Datto RMM is configured in MSP Settings → Integrations.
How to connect
Datto RMM uses a tenant-specific API endpoint plus a single API key. You generate both in the Datto RMM web UI before connecting.1
Generate API credentials in Datto RMM
Sign in to your Datto RMM tenant as an administrator. Open Setup → Users (or your tenant’s API page) and create / enable an API user. Grant the permissions you want the agent to use: Devices, Alerts, Sites, and Jobs at minimum. Copy:
- The API URL for your region (e.g.
https://pinotage-api.centrastage.netor your platform-specific equivalent) - The API Key issued for the API user
2
Open MSP Integrations
In Rallied, go to MSP Settings → Integrations.
3
Connect Datto RMM
Find the Datto RMM card and click Connect. Enter:
- API URL (
base_url) — your region-specific Datto RMM API endpoint - API Key — the API key issued for the API user
x-au-api-key header on every call.The agent currently uses the v1 Datto RMM API directly with the stored API key. There is no OAuth dance, so the connection stays active as long as the API key is valid. If you rotate the key in Datto RMM, reconnect from MSP Settings → Integrations.
How the agent uses it
When a request touches a Datto-managed endpoint or alert (“why did the disk-space alert fire on FILE01?”, “run our reboot quick job on the lobby kiosk”), the agent typically:- Finds the alert with
datto-list-alerts(optionally scoped to a site), or jumps straight to the device withdatto-list-devices/datto-get-device. - Resolves site context with
datto-list-sites/datto-get-sitewhen the request is “all of Acme’s servers” style. - Digs deeper with
datto-get-device-auditusingtype: "software","hardware", or"network"to understand the underlying cause. - Runs a remediation with
datto-run-quickjob(approval-gated). ThejobNamemust match a component already configured in Datto RMM for that device’s site. - Once the root cause is addressed, dismisses the alert with
datto-resolve-alert(approval-gated).