MSP360 MCP Server

MCP server for MSP360's Managed Backup Service API (formerly CloudBerry Lab) - companies, managed computers, backup plans, monitoring, and licenses, for AI assistants and the WYRE Conduit gateway.

Authentication

Provide the Managed Backup Service provider-portal UserName/Password pair. This server exchanges it for a short-lived bearer token via POST /api/Provider/Login and caches it, re-authenticating automatically whenever the vendor rejects the cached token (HTTP 401) - callers only ever need to supply the long-lived username/password.

Configuration

Env var	Description
`MSP360_USERNAME`	MSP360 provider-portal username.
`MSP360_PASSWORD`	MSP360 provider-portal password.
`MCP_TRANSPORT`	`stdio` (default) or `http`.
`AUTH_MODE`	`env` (default, reads the vars above) or `gateway` (credentials arrive per-request via `X-MSP360-Username` / `X-MSP360-Password` headers, injected by the Conduit gateway).
`CONDUIT_S2S_SECRET`	When set, the HTTP transport requires a valid `X-Gateway-S2S` header (Conduit sidecar auth) on every `/mcp` request.
`LOG_LEVEL`	`debug` \| `info` (default) \| `warn` \| `error`.

Tools

Companies

msp360_list_companies - list companies (customer organizations) under this provider account.
msp360_get_company - get a single company by ID.

Computers

msp360_list_computers - paginated list of managed computers (endpoints).
msp360_get_computer - get a single computer by HID.

Backup Plans

msp360_list_plans - list backup/restore plans on a computer.
msp360_get_plan - get a single plan by ID.
msp360_get_plan_info - get status/info for a plan.
msp360_get_plan_history - get run history for a plan, optionally filtered to a date.
msp360_start_plan - start a backup run for a plan.
msp360_stop_plan - stop a currently running backup for a plan.

Monitoring

msp360_get_monitoring - status data for the latest plan runs on all endpoints.
msp360_get_monitoring_for_user - status data for the latest plan runs, filtered by user.

Licenses

msp360_list_licenses - list available licenses, optionally filtered to unassigned ones.
msp360_get_license - get a single license by ID.

Scope

This is a v1 / MVP surface covering the core "what's backed up and is it healthy" MSP workflow. Explicitly out of scope for now: Administrators, Billing, Builds, Packages, Destinations/Accounts (storage-provisioning config), Users/Authenticate, and License Grant/Release/Revoke (mutating license assignment) and computer authorization/de-authorization - these are provider/reseller-admin-console-level operations with real billing/access consequences, distinct from day-to-day MSP monitoring, and worth a deliberate separate decision later rather than bundling into v1.

Development

npm install
npm run build
npm test
npm run lint   # tsc --noEmit

Docker

docker build -t msp360-mcp .
docker run -p 8080:8080 -e MSP360_USERNAME=... -e MSP360_PASSWORD=... msp360-mcp