Back to Browse

Datto Saas Protection MCP Server

Developer ToolsModerate6.2MCP RegistryLocal
Free

Server data from the Official MCP Registry

MCP server for Datto SaaS Protection — M365/GWS backups, restores, seats.

About

MCP server for Datto SaaS Protection — M365/GWS backups, restores, seats.

Security Report

6.2
Moderate6.2Moderate Risk

The Datto SaaS Protection MCP server is well-structured with proper authentication via API keys and reasonable permissions for its purpose. The codebase is built on legitimate dependencies and demonstrates good separation of concerns. However, there are some code quality concerns around error handling and a large embedded UI asset that warrants attention. Supply chain analysis found 1 known vulnerability in dependencies (0 critical, 1 high severity).

3 files analyzed · 4 issues found

Security scores are indicators to help you make informed decisions, not guarantees. Always review permissions before connecting any MCP server.

Permissions Required

This plugin requests these system permissions. Most are normal for its category.

env_vars

Check that this permission is expected for this type of plugin.

HTTP Network Access

Connects to external APIs or services over the internet.

What You'll Need

Set these up before or after installing:

Datto SaaS Protection (Backupify) API keyRequired

Environment variable: DATTO_SAAS_API_KEY

Region: 'us' (default) or 'eu'Optional

Environment variable: DATTO_SAAS_REGION

Transport mode for the server. Set to 'stdio' for local CLI use; the image defaults to 'http' for gateway hosting.Optional

Environment variable: MCP_TRANSPORT

Credential source: 'env' reads vars locally, 'gateway' expects header injection from the WYRE MCP Gateway.Optional

Environment variable: AUTH_MODE

Log verbosity: debug, info, warn, errorOptional

Environment variable: LOG_LEVEL

How to Install

Add this to your MCP configuration file:

{
  "mcpServers": {
    "io-github-wyre-technology-datto-saas-protection-mcp": {
      "env": {
        "AUTH_MODE": "your-auth-mode-here",
        "LOG_LEVEL": "your-log-level-here",
        "MCP_TRANSPORT": "your-mcp-transport-here",
        "DATTO_SAAS_REGION": "your-datto-saas-region-here",
        "DATTO_SAAS_API_KEY": "your-datto-saas-api-key-here"
      },
      "args": [
        "-y",
        "@wyre-technology/datto-saas-protection-mcp"
      ],
      "command": "npx"
    }
  }
}

Documentation

View on GitHub

From the project's GitHub README.

Datto SaaS Protection MCP Server

CI License: Apache 2.0

A Model Context Protocol server exposing the Datto SaaS Protection (Backupify) API to Claude and other MCP clients.

What it does

Surface SaaS backup posture for your M365 and Google Workspace tenants directly to AI assistants — list customer organizations, inspect protected domains and seats, browse backup history, queue restores, and audit activity logs and license usage.

  • Interactive Seat Card (MCP Apps): datto_saas_get_seat renders as an interactive backup-status card in MCP Apps hosts (Claude Desktop/web) — read-only, showing seat type, Active/Archived status, and last backup; neutral by default, brandable via window.__BRAND__ injection or MCP_BRAND_* env vars; plain-JSON behavior is unchanged in other hosts

Tools

ToolPurpose
datto_saas_list_clientsList all customer organizations
datto_saas_list_domainsList protected domains under a client
datto_saas_list_seatsList seats in a domain (toggle archived)
datto_saas_get_seatFetch a single seat detail
datto_saas_list_backupsList backup runs for a seat
datto_saas_queue_restoreQueue a restore (DESTRUCTIVE — requires confirmation)
datto_saas_get_restore_statusCheck restore progress
datto_saas_list_activityOrg activity log (date-range elicitation)
datto_saas_get_license_usageSeat counts vs purchased

Credentials

Local (env mode)

export DATTO_SAAS_PUBLIC_KEY="..."
export DATTO_SAAS_SECRET_KEY="..."
export DATTO_SAAS_REGION="us"   # or "eu"

Hosted (gateway mode)

The WYRE MCP Gateway injects credentials per request via headers:

  • X-Datto-SaaS-Public-Key (required, secret)
  • X-Datto-SaaS-Secret-Key (required, secret)
  • X-Datto-SaaS-Region (optional, default us)

Run

npm install
npm run build
npm start                       # stdio
MCP_TRANSPORT=http npm start    # HTTP on :8080

License

Apache 2.0 — see LICENSE.

Reviews

No reviews yet

Be the first to review this server!