oci ghcr.io/wyre-ai/datto-saas-protection-mcp:v2.1.5stdioApache-2.0updated 8d ago
A Model Context Protocol server exposing the Datto SaaS Protection (Backupify) API to Claude and other MCP clients.
What can you do with Datto SaaS Protection?
Datto SaaS Protection MCP Server
A Model Context Protocol server exposing the Datto SaaS Protection (Backupify) API to Claude and other MCP clients.
What it does
Surface SaaS backup posture for your M365 and Google Workspace tenants directly to AI assistants — list customer organizations, inspect protected domains and seats, browse backup history, queue restores, and audit activity logs and license usage.
- Interactive Seat Card (MCP Apps):
datto_saas_get_seatrenders as an interactive backup-status card in MCP Apps hosts (Claude Desktop/web) — read-only, showing seat type, Active/Archived status, and last backup; neutral by default, brandable viawindow.__BRAND__injection orMCP_BRAND_*env vars; plain-JSON behavior is unchanged in other hosts
Tools
| Tool | Purpose |
|---|---|
datto_saas_list_clients |
List all customer organizations |
datto_saas_list_domains |
List protected domains under a client |
datto_saas_list_seats |
List seats in a domain (toggle archived) |
datto_saas_get_seat |
Fetch a single seat detail |
datto_saas_list_backups |
List backup runs for a seat |
datto_saas_queue_restore |
Queue a restore (DESTRUCTIVE — requires confirmation) |
datto_saas_get_restore_status |
Check restore progress |
datto_saas_list_activity |
Org activity log (date-range elicitation) |
datto_saas_get_license_usage |
Seat counts vs purchased |
Credentials
Local (env mode)
export DATTO_SAAS_PUBLIC_KEY="..."
export DATTO_SAAS_SECRET_KEY="..."
export DATTO_SAAS_REGION="us" # or "eu"
Hosted (gateway mode)
The WYRE MCP Gateway injects credentials per request via headers:
X-Datto-SaaS-Public-Key(required, secret)X-Datto-SaaS-Secret-Key(required, secret)X-Datto-SaaS-Region(optional, defaultus)
Run
npm install
npm run build
npm start # stdio
MCP_TRANSPORT=http npm start # HTTP on :8080
License
Apache 2.0 — see LICENSE.
Install
Add Datto SaaS Protection to your client. Pick the one you use.
claude mcp add ghcr-io-wyre-ai-datto-saas-protection-mc -- docker run -i --rm ghcr.io/wyre-ai/datto-saas-protection-mcp:v2.1.5codex mcp add ghcr-io-wyre-ai-datto-saas-protection-mc -- docker run -i --rm ghcr.io/wyre-ai/datto-saas-protection-mcp:v2.1.5amp mcp add ghcr-io-wyre-ai-datto-saas-protection-mc -- docker run -i --rm ghcr.io/wyre-ai/datto-saas-protection-mcp:v2.1.5{
"mcpServers": {
"ghcr-io-wyre-ai-datto-saas-protection-mc": {
"command": "docker",
"args": [
"run",
"-i",
"--rm",
"ghcr.io/wyre-ai/datto-saas-protection-mcp:v2.1.5"
]
}
}
}Add to `claude_desktop_config.json`, then restart Claude Desktop.
{
"mcpServers": {
"ghcr-io-wyre-ai-datto-saas-protection-mc": {
"command": "docker",
"args": [
"run",
"-i",
"--rm",
"ghcr.io/wyre-ai/datto-saas-protection-mcp:v2.1.5"
]
}
}
}Add to `~/.cursor/mcp.json`, or `.cursor/mcp.json` for a single project.
code --add-mcp '{"name":"ghcr-io-wyre-ai-datto-saas-protection-mc","command":"docker","args":["run","-i","--rm","ghcr.io/wyre-ai/datto-saas-protection-mcp:v2.1.5"]}'Or add the block manually to `.vscode/mcp.json` under `servers`.
{
"mcpServers": {
"ghcr-io-wyre-ai-datto-saas-protection-mc": {
"command": "docker",
"args": [
"run",
"-i",
"--rm",
"ghcr.io/wyre-ai/datto-saas-protection-mcp:v2.1.5"
]
}
}
}Add to `~/.codeium/windsurf/mcp_config.json`.
{
"mcpServers": {
"ghcr-io-wyre-ai-datto-saas-protection-mc": {
"command": "docker",
"args": [
"run",
"-i",
"--rm",
"ghcr.io/wyre-ai/datto-saas-protection-mcp:v2.1.5"
]
}
}
}Add to `cline_mcp_settings.json` via the MCP Servers panel.
{
"mcpServers": {
"ghcr-io-wyre-ai-datto-saas-protection-mc": {
"command": "docker",
"args": [
"run",
"-i",
"--rm",
"ghcr.io/wyre-ai/datto-saas-protection-mcp:v2.1.5"
]
}
}
}Add to `~/.gemini/settings.json`.
{
"mcpServers": {
"ghcr-io-wyre-ai-datto-saas-protection-mc": {
"type": "local",
"command": "docker",
"args": [
"run",
"-i",
"--rm",
"ghcr.io/wyre-ai/datto-saas-protection-mcp:v2.1.5"
],
"tools": [
"*"
]
}
}
}Add to `~/.copilot/mcp-config.json`, or run `/mcp add` inside the CLI.
{
"context_servers": {
"ghcr-io-wyre-ai-datto-saas-protection-mc": {
"command": {
"path": "docker",
"args": [
"run",
"-i",
"--rm",
"ghcr.io/wyre-ai/datto-saas-protection-mcp:v2.1.5"
]
}
}
}
}Add to your Zed `settings.json`.
docker run -i --rm ghcr.io/wyre-ai/datto-saas-protection-mcp:v2.1.5Run `goose configure`, choose **Add Extension → Command-line Extension**, and paste this command.
9 tools
Datto SaaS Protection exposes 9 tools to a connected agent.
- datto_saas_list_clients
- List all customer organizations
- datto_saas_list_domains
- List protected domains under a client
- datto_saas_list_seats
- List seats in a domain (toggle archived)
- datto_saas_get_seat
- Fetch a single seat detail
- datto_saas_list_backups
- List backup runs for a seat
- datto_saas_queue_restore
- Queue a restore (DESTRUCTIVE — requires confirmation)
- datto_saas_get_restore_status
- Check restore progress
- datto_saas_list_activity
- Org activity log (date-range elicitation)
- datto_saas_get_license_usage
- Seat counts vs purchased
Score
71 / 100
Good
- Documentation18/25
- Maintenance19/25
- Trust16/20
- Capability6/15
- Install experience12/15
- Documents what it does and how to connect
- Has a resolvable package or endpoint
- Exposes at least one tool, prompt or resource
- README has substantive content
- Includes a code example
- Documents its configuration
- Mentions credentials or security posture
- Last commit 1 days ago
- Has a release history
- Repository is not archived
- Licensed Apache-2.0
- Namespace verified in the official MCP registry
- Claimed by its owner
- Published under an organisation
- 9 tool(s) documented
- Provides prompt templates
- Provides resources
- 12 documented install method(s)
- Published to a package registry
- Offers a hosted endpoint — no local install
Version history
| Versions | Published |
|---|---|
| 2.1.5Latest | Aug 26, 2026 |