Rubrik Security Cloud

Install

Works with Claude Code, Codex, VS Code, Cursor, Windsurf, Claude Desktop. Read the repository before you give any tool access to your data.

npx agentmarket install connector/rubrikinc-rubrik-mcp

About

No reviews yet. Installed it? Reviews come from verified installers only. How reviews work

Permissions

What this server can do and what it asks for, from its tool list, install config and code. Checked Oct 25, 2026.

Tools

11 read · 0 write · 2 delete

Secrets

1 (API keys, tokens or passwords)

Install scripts

None found

Runs as

Python package

Tools (13)

Read from the source code; the running server may differ. Descriptions are the server’s own words; hidden characters are shown as [U+…].

• rsc_delete_workflowcan change or delete data

  Delete a user-defined workflow from the MCP config dir's workflows/ folder. Location is ~/.config/rubrik-mcp/workflows/ by default, or under $RUBRIK_MCP_CONFIG_DIR when set. Removes the workflow file from disk. The workflow remains callable in the current server session but will not load on next restart. Args: name: The workflow name (as returned by rsc_list_workflows). Returns: Dict with status, name, and path of the deleted file.

• rsc_describe_operation_fullread-only

  Get an operation's signature with all input types expanded inline. Returns an operation's argument signature with all input/enum types expanded inline — recursively up to `depth` levels. Combines the operation lookup and rsc_describe_type into one call so you have everything needed to construct a correct query without guessing. Args: name: camelCase operation name (e.g. "azureNativeVirtualMachines"). operation_type: "query" or "mutation". depth: How many levels of input types to expand (default 2). Returns: Dict with operation details plus: - "expanded_types": all refe…

• rsc_describe_typeread-only

  Get the definition of a GraphQL type used in RSC operations. Args: name: Type name (e.g. "CreateGlobalSlaInput", "SlaAssignTypeEnum"). Returns: Dict with name, kind, and either: - fields: {fieldName: {type, description}} for objects/inputs/interfaces - values: [str] for enums - types: [str] for unions

• rsc_execute_operationread-only

  Execute a raw GraphQL query against the live RSC API. This tool supports queries only. Mutations are not available via raw GraphQL — use built-in tools (rsc_take_on_demand_snapshot, etc.) for supported write operations. If you submit a mutation, this tool returns a mutation_blocked error with the attempted operation so Claude can generate a Python code sample for you. IMPORTANT: Write `operation` as a single line with no newlines or extra whitespace. Multi-line strings appear as ugly \n escape sequences in the tool call display. Good: "query { nodes { id name } }" Requires RSC credentials —…

• rsc_get_clustersread-only

  List Rubrik CDM clusters registered in RSC. Use for any question about cluster inventory, connection status (connected/disconnected/degraded), CDM version, storage capacity, runway, sync health, node health, or hardware warnings. Filters: name, connection status, cluster type. Each result includes: - Identity: id, name, version, type, productType - Status: status (Connected/Disconnected/Initializing), isHealthy - Capacity: metric.totalCapacity, usedCapacity, availableCapacity (bytes) - Runway: estimatedRunway (days before storage is full) - Nodes: clusterNodeConnection.count (number…

• rsc_get_eventsread-only

  Get recent events and activity for workloads. Returns backup jobs, failures, anomalies, and other activity. Always scoped to a time window (default: last 24 hours) to keep queries fast. For failure details, each event includes the error message, reason, and recommended remedy where available. Args: last_hours: How far back to look, in hours. Default 24. Always provide this — omitting a time range makes the query very slow. workload_id: Filter to a specific workload FID (from rsc_get_workloads). Use this to answer "why did the backup fail for workload X". object_n…

• rsc_get_sla_domainsread-only

  List SLA Domains (protection policies) configured in RSC. Use for any question about protection policies — filter by name, protected workload type (including Kubernetes), cluster, or retention lock status. Also use for: counting SLA policies, finding which SLAs protect a specific workload type, identifying retention-locked SLAs, or finding SLAs with specific replication or archival configurations. Each result includes: - Identity: id, name, description - Object types: objectTypes (SlaObjectType enum values for workloads this SLA covers) - Coverage: protectedObjectCount (number of worklo…

• rsc_get_workloadsread-only

  List workloads with protection, compliance, usage, and backup status. Each result includes: - Identity: fid, name, objectType - SLA: slaDomain (assigned SLA), protectionStatus (Protected/NoSla/DoNotProtect) - Compliance: complianceStatus (IN_COMPLIANCE, OUT_OF_COMPLIANCE, etc.) - Backup history: lastSnapshot, localSnapshots, missedSnapshots, totalSnapshots - Usage: physicalBytes, logicalBytes - Location: location (e.g. vCenter, host, or instance the workload lives on), cluster (Rubrik cluster managing the workload) Args: object_type: Filter by workload type, e.g…

• rsc_list_workflowsread-only

  List all user-defined workflows in the MCP config dir's workflows/ folder. Location is ~/.config/rubrik-mcp/workflows/ by default, or under $RUBRIK_MCP_CONFIG_DIR when set. Returns name, description preview, step count, and the resolved file path for each workflow.

• rsc_save_workflowcan change or delete data

  Save a multi-step workflow as a named, callable MCP tool. Call this after completing a workflow in conversation to persist it for future use. The workflow is written to the workflows/ dir under the MCP config directory (~/.config/rubrik-mcp/workflows/ by default, or under $RUBRIK_MCP_CONFIG_DIR when set) and registered immediately. It loads automatically on next server start. The exact file path is returned in the response. Provide either `spec` (the complete workflow dict) or `steps` + the other fields individually. Passing `spec` is simpler when the LLM has already constructed the full def…

• rsc_search_helpread-only

  Search Rubrik KB articles, product documentation, and known issues. Use when: an RSC event or workload has a failure/error message, the user asks a troubleshooting or "how do I" question, or an error code (e.g. RBK91030123) is present. Always call this before answering from memory — KB articles reflect the current product state. Results include title, description snippet, source type, and a direct link to the full article. Args: query: Free-text search string (e.g. "ransomware recovery", "SLA not applying"). source: Limit results to one source. One of: KB_ARTICLES, PRODUCT_DOCS, …

• rsc_search_schemaread-only

  Search the full RSC GraphQL schema to find relevant operations. Searches operation names/descriptions, field semantics, and type-level vocabulary in one call and returns the best candidate operations ranked by relevance. Use this whenever you need to find an operation and don't already know its name. The search runs three complementary indexes: - Operation index: matches operation names and descriptions directly - Field index: finds concepts buried in nested type fields (e.g. "who is logged in" → Group.activeUsers → operations returning Group) - Type index: matches domain concepts to opera…

• rsc_wait_for_jobread-only

  Description is built at runtime.

Signals

Stars

2

Forks

1

Open issues

0

Weekly downloads

364

Last commit

Oct 22, 2026 (7 days ago)

Last release

Oct 22, 2026 (7 days ago)

Last package publish

Oct 22, 2026 (7 days ago)

From GitHub (fetched Oct 24, 2026) and the package registry.

Details

Registry name

io.github.rubrikinc/rubrik-mcp

Version

0.10.20261012

Auth

API key

Packages

pypi rubrik-mcp

License

MIT

Repository

github.com/rubrikinc/rubrik-mcp

Website

developer.rubrik.com

First seen

Oct 24, 2026

Last checked

Oct 24, 2026

Source

Official MCP Registrygithub-graphql