosting.

AUTH_MODEdefault: env

Credential source: 'env' reads vars locally, 'gateway' expects header injection from the WYRE MCP Gateway.

LOG_LEVELdefault: info

Log verbosity: debug, info, warn, error

Readme

Datto SaaS Protection MCP Server

CI License: Apache 2.0

A Model Context Protocol server exposing the Datto SaaS Protection (Backupify) API to Claude and other MCP clients.

What it does

Surfaces SaaS backup posture for your Microsoft 365 and Google Workspace customers to AI assistants, using the documented Datto REST API (https://api.datto.com/v1/saas/...): list protected customers/domains, inspect seats and their protection state, review backup status per application, and (with confirmation) license, pause or unlicense seats in bulk.


View the full README on GitHub

Details

Repository
github.com/wyre-technology/datto-saas-protection-mcp
Website
github.com/wyre-technology/datto-saas-protection-mcp
Package
ghcr.io/wyre-technology/datto-saas-protection-mcp:v2.1.4
Transport
STDIO
Auth
Required
Registry
MCP registry, active

More from wyre-technology