Connectors · MSP & PSA

Datto BCDR MCP server for AI agents.

actionlake is an MCP gateway: one remote MCP server that connects Claude and other MCP clients to Datto BCDR and the rest of your systems. It gives your agent 21 Datto BCDR actions (19 reads and 2 writes) and holds the Datto BCDR credential itself, so the agent never does. It paces Datto BCDR's limits and records every call.

Connect Datto BCDR free See pricing

100,000 free calls a month. No card, no email, no password: press Start a free sandbox on the next screen and keep the key it shows you.

claude mcp add --transport http actionlake https://connect.actionlake.com/mcp

21actionsin one signed file
19readlook, never change
2writecreate and update
0wait for a yesdestructive, confirmed first

Set up

Connect Datto BCDR in three steps.

01
Add actionlake to Claude.
Run the command once in Claude Code; its consent page can create a free sandbox: 100,000 calls a month, no card. In the Claude app, add a custom connector with the URL below and paste your key on the consent page. Creating a new sandbox from the Claude app is not yet tested by us.
https://connect.actionlake.com/mcp
02
Connect Datto BCDR.
Username and secret. No consent screen: your agent can connect it for you, but the key then passes through your chat. To keep it out of the model's context, paste it in the console instead. actionlake stores what you paste write-only, sealed under your tenant's key.
- public_keyDatto REST API public key (Datto partner portal > Admin > Integrations > API keys)
- secret_keyDatto REST API secret key, shown beside the public key
```
account { op: "connections.requirements", service: "datto_bcdr" }
# free: exactly what to paste, and what is found for you
```

Make the first call. Check before a write.

Ask in plain words; Claude picks the action. Before anything changes, check validates the call and prices it, for free.

do    { action: "datto_bcdr.devices.list" }# list bcdr devices · read · 1 upstream callcheck { action: "datto_bcdr.saas_seats.bulk_change", input: { … } }# free: inputs, permissions, cost and confirmations, nothing sent

Datto BCDR at a glance

Sign-in: Username and secret. No consent screen: your agent can connect it for you, but the key then passes through your chat. To keep it out of the model's context, paste it in the console instead.
You provide: public_keysecret_key
Limits we pace to: 100 calls a minute, per connection
API covered: Datto REST API v1api.datto.com
Built from: Datto BCDR's documentation, read 23 October 2026portal.dattobackup.com OpenAPI spec (GitHub)GitHub
Service file: Version 1.0.0, signed (Ed25519)
Cached reads: 19 of 19 reads, for up to 5 minutes; a write clears what it affects
Shared entities: 3, so ask can line Datto BCDR up with your other systems
Data: Processed and stored in Sydney, Australia. No US region yet

Capabilities

What an AI agent can do in Datto BCDR.

21 actions in 17 areas. Every one carries its effect, so a key can allow the reads and hold the rest.

19readlook, never change
2writecreate and update
0destructivewait for a confirmation

Device assets
2
2 read · 0 write · 0 destructive
List a device's assets (agents and shares) · Get a device asset by volume
Devices
2
2 read · 0 write · 0 destructive
List BCDR devices · Get a BCDR device
DTC client assets
2
2 read · 0 write · 0 destructive
Get a Direct-to-Cloud asset · List a client's Direct-to-Cloud assets
Saas seats
2
1 read · 1 write · 0 destructive
List SaaS Protection seats for a customer · Bulk license, unlicense or pause SaaS Protection seats
Activity log
1
1 read · 0 write · 0 destructive
List activity log entries
BCDR clients
1
1 read · 0 write · 0 destructive
List clients and their endpoint backup agents
Device agents
1
1 read · 0 write · 0 destructive
List a device's agents
Device alerts
1
1 read · 0 write · 0 destructive
List a device's alerts

9 more areas · 9 actions

Device shares 1
Device VM restores 1
DTC agents 1
DTC assets 1
DTC RMM templates 1
DTC storage pools 1
Saas applications 1
Saas backup stats 1
Saas domains 1

Top actions

The Datto BCDR API, shaped for agents.

The ids your agent types, what each does, and the one name it shares with other systems. 6 of Datto BCDR's 6 action names are shared with at least one other connector, so an agent learns them once.

Action	What it does	Effect	Same name in
`datto_bcdr.devices.list`List BCDR devices	Returns a list of your devices.	read	`asset.asset.list`42 connectors
`datto_bcdr.dtc_assets.list`List Direct-to-Cloud assets	Get details for direct-to-cloud assets.	read	`device.endpoint.list`65 connectors
`datto_bcdr.devices.get`Get a BCDR device	Get device information by serial number.	read	`asset.asset.get`40 connectors
`datto_bcdr.dtc_client_assets.get`Get a Direct-to-Cloud asset	Get further details for a specific direct-to-cloud asset.	read	`device.endpoint.get`57 connectors
`datto_bcdr.device_alerts.list`List a device's alerts	Get alerts for a given device.	read	`monitoring.alert.list`51 connectors
`datto_bcdr.activity_log.list`List activity log entries	Gets a filtered list of activity logs ordered by date.	read	`platform.activity_entry.list`43 connectors
`datto_bcdr.saas_domains.list`List SaaS Protection domains (customers)	Get SaaS Protection data about what domains are being protected.	read	this connector
`datto_bcdr.saas_seats.list`List SaaS Protection seats for a customer	Get SaaS Protection seats data for the given customer.	read	this connector
`datto_bcdr.bcdr_clients.list`List clients and their endpoint backup agents	Returns a list of your clients (organizations) and their respective agents.	read	this connector
`datto_bcdr.device_agents.list`List a device's agents	Get agents for a given device.	read	this connector
`datto_bcdr.saas_seats.bulk_change`Bulk license, unlicense or pause SaaS Protection seats	Bulk seats assignment.	write	this connector
`datto_bcdr.dtc_agents.update_bandwidth`Update a Direct-to-Cloud agent's bandwidth settings	Update the bandwidth settings for a single direct-to-cloud agent.	write	this connector

Try it

Prompts to paste into Claude.

Each one names the Datto BCDR actions it will call, so you know what it reads and what it changes before you send it.

Readread
Which Datto BCDR devices have not checked in for a week?
callsdatto_bcdr.dtc_assets.list
Writewrite
Bulk license, unlicense or pause SaaS Protection seats in Datto BCDR. Show me exactly what you will send before you save it.
callsdatto_bcdr.saas_seats.bulk_change
Across systemsread
Which Datto BCDR companies have invoices in NetSuite, and how many each?
callsdatto_bcdr.saas_domains.listnetsuite.views.invoices

Across your systems

Datto BCDR, joined to the rest of your business.

One ask fetches from Datto BCDR and another system, joins the rows on the same customer on our side, and hands your agent the answer, not every row.

Which Datto BCDR companies have invoices in NetSuite, and how many each?
datto_bcdr.saas_domains.list + netsuite.views.invoices, on crm.company · NetSuite
Which Datto BCDR companies have tickets in HubSpot CRM, and how many each?
datto_bcdr.saas_domains.list + hubspot_crm.tickets.list, on crm.company · HubSpot CRM

Also mapped by other connectorscrm.company 227device.endpoint 69asset.asset 40

ask

ask {  intent: "which Datto BCDR companies have invoices in NetSuite, and how many each",  steps: [    { action: "datto_bcdr.saas_domains.list", as: "co", input: {}, limit: 100, max_pages: 5 },    { action: "netsuite.views.invoices", as: "inv", input: {}, limit: 100, max_pages: 5 },    { join: {        left: "co",        right: "inv",        on: "crm.company",        group_by: "co.name",        select: ["co.name", "count(inv.id) as invoices"]    } }  ]}

Example. Run it through check first: it validates the steps and prices them, and it is free.

Governance for Datto BCDR

Every write can wait for a yes.

None of Datto BCDR's actions is destructive. A key can still be held to reads, capped, and set so a person confirms every write.

A destructive action runs only with confirm: true. Under the human policy the agent cannot confirm for itself: the run stops until a named person approves, in the console or from a signed link in an email. The cap on a key is refused before the call is sent, never after.

a key for this connector

account {  op: "keys.create", name: "datto-bcdr-agent",  allowed_actions: ["datto_bcdr.*"], cap_calls: 2000,  confirm_policy: "human_for_writes"}

Illustrative. Scoped to Datto BCDR only, capped at 2,000 upstream calls, every write confirmed.

Cost

What Datto BCDR costs on actionlake.

Every Datto BCDR action is one upstream call, the only thing actionlake bills. Searching, check, cost, account and any call Datto BCDR refused with 401, 403, 429 or a 5xx are free. Paid plans start at US$49 a month for 250,000 calls, with overage from US$0.30 down to US$0.18 per 1,000.

1upstream call per actionall 21 Datto BCDR actions
5actions pageeach page of a long list is one call
19reads can be cacheda cache hit costs nothing
100,000calls a month, freepaid plans from US$49 a month for 250,000

See pricing

Action index

Every Datto BCDR action.

21 actions by area: the id your agent calls, what it does, and its effect.

Device assets2

datto_bcdr.device_assets.getGet a device asset by volumeread
datto_bcdr.device_assets.listList a device's assets (agents and shares)read

Devices2

datto_bcdr.devices.getGet a BCDR deviceread
datto_bcdr.devices.listList BCDR devicesread

DTC client assets2

datto_bcdr.dtc_client_assets.getGet a Direct-to-Cloud assetread
datto_bcdr.dtc_client_assets.listList a client's Direct-to-Cloud assetsread

Saas seats2

datto_bcdr.saas_seats.bulk_changeBulk license, unlicense or pause SaaS Protection seatswrite
datto_bcdr.saas_seats.listList SaaS Protection seats for a customerread

Activity log1

datto_bcdr.activity_log.listList activity log entriesread

BCDR clients1

datto_bcdr.bcdr_clients.listList clients and their endpoint backup agentsread

Device agents1

datto_bcdr.device_agents.listList a device's agentsread

Device alerts1

datto_bcdr.device_alerts.listList a device's alertsread

Device shares1

datto_bcdr.device_shares.listList a device's sharesread

Device VM restores1

datto_bcdr.device_vm_restores.listList a device's VM restoresread

DTC agents1

datto_bcdr.dtc_agents.update_bandwidthUpdate a Direct-to-Cloud agent's bandwidth settingswrite

DTC assets1

datto_bcdr.dtc_assets.listList Direct-to-Cloud assetsread

DTC RMM templates1

datto_bcdr.dtc_rmm_templates.listList Direct-to-Cloud RMM deployment templatesread

DTC storage pools1

datto_bcdr.dtc_storage_pools.listList Direct-to-Cloud storage pool usageread

Saas applications1

datto_bcdr.saas_applications.listList SaaS Protection backup data per applicationread

Saas backup stats1

datto_bcdr.saas_backup_stats.getGet detailed SaaS Protection backup statistics for a customerread

Saas domains1

datto_bcdr.saas_domains.listList SaaS Protection domains (customers)read

Questions

The Datto BCDR MCP server, answered.

Is there a Datto BCDR MCP server for Claude?

Yes. actionlake is an MCP gateway: a remote MCP server that gives Claude, or another MCP client, 21 Datto BCDR actions across device assets, devices, DTC client assets and saas seats, through the same eight tools it uses for every other connector. actionlake is independent; it is not made or endorsed by Datto BCDR.

What do I need to connect Datto BCDR?

Datto REST API public key (Datto partner portal > Admin > Integrations > API keys) and Datto REST API secret key, shown beside the public key. The free call account { op: "connections.requirements", service: "datto_bcdr" } lists exactly what to paste.

Can an AI agent change things in Datto BCDR?

Only if its key allows it. 2 Datto BCDR actions write, and none is destructive. A key can be limited to reads, capped, and set so a person confirms every write.

Will an AI agent use up my Datto BCDR API limit?

actionlake paces every call to the limits in the Datto BCDR service file: 100 calls a minute per connection. Repeated reads are answered from cache (19 Datto BCDR actions can be), which never reaches Datto BCDR.

What does a Datto BCDR action cost?

One upstream call, the only unit actionlake bills. A list that pages bills one call per page (5 Datto BCDR actions page). Cache hits, searches, dry runs and calls Datto BCDR refused with 401, 403, 429 or a 5xx are free. The Free plan includes 100,000 calls a month with no card. Paid plans start at US$49 a month for 250,000 calls, with overage from US$0.30 down to US$0.18 per 1,000.

Which Datto BCDR API does it cover?

The Datto REST API v1 at api.datto.com. It is built from Datto BCDR's documentation as read on 23 October 2026. 21 actions in 17 areas, each one in the signed service file (version 1.0.0).

Can I combine Datto BCDR with my other systems?

Yes. ask joins Datto BCDR to NetSuite or HubSpot CRM on the same customer and returns the answer rather than every row. Datto BCDR maps crm.company, which 227 other connectors also map.

Does actionlake keep my Datto BCDR data, and where?

actionlake processes and stores data in Sydney, Australia; there is no US region yet. Reads may be cached for up to 5 minutes, and a write clears the reads it affects. Each run's request and response is kept, sealed, for your plan's trace window: 1 day on Free, 3 days on Starter, 7 days on Pro, 14 days on Team, 30 days on Business and 30 days on Enterprise. Your Datto BCDR credential is sealed under your tenant's key, never logged and never returned. Your traffic is not used to train models.

Which AI clients can use it?

Claude Code, tested by us end to end, and the Claude app as a custom connector, tested by us with an existing key. Other MCP clients that support remote servers over Streamable HTTP (MCP revisions 2025-06-18 and 2025-11-25) and OAuth dynamic client registration, or a bearer header, should connect the same way; we have not tested them. Or plain REST, under the same action names.

Give your agent Datto BCDR today.

Connect Datto BCDR free See pricing

Start free - 100,000 calls/month, no card. No signup. Hard caps on every key. Cached answers are free.

Datto BCDR MCP server for AI agents.

Connect Datto BCDR in three steps.

Add actionlake to Claude.

Connect Datto BCDR.

Make the first call. Check before a write.

What an AI agent can do in Datto BCDR.

Device assets

Devices

DTC client assets

Saas seats

Activity log

BCDR clients

Device agents

Device alerts