Datto RMM MCP Server

A Model Context Protocol server for the Datto RMM API v2, giving AI assistants full read/write access to devices, sites, alerts, audits, jobs, variables, filters, and activity logs.

Inspired by wyre-technology/datto-rmm-mcp (8 tools), this server covers the complete v2 API surface with 46 tools, plus OAuth token caching, automatic 401 re-auth, and 429 rate-limit retry with backoff.

Tools

Account

Tool	Description
datto_get_account	Account details
datto_list_devices	All devices, filterable by hostname, type, OS, site name, or filter ID
datto_list_sites	All sites, filterable by name
datto_list_users	Authentication users
datto_list_components	Automation components (for quick jobs)
datto_list_dnet_site_mappings	Datto Networking site mappings
datto_list_account_variables / datto_create_account_variable / datto_update_account_variable / datto_delete_account_variable	Account variable CRUD

Sites

Tool	Description
datto_get_site	Site details with device counts
datto_create_site / datto_update_site	Create or update sites
datto_list_site_devices	Devices in a site
datto_list_site_network_interfaces	Device network interface info for a site
datto_get_site_settings	Site settings
datto_list_site_filters	Device filters visible for a site
datto_set_site_proxy / datto_delete_site_proxy	Site proxy management
datto_list_site_variables / datto_create_site_variable / datto_update_site_variable / datto_delete_site_variable	Site variable CRUD

Devices

Tool	Description
datto_get_device / datto_get_device_by_id / datto_get_device_by_mac	Look up devices by UID, numeric ID, or MAC
datto_run_quickjob	Run a component on a device (with input variables)
datto_move_device	Move a device to another site
datto_set_device_udf	Set user-defined fields (udf1–udf30)
datto_set_device_warranty	Set warranty expiration date

Alerts

Tool	Description
datto_list_alerts	Open/resolved alerts, scoped to account, site, or device
datto_get_alert	Single alert details
datto_resolve_alert	Resolve an alert

Audit

Tool	Description
datto_get_device_audit	Full device audit (hardware, OS, network, patches)
datto_get_device_software	Installed software list
datto_get_esxi_audit / datto_get_printer_audit	ESXi host / printer audits
datto_get_audit_by_mac	Audit lookup by MAC address

Jobs

Tool	Description
datto_get_job	Job status and details
datto_get_job_components	Job components
datto_get_job_results	Per-device job results
datto_get_job_stdout / datto_get_job_stderr	Job output streams

Other

Tool	Description
datto_list_filters	Default or custom device filters
datto_list_activity_logs	Activity log search (date range, entities, free-text query)
datto_get_system_info	Platform status, pagination config, or current rate-limit usage

Setup

1. Get API credentials

In Datto RMM: Setup > Users > [your user] > API keys. Note your platform from your Datto RMM URL (e.g. merlot.centrastage.net → merlot).

2. Configure

Environment variables:

Variable	Required	Description
DATTO_API_KEY	yes	API access key
DATTO_API_SECRET	yes	API secret key
DATTO_PLATFORM	yes*	One of pinotage, merlot, concord, vidal, zinfandel, syrah
DATTO_API_URL	no	Full base URL; overrides DATTO_PLATFORM
MCP_TRANSPORT	no	stdio (default) or http
PORT	no	HTTP port when MCP_TRANSPORT=http (default 3000)

3. Run

npm install
npm run build

Claude Desktop / Claude Code (claude_desktop_config.json or .mcp.json):

{
  "mcpServers": {
    "datto-rmm": {
      "command": "node",
      "args": ["/path/to/dattormm-mcp/dist/index.js"],
      "env": {
        "DATTO_API_KEY": "your-key",
        "DATTO_API_SECRET": "your-secret",
        "DATTO_PLATFORM": "merlot"
      }
    }
  }
}

Docker (Streamable HTTP):

docker build -t dattormm-mcp .
docker run -p 3000:3000 \
  -e DATTO_API_KEY=your-key \
  -e DATTO_API_SECRET=your-secret \
  -e DATTO_PLATFORM=merlot \
  -e MCP_TRANSPORT=http \
  dattormm-mcp

The HTTP transport runs stateless at POST / with a GET /health endpoint.

Notes

• Rate limits: Datto allows 600 reads and 100 writes per 60 seconds. The client retries once on 429 honoring Retry-After; check live usage with datto_get_system_info (request_rate).
• Pagination: list endpoints return at most 250 records per page — responses include pageDetails with next-page info; pass page/max to the tools.
• Auth: OAuth tokens (100 h lifetime) are cached in-memory and transparently refreshed on expiry or 401.
• The POST /v2/user/resetApiKeys endpoint is intentionally not exposed — it would invalidate the credentials the server is running with.
• Alert mute/unmute endpoints are omitted: Datto removed alert muting in RMM 8.9.0.

License

MIT