// SCAN REPORT

Veeam VBR v13 MCP Server

328 tools. 174 can modify or destroy data without limits.

28 destructive tools with no built-in limits. Policy required.

Last updated:

174 can modify or destroy data
154 read-only
328 tools total

Community server · catalogue entry verified 03/07/2026

How to control Veeam VBR v13 MCP Server ↓

TOOL MAP

What Veeam VBR v13 MCP Server exposes to your agents

Read (154) Write / Execute (146) Destructive / Financial (28)

Running more than one server? Check your whole stack →

MOST DANGEROUS TOOLS
Critical Risk

The most dangerous Veeam VBR v13 MCP Server tools

Destructive · High clearAgentPolicyCache Clearing a backup cache destroys cached data that cannot be recovered. Destructive · High DeleteBackup Deletion of backup datasets is a destructive action that cannot be undone. Destructive · Critical DeleteBackupObject This tool irreversibly removes backup data, which cannot be undone. Destructive · High DeleteCloudCreds Deletion of cloud credentials is irreversible and cannot be undone.

174 of Veeam VBR v13 MCP Server's 328 tools can modify, destroy, or commit something on every call — and an agent calls them with no built-in limits.

POLICY

How to control Veeam VBR v13 MCP Server

PolicyLayer is an MCP gateway — it sits between your AI agents and Veeam VBR v13 MCP Server, and nothing reaches the server without passing your rules. These are the rules we recommend:

Deny destructive operations
{
  "clearAgentPolicyCache": {
    "deny_if": [
      {
        "conditions": [],
        "on_deny": "Blocked by default. Requires approval."
      }
    ]
  }
}

Destructive tools should never be available to autonomous agents without human approval.

Rate limit write operations
{
  "AddDatastoreLatency": {
    "limits": [
      {
        "counter": "adddatastorelatency_per_hour",
        "window": "hour",
        "max": 30,
        "scope": "grant"
      }
    ]
  }
}

Prevents bulk unintended modifications from agents caught in loops.

Cap read operations
{
  "AzureInstantVMRecoveryUnmount": {
    "limits": [
      {
        "counter": "azureinstantvmrecoveryunmount_per_minute",
        "window": "minute",
        "max": 60,
        "scope": "grant"
      }
    ]
  }
}

Controls API costs and prevents retry loops from exhausting upstream rate limits.

  1. Create a free account and register Veeam VBR v13 MCP Server — nothing to install.
  2. Add these rules — paste them, or build them visually. Tune the limits to your setup.
  3. Point your MCP client (Claude, Cursor, anything) at your gateway URL.
ENFORCE POLICY ON VEEAM VBR V13 →

Instant setup, no code required.

FULL CATALOGUE

All 328 Veeam VBR v13 MCP Server tools

DESTRUCTIVE 28 tools
Destructive clearAgentPolicyCache Clear the backup cache for an agent backup policy. Destructive DeleteBackup Delete a backup dataset from the Veeam Backup server. Destructive DeleteBackupObject Delete a specific object from a backup. Destructive DeleteCloudCreds Remove a cloud credentials record. Destructive DeleteCloudCredsHelperApplianceAsync Remove a helper appliance from a cloud credentials record. Destructive DeleteComputerRecoveryToken Delete a recovery token. Destructive DeleteCreds Remove a credentials record from the Veeam Backup server. Destructive DeleteDatastoreLatencySettings Remove latency settings for a specific datastore. Destructive DeleteEncryptionPassword Remove an encryption password. Destructive DeleteEntraIDTenants Remove a Microsoft Entra ID tenant. Destructive DeleteGlobalVMExclusion Remove a VM from the global exclusion list. Destructive DeleteJob Delete a job from the Veeam Backup server. Destructive DeleteKMSServer Remove a KMS server. Destructive DeleteManagedServer Remove a server from the backup infrastructure. Destructive DeleteProtectionGroup Remove a protection group. Destructive DeleteProxy Remove a backup proxy. Destructive DeleteRepository Remove a backup repository. Destructive DeleteScaleOutRepository Remove a Scale-Out Backup Repository. Destructive DeleteUnstructuredDataServers Remove an unstructured data source. Destructive DeleteUser Remove a user or group from Veeam Backup & Replication. Destructive RemoveInstanceLicense Remove an instance license record. Destructive RemoveLicense Remove a license from the Veeam Backup server. Destructive ResetAllBestPracticesComplianceStatuses Reset all Security & Compliance Analyzer statuses. Destructive ResetBestPracticesComplianceStatus Reset the status of a specific Security & Compliance Analyzer best practice check. Destructive RevokeCapacityLicense Revoke a capacity license from an unstructured data workload. Destructive RevokeInstanceLicense Revoke an instance license from a workload. Destructive RevokeSocketLicense Revoke a socket license from a specific host. Destructive UninstallAgentFromDiscoveredEntities Uninstall Veeam Agent from discovered entities.
EXECUTE 53 tools
Execute applyAgentPolicyConfiguration Apply backup policy configuration to all computers managed by the policy (agent jobs only). Execute AzureInstantVMRecoveryMigrate Start migrating a machine to Azure permanently. Execute AzureInstantVMRecoveryMount Start Instant Recovery to Microsoft Azure. Execute AzureInstantVMRecoverySwitchover Start switchover to Azure. Execute CreateRecoveryMediaForBackupObject Create recovery media for a specific backup object. Execute EnableScaleOutExtentMaintenanceMode Enable maintenance mode on a SOBR extent. Execute EntireVmRestoreHv Restore an entire Microsoft Hyper-V VM. Execute EntireVmRestoreVmware Restore an entire VMware vSphere VM. Execute InstallAgentOnDiscoveredEntities Install Veeam Agent on discovered entities. Execute InstantHvVMRecoveryMigrate Start migrating a Hyper-V instant recovery VM. Execute InstantHvVMRecoveryMount Start Instant Recovery of a Microsoft Hyper-V VM. Execute InstantRecoveryVmwareFcdMigrateWithSession Start FCD disk migration. Execute InstantRecoveryVmwareFcdMountWithSession Start instant FCD recovery. Execute InstantUnstructuredDataRecoveryMigrate Start file share migration to the original or another location. Execute InstantUnstructuredDataShareSwitchover Start file share switchover. Execute InstantViVMRecoveryMigrate Start finalizing/migrating an instant-recovered VMware vSphere VM. Execute InstantViVMRecoveryMount Start Instant Recovery of a VMware vSphere VM. Execute RequestAppRegistrationByDeviceCode Get Microsoft Entra ID device verification code for app registration. Execute RescanAllManagedServers Rescan all managed servers to refresh their configuration. Execute RescanInventoryObjects Rescan inventory objects on a specific host. Execute RescanManagedServer Rescan a specific managed server. Execute RescanProtectionGroup Rescan a protection group to discover new machines. Execute RescanReplica Rescan all replicas. Execute RescanRepositories Rescan all repositories to refresh their state and capacity. Execute RetryJob Retry a failed job. Execute StartConfigBackup Start an immediate configuration backup. Execute StartEntraIDAuditLogMount Start Microsoft Entra ID audit log restore. Execute StartEntraIDTenantRestore Mount a Microsoft Entra ID tenant for restore operations. Execute StartEntraIDTenantRestoreFromCopy Start Microsoft Entra ID tenant restore from a copy backup. Execute StartFlrMount Start a file restore session (mount backup for file-level restore). Execute StartHealthCheckBackup Run a health check and repair operation on backups. Execute StartJob Start/run a specific job immediately. Returns a session ID to track progress. Execute StartMalwareBackupScan Scan backup data with antivirus software or YARA rules. Execute StartSecurityAnalyzer Start the Security & Compliance Analyzer to check the backup infrastructure against best practices. Execute StartUnstructuredDataFlrMount Start a file-level restore session from an unstructured data backup. Execute StartVSphereQuickBackupJob Start a quick backup for VMware vSphere VMs without creating a full job. Execute StopAutomationSession Stop a running automation session. Execute StopEntraIDAuditLogMount Unmount Microsoft Entra ID audit log restore session. Execute StopEntraIDTenantRestore Unmount a Microsoft Entra ID tenant restore session. Execute StopFlrMount Unmount a file restore session. Execute StopJob Stop a currently running job. Execute StopSession Stop a running session. Execute StopUnstructuredDataFLRMount Unmount unstructured data FLR volumes. Execute UpdateServerComponents Update managed server components (agents, drivers). Execute UpgradeAgentOnDiscoveredEntities Upgrade Veeam Agent on discovered entities. Execute VerifyEncryptionPassword Verify that an encryption password is correct. Execute ViVMSnapshotReplicaCommitFailback Commit failback for a VMware vSphere snapshot replica. Execute ViVMSnapshotReplicaFailback Start failback for a VMware vSphere snapshot replica. Execute ViVMSnapshotReplicaFailover Start failover for a VMware vSphere snapshot replica. Execute ViVMSnapshotReplicaPermanentFailover Start permanent failover for a VMware vSphere snapshot replica. Execute ViVMSnapshotReplicaPlannedFailover Start planned failover for a VMware vSphere snapshot replica. Execute ViVMSnapshotReplicaSwitchToProduction Switch over to production after failback. Execute ViVMSnapshotReplicaUndoFailback Undo failback for a VMware vSphere snapshot replica.
WRITE 93 tools
Write AddDatastoreLatency Add latency settings for a specific datastore. Write AssignInstanceLicense Assign an instance license to a workload. Write ChangeAccount Change the Google service account for a cloud credentials record. Write ChangeCloudCertificate Change the certificate for a cloud credentials record. Write ChangeCloudCredsSecretKey Change the secret key for a cloud credentials record. Write ChangeEncryptionPassword Change an encryption password value. Write ChangeKMServerCertificate Change the certificate for a KMS server. Write ChangePasswordForCreds Change the password for a credentials record. Write ChangePrivateKeyForCreds Change the Linux private key for a credentials record. Write ChangeServiceAccountMode Change service account mode for a user. Write CloneJob Clone an existing job to create a duplicate with a new name. Write CopyBackups Copy backups to another repository. Write CreateCloudCreds Add a new cloud credentials record. Write CreateCloudCredsHelperAppliance Add or edit a helper appliance for a cloud credentials record. Write CreateComputerRecoveryToken Create a recovery token for a protected computer. Write CreateCreds Add a new credentials record to the Veeam Backup server. Write CreateDeploymentKit Generate a deployment kit package for adding Windows machines as managed servers. Write CreateEncryptionPassword Add a new encryption password. Write CreateEntraIDTenant Add a new Microsoft Entra ID tenant. Write CreateGlobalVMExclusion Add a VM to the global exclusion list. Write CreateJob Create a new backup, replication, or copy job on the Veeam Backup server. Write CreateKMSServer Add a new KMS server. Write CreateManagedServer Add a new server to the backup infrastructure. Write CreateNewCloudFolder Create a new folder in cloud storage. Write CreateProtectionGroup Add a new protection group. Write CreateProxy Add a new backup proxy. Write CreateRepository Add a new backup repository. Write CreateScaleOutRepository Add a new Scale-Out Backup Repository. Write CreateSuspiciousActivityEvent Create a manual malware event entry. Write CreateUnstructuredDataServer Add a new unstructured data source. Write CreateUser Add a new user or group to Veeam Backup & Replication. Write DisableJob Disable a job (prevents scheduled execution). Write DisableProtectionGroup Disable a protection group. Write DisableProxy Disable a backup proxy. Write DisableScaleOutExtentMaintenanceMode Disable maintenance mode on a SOBR extent. Write DisableScaleOutExtentSealedMode Disable sealed mode on a SOBR extent. Write EnableJob Enable a previously disabled job. Write EnableProtectionGroup Enable a protection group. Write EnableProxy Enable a backup proxy for use in backup jobs. Write EnableScaleOutExtentSealedMode Enable sealed mode on a SOBR extent. Write EntireUnstructuredDataShareRestore Restore an entire file share to the original or another location. Write EntireVmRestoreCloudDirector Restore an entire VMware Cloud Director VM. Write FinishAppRegistrationByDeviceCode Register a Microsoft Entra ID application using device code flow. Write ImportCloudCredentials Import cloud credentials records. Write ImportCredentials Import credentials records. Write ImportEncryptionPasswords Import encryption passwords. Write ImportJobs Import jobs from a JSON specification. Write ImportManagedServers Import managed server configurations. Write ImportProxies Import backup proxy configurations. Write ImportRepositories Import repository configurations. Write InitializeVeeamCloudVault Add and initialize a Veeam Data Cloud Vault. Write InstallLicense Install a license on the Veeam Backup server. Write MarkBackupObjectsAsClean Mark specific backup objects as clean (no malware). Write ModifySecurityAnalyzerSchedule Modify the Security & Compliance Analyzer schedule. Write RegisterVbr Register the backup server on My Account Portal. Write RenewInstalledLicense Renew the installed license on the Veeam Backup server. Write ResetUserMfa Reset MFA for a specific user. Write SendTestEmailMessage Send a test email to verify email settings. Write SetAgentConsumption Enable or disable instance consumption for unlicensed agents. Write SetAsDefaultMountServer Set a specific mount server as the default. Write SetAutoUpdate Enable or disable automatic license auto-update. Write SetupMountServer Add a new mount server. Write SuppressBestPracticesComplianceAlert Suppress a specific Security & Compliance Analyzer best practice alert. Write UpdateAzureInstantVMRecoverySwitchoverSettings Update settings for switchover to Azure. Write UpdateCloudCreds Edit a cloud credentials record. Write UpdateComputerRecoveryToken Edit a recovery token. Write UpdateConfigBackupOptions Edit configuration backup settings. Write UpdateCreds Edit an existing credentials record. Write UpdateDatastoreLatencySettings Edit latency settings for a specific datastore. Write UpdateEmailSettings Edit email notification settings. Write UpdateEncryptionPassword Edit the hint of an encryption password. Write UpdateEntraIDTenants Edit a Microsoft Entra ID tenant. Write UpdateEventForwardingSettings Edit event forwarding settings. Write UpdateGeneralOptions Edit general options/settings of Veeam Backup & Replication. Write UpdateGlobalVMExclusionNote Edit the note for a global VM exclusion. Write UpdateJob Edit/update an existing job configuration. Write UpdateKMSServer Edit a KMS server configuration. Write UpdateLicense Update the Veeam license. Write UpdateManagedServer Edit the configuration of a managed server. Write UpdateMountServer Update a mount server configuration. Write UpdateNotificationsSettings Edit notification settings. Write UpdateProtectionGroup Edit a protection group. Write UpdateProxy Edit a backup proxy configuration. Write UpdateRepository Edit a backup repository configuration. Write UpdateScaleOutRepository Edit a Scale-Out Backup Repository. Write UpdateSingleUseCredentials Change a managed server to use single-use credentials. Write UpdateStorageLatencySettings Edit storage latency control settings. Write UpdateTrafficRules Edit network traffic rules. Write UpdateUnstructuredDataServers Edit an unstructured data source. Write UpdateUnstructuredDataShareIRSwitchoverSettings Update file share switchover settings. Write UpdateUserRoles Edit roles assigned to a user or group. Write UpdateUsersSettings Edit MFA settings. Write UpdateVolume Edit volumes on a Microsoft Hyper-V standalone server.
READ 154 tools
Read AzureInstantVMRecoveryUnmount Stop publishing a machine to Azure (unmount). Read BrowseCloudEntity Get the cloud storage hierarchy (AWS S3, Azure Blob, GCP buckets, etc.). Read BrowseCloudEntityVirtualMachines Get cloud virtual machines from a cloud entity. Read BrowseCloudVaultEntity Browse the contents of a Veeam Data Cloud Vault. Read ChangeReplicaFailbackSwitchoverTime Change switchover time for replica failback. Read ChangeRootPasswordForCreds Change the Linux root password for a credentials record. Read CreateLicenseReport Create a license usage report for the backup server. Read DownloadBackupMeta Download the backup metadata file for a backup. Read DownloadDeploymentKit Download a generated deployment kit package. Read EntireUnstructuredDataOSRestore Restore an entire object storage bucket or container. Read ExportCloudCredentials Export cloud credentials records. Read ExportCredentials Export credentials records. Read ExportEncryptionPasswords Export encryption passwords. Read ExportJobs Export jobs to a JSON specification. Read ExportManagedServers Export managed server configurations. Read ExportProxies Export backup proxy configurations. Read ExportRepositories Export repository configurations. Read GetADDomainObject Get Active Directory objects from a specific domain. Read GetAllAgentPackages Get available Linux agent packages. Read GetAllAgentPackagesForUnix Get available Unix agent packages. Read GetAllAuthorizationEvents Get all four-eyes authorization events. Read GetAllAutomationSessions Get all automation import/export sessions. Read GetAllAzureInstantVMRecoveryMounts Get all active instant recovery mount points for Azure VMs. Read GetAllAzureInstantVMRecoveryMountSessions Get all mount sessions for Azure instant recovery. Read GetAllBackupFiles Get all .VBK and .VIB files associated with a backup. Read GetAllBackupObjects Get all backup objects (VMs, servers) across all backups. Read GetAllBackups Get all backup datasets created on or imported to the Veeam Backup server. Read GetAllCloudCreds Get all cloud credentials records (AWS, Azure, GCP, etc.). Read GetAllComputerRecoveryTokens Get all recovery tokens for bare metal recovery. Read GetAllCreds Get all credentials records stored on the Veeam Backup server. Read GetAllCredsHelperAppliancesWithFiltering Get all helper appliances for a cloud credentials record. Read GetAllEncryptionPasswords Get all encryption passwords configured on the Veeam Backup server. Read GetAllEntraIDTenants Get all Microsoft Entra ID (Azure AD) tenants. Read GetAllGlobalVMExclusions Get all global VM exclusions (VMs excluded from all jobs). Read GetAllInstantHvVMRecoveryMounts Get all active instant recovery mount points for Microsoft Hyper-V VMs. Read GetAllInstantUnstructuredDataRecoveryMounts Get all active instant file share recovery mount points. Read GetAllInstantViVMRecoveryMounts Get all active instant recovery mount points for VMware vSphere VMs. Read GetAllInventoryHosts Get all servers available for inventory browsing. Read GetAllInventoryPGs Get all protection groups. Read GetAllInventoryVmwareHosts Get all VMware vSphere servers (vCenter, ESXi hosts) in the inventory. Read GetAllJobs Get all backup, replication, and copy jobs configured on the Veeam Backup server. Read GetAllJobsStates Get the current real-time state (running, idle, warning, etc.) for all jobs. Read GetAllKMSServers Get all KMS (Key Management System) servers. Read GetAllManagedServers Get all managed servers (Windows, Linux, VMware ESXi, Hyper-V) in the backup infrastructure. Read GetAllMountServers Get all mount servers used for file restore and instant recovery operations. Read GetAllObjectReplicaRestorePoints Get all replica restore points across all replicas. Read GetAllObjectRestorePoints Get all available restore points across the entire Veeam infrastructure. Read GetAllProtectionGroups Get all protection groups. Read GetAllProxies Get all backup proxies (VMware, Hyper-V, general-purpose). Read GetAllProxiesStates Get the current state of all backup proxies. Read GetAllReplicas Get all VMware vSphere snapshot replicas. Read GetAllRepositories Get all backup repositories (local disk, NAS, object storage, cloud vault). Read GetAllRepositoriesStates Get the current state and capacity (total/free space) of all repositories. Essential for capacity monitoring. Read GetAllScaleOutRepositories Get all Scale-Out Backup Repositories (SOBR). Read GetAllServices Get all associated backend services for integration with Veeam Backup & Replication. Read GetAllSessions Get all backup/restore sessions with status, progress and result. Use this to check SLA and job health. Read GetAllTaskSessions Get all task sessions across all sessions. Read GetAllTrafficRules Get all network traffic rules configured on the Veeam Backup server. Read GetAllUnstructuredDataServers Get all unstructured data sources (file servers, NAS). Read GetAllVmwareFcdInstantRecoveryMountModels Get all FCD (First Class Disk) instant recovery mount points. Read GetAllWANAccelerators Get all WAN accelerators configured in the backup infrastructure. Read GetAuthorizationEvent Get a specific authorization event by ID. Read GetAutomationSession Get a specific automation session by ID. Read GetAutomationSessionLogs Get logs for a specific automation session. Read GetAzureInstantVMRecoveryMount Get a specific Azure instant recovery mount point. Read GetAzureInstantVMRecoverySwitchoverSettings Get settings for switchover to Azure. Read GetBackup Get details of a specific backup dataset by ID. Read GetBackupFile Get a specific backup file by its ID. Read GetBackupObject Get a specific backup object by ID. Read GetBackupObjectRestorePointsWithFiltering Get all restore points for a specific backup object. Read GetBackupObjectsWithFiltering Get objects (VMs, servers) contained in a specific backup. Read GetBestPracticesComplianceResult Get Security & Compliance Analyzer results (best practices compliance). Read GetCloudCreds Get a specific cloud credentials record by ID. Read GetCloudCredsHelperAppliance Get a specific helper appliance for a cloud credentials record. Read GetComputerRecoveryToken Get a specific recovery token by ID. Read GetConfigBackupOptions Get configuration backup settings (schedule, repository, encryption). Read GetConnectionCertificate Request a TLS certificate or SSH fingerprint from a server to verify its identity before adding. Read GetCreds Get a specific credentials record by ID. Read GetDatastoreLatencySettings Get latency settings for a specific datastore. Read GetDefaultMountServer Get the default mount server. Read GetDiscoveredEntities Get computers discovered by a protection group. Read GetDiscoveredEntity Get a specific discovered entity by ID. Read GetEmailSettings Get email notification settings. Read GetEncryptionPassword Get a specific encryption password by ID. Read GetEntraIdTenantRestoreDeviceCode Get a user code for delegated restore of Microsoft Entra ID items. Read GetEntraIdTenantRestoreDeviceCodeState Get credentials after device code authorization for Entra ID restore. Read GetEntraIDTenants Get a specific Microsoft Entra ID tenant by ID. Read GetEventForwardingSettings Get event forwarding settings (SNMP, syslog, etc.). Read GetGeneralOptions Get general options/settings of Veeam Backup & Replication. Read GetGlobalVMExclusion Get a specific global VM exclusion by ID. Read GetHostOptionalComponentsDefaults Get the default set of optional managed server components. Read GetInstalledLicense Get the installed license information on the Veeam Backup server. Read GetInstantHvVMRecoveryMount Get a specific Hyper-V VM instant recovery mount point. Read GetInstantUnstructuredDataRecoveryMount Get a specific instant file share recovery mount point. Read GetInstantViVMRecoveryMount Get a specific VMware VM instant recovery mount point. Read GetInventoryForPG Get inventory objects for a specific protection group. Read GetInventoryObjects Get inventory objects (VMs, containers) for a specific host. Read GetJob Get a specific job configuration by its ID. Read GetKMSServer Get a specific KMS server by ID. Read GetLicensedCapacity Get capacity license consumption details. Read GetLicensedInstances Get instance license consumption details. Read GetLicensedSockets Get information about socket license consumption. Read GetManagedServer Get details of a specific managed server by ID. Read GetManagedServerVolume Get volumes for a Microsoft Hyper-V standalone server. Read GetMountServer Get a specific mount server by ID. Read GetNotificationsSettings Get notification settings (on-screen alerts, etc.). Read GetObjectReplicaRestorePoint Get a specific replica restore point by ID. Read GetObjectReplicaRestorePointInReplica Get a specific restore point within a replica. Read GetObjectReplicaRestorePoints Get all restore points for a specific replica. Read GetObjectRestorePoint Get a specific restore point by ID. Read GetObjectRestorePointDisksWithFiltering Get the disks included in a specific restore point. Read GetProtectedComputer Get a specific protected Linux computer by ID. Read GetProtectedComputers Get all protected Linux computers. Read GetProtectionGroup Get a specific protection group by ID. Read GetProxy Get a specific backup proxy by ID. Read GetReplica Get a specific replica by ID. Read GetRepository Get a specific repository by ID. Read GetScaleOutRepository Get a specific SOBR by ID. Read GetScanSessionLog Get logs for a SureBackup scan task session. Read GetSecurityAnalyzerSchedule Get the Security & Compliance Analyzer schedule. Read GetSecurityAnalyzerSession Get the last run of the Security & Compliance Analyzer. Read GetServerCertificate Get the TLS certificate of the Veeam Backup server. Read GetServerInfo Get the Veeam Backup & Replication installation ID, server name, build number, and patches. Read GetServerTime Get the current date and time on the Veeam Backup server. Does not require authentication. Read GetSession Get details for a specific session by ID. Read GetSessionLogs Get the log entries for a specific session. Read GetSessionTaskSessionsWithFiltering Get task sessions for a specific session. Read GetStorageLatencySettings Get storage latency control settings. Read GetSuspiciousActivityEvent Get a specific malware event by ID. Read GetTaskSession Get a specific task session by ID. Read GetTaskSessionLogs Get the log entries for a specific task session. Read GetUnstructuredDataServer Get a specific unstructured data source by ID. Read GetUnstructuredDataShareIRSwitchoverSettings Get file share switchover settings. Read GetUser Get a specific user or group by ID. Read GetUserRoles Get roles assigned to a specific user or group. Read GetVmwareFcdInstantRecoveryMountModel Get a specific FCD instant recovery mount point. Read GetVmwareHostObject Get VMware vSphere server objects (data centers, clusters, VMs, etc.) by server name. Read GetWANAccelerator Get a specific WAN accelerator by ID. Read GetYaraRules Get YARA rules available for backup scanning. Read InstantHvVMRecoveryUnmount Stop publishing a Hyper-V VM (unmount). Read InstantRecoveryVmwareFcdDismountWithSession Stop FCD publishing (dismount). Read InstantUnstructuredDataRecoveryMount Start Instant File Share Recovery - mount a file share backup. Read InstantUnstructuredDataRecoveryUnmount Stop file share publishing (unmount). Read InstantViVMRecoveryUnmount Stop publishing a VMware vSphere VM (unmount). Read RequestAuthentication Get Google Cloud authentication information. Read ResolveCloudDirectorHosts Get vCenter Servers attached to a VMware Cloud Director server. Read ResolveHyperVHosts Get Microsoft Hyper-V servers managed by a Hyper-V cluster or SCVMM server. Read ViewAllUserRoles Get all available roles in Veeam Backup & Replication. Read ViewAllUsers Get all users and groups with access to Veeam Backup & Replication. Read ViewSuspiciousActivityEvents Get all malware/ransomware events detected in backup data. Read ViewUserRole Get details of a specific role by ID. Read ViewUserRolePermissions Get permissions associated with a specific role. Read ViewUsersSettings Get MFA (multi-factor authentication) settings. Read ViVMSnapshotReplicaUndoFailover Undo failover for a VMware vSphere snapshot replica.
EXPLORE

Related servers

Other MCP servers with similar tools — same risk classification, starter policies for each.

Yaver 1060 tools
adminautomation
Nodebench 824 tools
adminautomation
UnClick 813 tools
adminautomation
Binance MCP Server 734 tools
adminautomation
Fortimanager 584 tools
adminautomation
Crow 573 tools
adminautomation
Mcp 571 tools
adminautomation
GoHighLevel MCP Server 566 tools
adminautomation
FAQ

Questions about Veeam VBR v13 MCP Server

Can an AI agent delete data through the Veeam VBR v13 MCP Server MCP server? +

Yes. The Veeam VBR v13 MCP Server server exposes 28 destructive tools including clearAgentPolicyCache, DeleteBackup, DeleteBackupObject. These permanently remove resources with no undo. PolicyLayer blocks destructive tools by default so they never reach the upstream server.

How do I prevent bulk modifications through Veeam VBR v13 MCP Server? +

The Veeam VBR v13 MCP Server server has 93 write tools including AddDatastoreLatency, AssignInstanceLicense, ChangeAccount. Set a rate limit in your policy -- for example, 10 calls per hour prevents an agent from making more than 10 modifications per hour. PolicyLayer enforces this at the gateway, before calls reach Veeam VBR v13 MCP Server.

How many tools does the Veeam VBR v13 MCP Server MCP server expose? +

328 tools across 4 categories: Destructive, Execute, Read, Write. 154 are read-only. 174 can modify, create, or delete data.

How do I enforce a policy on Veeam VBR v13 MCP Server? +

Register the Veeam VBR v13 MCP Server MCP server in PolicyLayer, apply the suggested rules above (adjust the limits to your use case), and point your AI client at the PolicyLayer proxy URL instead of the server directly. Your agents keep the same tools; PolicyLayer evaluates every call against policy before it executes. Nothing to install, live in minutes.

Enforce policy on every Veeam VBR v13 MCP Server tool call.

Deterministic rules across all 328 Veeam VBR v13 MCP Server tools. Per-identity grants. Full audit log. Live in minutes. Nothing to install.

ENFORCE POLICY ON VEEAM VBR V13 →

Instant setup, no code required.

328 Veeam VBR v13 MCP Server tools catalogued and risk-classified — across an index of 43,000+ MCP servers.

// GET IN TOUCH

Have a question or want to learn more? Send us a message.

Message sent.

We'll get back to you soon.