Datto BCDR MCP Server

Model Context Protocol (MCP) server for the Datto BCDR (Backup Portal) API. Exposes SIRIS / Alto appliances, protected agents, recovery points, screenshot verifications, off-site sync status, alerts, and activity logs to AI assistants.

Tools

Tool	Description
datto_bcdr_list_devices	List all SIRIS/Alto appliances in the partner portal
datto_bcdr_get_device	Get appliance details by serialNumber
datto_bcdr_list_assets	List protected agents on an appliance
datto_bcdr_get_asset	Get a specific protected agent
datto_bcdr_list_backups	List recovery points for an agent
datto_bcdr_list_screenshots	List screenshot verifications for an agent
datto_bcdr_get_screenshot	Fetch a screenshot PNG (returned as base64 image content)
datto_bcdr_get_offsite_status	Off-site sync status for an appliance
datto_bcdr_list_alerts	Portal alerts (date-range filtered)
datto_bcdr_list_activity	Activity log (date-range filtered)

When the user omits required filters (date range, serial number, etc.) the server uses MCP elicitation to prompt for them.

Configuration

Environment-variable mode (default)

Variable	Required	Description
DATTO_BCDR_PUBLIC_KEY	yes	Datto BCDR partner portal public key
DATTO_BCDR_PRIVATE_KEY	yes	Datto BCDR partner portal private key (secret)
DATTO_BCDR_REGION	no	us (default) or eu
MCP_TRANSPORT	no	stdio (default) or http
MCP_HTTP_PORT	no	HTTP listen port (default 8080)
AUTH_MODE	no	env (default) or gateway

Gateway mode

When deployed behind the WYRE MCP Gateway, set AUTH_MODE=gateway and the server will read credentials from per-request HTTP headers:

• X-Datto-BCDR-Public-Key
• X-Datto-BCDR-Private-Key
• X-Datto-BCDR-Region (optional)

Each request creates a fresh server instance with isolated credentials — no cross-tenant process.env pollution.

Local development

npm install
npm run build
DATTO_BCDR_PUBLIC_KEY=... DATTO_BCDR_PRIVATE_KEY=... npm start

Run as HTTP for testing:

MCP_TRANSPORT=http npm start
curl http://localhost:8080/health

Docker

docker build -t datto-bcdr-mcp .
docker run --rm -p 8080:8080 \
  -e DATTO_BCDR_PUBLIC_KEY=... \
  -e DATTO_BCDR_PRIVATE_KEY=... \
  datto-bcdr-mcp

License

Apache-2.0