Wraps the Duplicati REST API so you can manage backup jobs directly from your LLM. Supports both stdio for local Claude Code use and streamable HTTP for Docker deployments. Exposes 17 tools covering job listing, triggering backups, monitoring progress, and exporting or updating configurations. If you point it at the Duplicati SQLite database, you get read-only access to operation history, error logs, restore points, and retention policies. Includes a read-only mode that disables all write operations while keeping analysis tools active. Useful when you want to check backup health, troubleshoot failures, or modify job settings without leaving your chat interface.
MCP (Model Context Protocol) server for managing Duplicati backups from an LLM.
Version française / French version
The server wraps the Duplicati REST API and exposes it via the MCP protocol. Two transports are supported:
The simplest way to get started. The .mcp.json at the project root handles everything:
# Install uv if needed
brew install uv
# Claude Code will auto-detect .mcp.json and launch the server
Set your Duplicati URL and password in .mcp.json:
{
"mcpServers": {
"duplicati": {
"type": "stdio",
"command": "uv",
"args": ["run", "duplicati-mcp"],
"env": {
"DUPLICATI_URL": "http://localhost:8200",
"DUPLICATI_PASSWORD": "your-password",
"DUPLICATI_READONLY": ""
}
}
}
}
# Edit DUPLICATI_URL and DUPLICATI_PASSWORD in docker-compose.yml, then:
docker compose up -d
# Edit docker-compose.yml: comment out `image:` and uncomment `build: .`
docker compose up -d --build
docker run -d \
--name duplicati-mcp-server \
-p 3000:3000 \
-e DUPLICATI_URL=http://your-duplicati-host:8200 \
-e DUPLICATI_PASSWORD=your-password \
kcofoni/duplicati-mcp:latest
# Check that the server is running
docker logs duplicati-mcp-server
# Test the MCP endpoint
curl -X POST http://localhost:3000/mcp \
-H "Content-Type: application/json" \
-d '{"jsonrpc":"2.0","id":1,"method":"initialize","params":{"protocolVersion":"2025-03-26","capabilities":{},"clientInfo":{"name":"test","version":"1.0"}}}'
For local use without Docker, add to your project .mcp.json:
{
"mcpServers": {
"duplicati": {
"type": "stdio",
"command": "uv",
"args": ["run", "duplicati-mcp"],
"env": {
"DUPLICATI_URL": "http://localhost:8200",
"DUPLICATI_READONLY": ""
}
}
}
}
Credentials are loaded from the .env file at the project root (see Getting Started).
Add to your .mcp.json:
{
"mcpServers": {
"duplicati": {
"type": "http",
"url": "http://your-host:3000/mcp"
}
}
}
Claude Desktop requires mcp-proxy as a bridge to HTTP servers. Add to your configuration file:
macOS: ~/Library/Application Support/Claude/claude_desktop_config.json
Windows: %APPDATA%\Claude\claude_desktop_config.json
{
"mcpServers": {
"duplicati": {
"command": "uvx",
"args": ["mcp-proxy", "--transport", "streamablehttp", "http://your-host:3000/mcp"]
}
}
}
Once connected, the LLM has access to:
export_backup_config to modify sources, settings, schedule, etc.)DUPLICATI_DB_PATH)Once the server is connected to your LLM, here are prompts you can use:
General status
History & statistics (requires DUPLICATI_DB_PATH)
Restore points (requires DUPLICATI_DB_PATH)
Configuration (requires DUPLICATI_DB_PATH)
Diagnostics (requires DUPLICATI_DB_PATH)
Open-ended (combines multiple tools)
| Variable | Default | Description |
|---|---|---|
DUPLICATI_URL | http://localhost:8200 | URL of the Duplicati instance |
DUPLICATI_PASSWORD | (empty) | Duplicati web interface password (leave empty if none set) |
DUPLICATI_READONLY | (empty) | Set to true, 1 or yes to disable write operations |
DUPLICATI_DB_PATH | (empty) | Path to Duplicati-server.sqlite — enables SQLite-backed history tools |
MCP_TRANSPORT | stdio | Transport: stdio or streamable-http |
MCP_PORT | 3000 | Port for Streamable HTTP transport |
DUPLICATI_READONLY=true disables run_backup, abort_backup, update_backup_config and import_backup_config. All read tools remain active. Useful for safely exploring and analysing backup configurations without any risk of modification.
Setting DUPLICATI_DB_PATH enables the db_* tools, which read directly from the Duplicati SQLite databases. Access is strictly read-only: databases are opened in read-only mode and copied to memory via the SQLite Online Backup API before any query — the live Duplicati databases are never locked or modified.
Local use — point to the server database on your machine:
DUPLICATI_DB_PATH=/path/to/duplicati/config/Duplicati-server.sqlite
Docker — share the Duplicati config directory as a read-only volume. In docker-compose.yml:
services:
duplicati-mcp:
# ...
volumes:
- duplicati_config:/duplicati-config:ro # named volume (recommended)
# or: - /srv/duplicati/config:/duplicati-config:ro # bind mount
environment:
- DUPLICATI_DB_PATH=/duplicati-config/Duplicati-server.sqlite
volumes:
duplicati_config: # must be the same volume used by the Duplicati container
kcofoni/duplicati-mcp:latestdocker pull kcofoni/duplicati-mcp:latest
duplicati-mcp/
├── src/
│ └── duplicati_mcp/
│ ├── __init__.py
│ ├── __main__.py
│ ├── client.py # Duplicati REST API client
│ ├── db.py # Read-only SQLite access (server DB + per-backup DBs)
│ └── server.py # FastMCP server and tools
├── mcp-publication/ # MCP registry publication files
├── requirements.txt # Python dependencies
├── pyproject.toml # Project metadata
├── Dockerfile
├── docker-compose.yml
├── .mcp.json # Claude Code local config (stdio)
├── test_server.sh # Docker container smoke test
├── test_mcp.py # MCP protocol test
├── README.md # This file (English)
└── README_fr.md # French documentation
# Smoke test (requires running Docker container)
./test_server.sh
# MCP protocol test (requires running server)
python test_mcp.py
python test_mcp.py localhost:3000
uv run mcp dev src/duplicati_mcp/server.py
Check that DUPLICATI_URL is reachable from the container. If both run in Docker, put them on the same network and use the service name as hostname.
Verify DUPLICATI_PASSWORD matches the password set in Duplicati's web interface. Leave empty if no password is configured.
docker ps | grep duplicati-mcp-server
docker logs duplicati-mcp-server
This project is licensed under the MIT License — see the LICENSE file for details.
DUPLICATI_URL*URL of the Duplicati instance (e.g. http://localhost:8200)
DUPLICATI_PASSWORDsecretDuplicati web interface password (leave empty if none configured)
DUPLICATI_READONLYSet to true to disable write operations (run, abort, update, import). Default: false
DUPLICATI_DB_PATHPath to Duplicati-server.sqlite — enables SQLite history tools (db_*). Leave empty to disable.
io.github.ericm1018/skillfm-llm-cost-optimizer-openai-anthropic-usage
io.github.mikerawsonnz/llm-orchestration-agent
io.github.mikerawsonnz/authenticated-llm-agent
labforgedev/copilot-memory-mcp
csoai-org/agent-prompt-injection-firewall-mcp
io.github.mikerawsonnz/authenticated-multi-llm-agent