Duplicati Mcp — independently scanned and version-tracked by SaferSkills.
SaferSkills independently audited Duplicati Mcp (Agent Skill) and scored it 100/100 (green). The audit ran 55 deterministic rules across Security, Supply Chain, Maintenance, Transparency, and Community; it found 0 high-severity and 0 lower-severity findings. The full rule-by-rule trace and per-finding evidence are below. Free, methodology-open.
Findings & checks · 0 flagged
Every scanned point with the score it earned and what moved between them.
First recorded scan — no prior version to compare against.
The primary manifest — the file an agent reads to learn what this artifact does.
MCP (Model Context Protocol) server for managing Duplicati backups from an LLM.
Version française / French version
The server wraps the Duplicati REST API and exposes it via the MCP protocol. Two transports are supported:
The simplest way to get started. The .mcp.json at the project root handles everything:
# Install uv if needed
brew install uv
# Claude Code will auto-detect .mcp.json and launch the serverSet your Duplicati URL and password in .mcp.json:
{
"mcpServers": {
"duplicati": {
"type": "stdio",
"command": "uv",
"args": ["run", "duplicati-mcp"],
"env": {
"DUPLICATI_URL": "http://localhost:8200",
"DUPLICATI_PASSWORD": "your-password",
"DUPLICATI_READONLY": ""
}
}
}
}# Edit DUPLICATI_URL and DUPLICATI_PASSWORD in docker-compose.yml, then:
docker compose up -d# Edit docker-compose.yml: comment out `image:` and uncomment `build: .`
docker compose up -d --builddocker run -d \
--name duplicati-mcp-server \
-p 3000:3000 \
-e DUPLICATI_URL=http://your-duplicati-host:8200 \
-e DUPLICATI_PASSWORD=your-password \
kcofoni/duplicati-mcp:latest# Check that the server is running
docker logs duplicati-mcp-server
# Test the MCP endpoint
curl -X POST http://localhost:3000/mcp \
-H "Content-Type: application/json" \
-d '{"jsonrpc":"2.0","id":1,"method":"initialize","params":{"protocolVersion":"2025-03-26","capabilities":{},"clientInfo":{"name":"test","version":"1.0"}}}'For local use without Docker, add to your project .mcp.json:
{
"mcpServers": {
"duplicati": {
"type": "stdio",
"command": "uv",
"args": ["run", "duplicati-mcp"],
"env": {
"DUPLICATI_URL": "http://localhost:8200",
"DUPLICATI_READONLY": ""
}
}
}
}Credentials are loaded from the .env file at the project root (see Getting Started).
Add to your .mcp.json:
{
"mcpServers": {
"duplicati": {
"type": "http",
"url": "http://your-host:3000/mcp"
}
}
}Claude Desktop requires mcp-proxy as a bridge to HTTP servers. Add to your configuration file:
macOS: ~/Library/Application Support/Claude/claude_desktop_config.json Windows: %APPDATA%\Claude\claude_desktop_config.json
{
"mcpServers": {
"duplicati": {
"command": "uvx",
"args": ["mcp-proxy", "--transport", "streamablehttp", "http://your-host:3000/mcp"]
}
}
}Once connected, the LLM has access to:
export_backup_config to modify sources, settings, schedule, etc.)DUPLICATI_DB_PATH)Once the server is connected to your LLM, here are prompts you can use:
General status
History & statistics _(requires DUPLICATI_DB_PATH)_
Restore points _(requires DUPLICATI_DB_PATH)_
Configuration _(requires DUPLICATI_DB_PATH)_
Diagnostics _(requires DUPLICATI_DB_PATH)_
Open-ended _(combines multiple tools)_
| Variable | Default | Description |
|---|---|---|
DUPLICATI_URL | http://localhost:8200 | URL of the Duplicati instance |
DUPLICATI_PASSWORD | _(empty)_ | Duplicati web interface password (leave empty if none set) |
DUPLICATI_READONLY | _(empty)_ | Set to true, 1 or yes to disable write operations |
DUPLICATI_DB_PATH | _(empty)_ | Path to Duplicati-server.sqlite — enables SQLite-backed history tools |
MCP_TRANSPORT | stdio | Transport: stdio or streamable-http |
MCP_PORT | 3000 | Port for Streamable HTTP transport |
DUPLICATI_READONLY=true disables run_backup, abort_backup, update_backup_config and import_backup_config. All read tools remain active. Useful for safely exploring and analysing backup configurations without any risk of modification.
Setting DUPLICATI_DB_PATH enables the db_* tools, which read directly from the Duplicati SQLite databases. Access is strictly read-only: databases are opened in read-only mode and copied to memory via the SQLite Online Backup API before any query — the live Duplicati databases are never locked or modified.
Local use — point to the server database on your machine:
DUPLICATI_DB_PATH=/path/to/duplicati/config/Duplicati-server.sqliteDocker — share the Duplicati config directory as a read-only volume. In docker-compose.yml:
services:
duplicati-mcp:
# ...
volumes:
- duplicati_config:/duplicati-config:ro # named volume (recommended)
# or: - /srv/duplicati/config:/duplicati-config:ro # bind mount
environment:
- DUPLICATI_DB_PATH=/duplicati-config/Duplicati-server.sqlite
volumes:
duplicati_config: # must be the same volume used by the Duplicati containerkcofoni/duplicati-mcp:latestdocker pull kcofoni/duplicati-mcp:latestduplicati-mcp/
├── src/
│ └── duplicati_mcp/
│ ├── __init__.py
│ ├── __main__.py
│ ├── client.py # Duplicati REST API client
│ ├── db.py # Read-only SQLite access (server DB + per-backup DBs)
│ └── server.py # FastMCP server and tools
├── mcp-publication/ # MCP registry publication files
├── requirements.txt # Python dependencies
├── pyproject.toml # Project metadata
├── Dockerfile
├── docker-compose.yml
├── .mcp.json # Claude Code local config (stdio)
├── test_server.sh # Docker container smoke test
├── test_mcp.py # MCP protocol test
├── README.md # This file (English)
└── README_fr.md # French documentation# Smoke test (requires running Docker container)
./test_server.sh
# MCP protocol test (requires running server)
python test_mcp.py
python test_mcp.py localhost:3000uv run mcp dev src/duplicati_mcp/server.pyCheck that DUPLICATI_URL is reachable from the container. If both run in Docker, put them on the same network and use the service name as hostname.
Verify DUPLICATI_PASSWORD matches the password set in Duplicati's web interface. Leave empty if no password is configured.
docker ps | grep duplicati-mcp-server
docker logs duplicati-mcp-serverThis project is licensed under the MIT License — see the LICENSE file for details.
~30 seconds. Free. No account. Every finding cites a rule and a line of evidence.