Spec Driven Development
MCP Server that facilitates spec-driven development workflows, not just Vibe Coding.
Description from the maker (original English)
MCP server for Unitrends Backup — appliances, jobs, recovery points, restores, alerts.
These three are never merged into one score: opinions, measurements and popularity are different things.
We have not written a plain-language summary for this one yet. Below are the facts we read from the registry.
Pick the AI app you use, then copy the settings.
UNITRENDS_BASE_URL, UNITRENDS_USERNAME, UNITRENDS_PASSWORD, UNITRENDS_VERIFY_TLS, MCP_TRANSPORT, AUTH_MODE, LOG_LEVELValues marked secret are keys to your account. Never share them or paste them into a chat.
You need
Which app do you use?
Pick your app above. We remember it, so next time the button says “Install in …”.
Open Claude Desktop → Settings → Developer → Edit Config, and paste this into claude_desktop_config.json
{
"mcpServers": {
"unitrends": {
"command": "docker",
"args": [
"run",
"-i",
"--rm",
"-e",
"UNITRENDS_BASE_URL",
"-e",
"UNITRENDS_USERNAME",
"-e",
"UNITRENDS_PASSWORD",
"-e",
"UNITRENDS_VERIFY_TLS",
"-e",
"MCP_TRANSPORT",
"-e",
"AUTH_MODE",
"-e",
"LOG_LEVEL",
"ghcr.io/wyre-technology/unitrends-mcp:v1.1.3"
],
"env": {
"UNITRENDS_BASE_URL": "your-value",
"UNITRENDS_USERNAME": "your-value",
"UNITRENDS_PASSWORD": "your-value",
"UNITRENDS_VERIFY_TLS": "your-value",
"MCP_TRANSPORT": "your-value",
"AUTH_MODE": "your-value",
"LOG_LEVEL": "your-value"
}
}
}
}Run this in your terminal
claude mcp add unitrends --env UNITRENDS_BASE_URL=your-value --env UNITRENDS_USERNAME=your-value --env UNITRENDS_PASSWORD=your-value --env UNITRENDS_VERIFY_TLS=your-value --env MCP_TRANSPORT=your-value --env AUTH_MODE=your-value --env LOG_LEVEL=your-value -- docker run -i --rm -e UNITRENDS_BASE_URL -e UNITRENDS_USERNAME -e UNITRENDS_PASSWORD -e UNITRENDS_VERIFY_TLS -e MCP_TRANSPORT -e AUTH_MODE -e LOG_LEVEL ghcr.io/wyre-technology/unitrends-mcp:v1.1.3Fill in the empty values before running it.
Paste into .cursor/mcp.json in your project, or ~/.cursor/mcp.json
{
"mcpServers": {
"unitrends": {
"command": "docker",
"args": [
"run",
"-i",
"--rm",
"-e",
"UNITRENDS_BASE_URL",
"-e",
"UNITRENDS_USERNAME",
"-e",
"UNITRENDS_PASSWORD",
"-e",
"UNITRENDS_VERIFY_TLS",
"-e",
"MCP_TRANSPORT",
"-e",
"AUTH_MODE",
"-e",
"LOG_LEVEL",
"ghcr.io/wyre-technology/unitrends-mcp:v1.1.3"
],
"env": {
"UNITRENDS_BASE_URL": "your-value",
"UNITRENDS_USERNAME": "your-value",
"UNITRENDS_PASSWORD": "your-value",
"UNITRENDS_VERIFY_TLS": "your-value",
"MCP_TRANSPORT": "your-value",
"AUTH_MODE": "your-value",
"LOG_LEVEL": "your-value"
}
}
}
}Your browser asks to open the app, then the app shows the settings and asks you to confirm. Key values are left empty for you to fill in.
Paste into .vscode/mcp.json in your project
{
"servers": {
"unitrends": {
"type": "stdio",
"command": "docker",
"args": [
"run",
"-i",
"--rm",
"-e",
"UNITRENDS_BASE_URL",
"-e",
"UNITRENDS_USERNAME",
"-e",
"UNITRENDS_PASSWORD",
"-e",
"UNITRENDS_VERIFY_TLS",
"-e",
"MCP_TRANSPORT",
"-e",
"AUTH_MODE",
"-e",
"LOG_LEVEL",
"ghcr.io/wyre-technology/unitrends-mcp:v1.1.3"
],
"env": {
"UNITRENDS_BASE_URL": "your-value",
"UNITRENDS_USERNAME": "your-value",
"UNITRENDS_PASSWORD": "your-value",
"UNITRENDS_VERIFY_TLS": "your-value",
"MCP_TRANSPORT": "your-value",
"AUTH_MODE": "your-value",
"LOG_LEVEL": "your-value"
}
}
}
}Your browser asks to open the app, then the app shows the settings and asks you to confirm. Key values are left empty for you to fill in.
This one runs on your computer, and ChatGPT can only connect to servers on the internet. Pick another app.
Your choice stays on this device in a cookie; no account needed.
UNITRENDS_VERIFY_TLS envMCP_TRANSPORT envAUTH_MODE envLOG_LEVEL envThese settings are generated from the maker’s registry entry. If the README says otherwise, follow the README.
Runs on your computer; the tool list appears in your AI app after you install it.
We check information anyone can see; we have not read the code. Checks that do not apply are left out of the count. · Checked Nov 7, 2026
The registry name was verified with the GitHub account wyre-technology, which owns the repo
We have not read this repo from GitHub yet
We have not read this repo from GitHub yet
This one runs on your computer; there is no internet endpoint
Runs on your computer and uses local settings instead
Runs on your computer; we can only read tool lists from internet endpoints
Compared with every active server in this category in the registry. Stars count only when the publisher owns the repo.
It passed 1 of 1 applicable basic checks. We have not read the code. Before adding a key or token, see what access the server asks for and use a key with only the permissions you need.
You need to fill in: UNITRENDS_BASE_URL, UNITRENDS_USERNAME, UNITRENDS_PASSWORD
It runs on your computer. Your AI app starts it when needed, and data does not pass through the maker’s servers (unless it calls an online service itself).
The GitHub repo last changed –, and the latest version (1.1.3) reached the registry 3 months ago.
Apps that support MCP, such as Claude Desktop, Claude Code, Cursor and VS Code. You also need Docker on your computer.
In the same category: Spec Driven Development, Remote Desktop Commander, Kanal Varna — drains, leaks & plumbing (Varna, BG)
Servers in the same category from other makers, sorted by stars.
Reading a card:★ GitHub starsiThree pillars: reviews · checks · usageiUpdated = latest version published to the registryi
MCP Server that facilitates spec-driven development workflows, not just Vibe Coding.
Remote Desktop Commander: use files, terminal and processes on your own computers from any AI app.
Drain unblocking, leak detection & plumbing in Varna, Bulgaria: services, prices, areas, contact
Copied from the maker’s repo as written. PopNx MCP has not reviewed or endorsed it. HTML, images and scripts are removed. Links lead off this site.
A Model Context Protocol server exposing the Unitrends Backup API to Claude and other MCP clients.
Surface backup posture from your Unitrends appliances (or MSP Console) directly to AI assistants — list appliances and protected assets, monitor running and historical backup jobs, browse recovery points, queue restores and replication, and review open alarms and RPO compliance.
unitrends_get_appliance renders as an interactive card in MCP Apps hosts (Claude Desktop/web); neutral by default, brandable via window.__BRAND__ injection or MCP_BRAND_* env vars; plain-JSON behavior is unchanged in other hosts| Tool | Purpose |
|---|---|
unitrends_list_appliances | List appliances under the MSP Console |
unitrends_get_appliance | Get a single appliance's details (renders as an interactive card in MCP Apps hosts) |
unitrends_list_assets | List protected assets (require applianceId — elicits if missing) |
unitrends_get_asset | Fetch a single asset detail |
unitrends_list_running_jobs | Currently running and queued backup jobs |
unitrends_list_job_history | Historical jobs (date-range elicitation) |
unitrends_list_recovery_points | Recovery points for an asset |
unitrends_queue_restore | Queue a restore (DESTRUCTIVE — requires confirmation) |
unitrends_get_restore_status | Check restore progress |
unitrends_list_alerts | Open alarms |
unitrends_get_success_rate | RPO compliance report (date-range elicitation) |
Copy .env.example. Leave CONDUIT_S2S_SECRET empty in that file.
The stdio transport reads these variables and does not use CONDUIT_S2S_SECRET.
export UNITRENDS_BASE_URL="https://unitrends.example.com"
export UNITRENDS_USERNAME="..." export UNITRENDS_PASSWORD="..." export UNITRENDS_VERIFY_TLS="true" # 'false' for self-signed appliances
CONDUIT_S2S_SECRET is required when MCP_TRANSPORT=http. If it is empty, or a known placeholder (changeme, change-me, placeholder, secret, example, your-s2s-secret, your-secret, replace-me, replace-with-a-real-secret, s2s-secret), the process logs an error and exits non-zero. It never prints the secret. Generate one with openssl rand -hex 32.
MCP_ALLOW_INSECURE_DEV=1 is the only way to start HTTP without that secret. The flag must be exactly 1. The process logs a warning, does not check X-Gateway-S2S, and listens on 127.0.0.1 only. A non-loopback MCP_HTTP_HOST (including 0.0.0.0) is ignored in that mode and the override is logged. A known placeholder still refuses to start; unset the secret to use the bypass.
MCP_HTTP_HOST is honored when a real secret is set, including 0.0.0.0. When MCP_HTTP_HOST is unset and a secret is set, the server binds 0.0.0.0. When there is no secret, the bind address is 127.0.0.1. The container image sets MCP_HTTP_HOST=0.0.0.0.
With a real secret, every /mcp request must include X-Gateway-S2S. The value is t= ,v1= . The MAC is HMAC-SHA256 over the ASCII string t= (the same prefix that appears in the header), keyed with CONDUIT_S2S_SECRET. The timestamp must be within 300 seconds of the server clock. A missing or invalid header is 401 and is rejected before any vendor credential is read.
/health stays unauthenticated, does not read credentials, and is the container health check.
AUTH_MODE=gateway (the Compose default) requires these headers on every /mcp request. A request missing any of the required headers is 401 and does not fall back to UNITRENDS_* in the process environment.
X-Unitrends-Base-URL (required)X-Unitrends-Username (required)X-Unitrends-Password (required, secret)X-Unitrends-Verify-TLS (optional, default true)X-Gateway-S2S (required when CONDUIT_S2S_SECRET is set)// Gateway injects vendor credentials and the X-Gateway-S2S proof
const response = await fetch("http://gateway:8080/mcp", { method: "POST", headers: { "content-type": "application/json", accept: "application/json, text/event-stream", "x-gateway-s2s": " ", "x-unitrends-base-url": "https://unitrends.example.com", "x-unitrends-username": "your_username", "x-unitrends-password": "your_password", }, body: JSON.stringify({ jsonrpc: "2.0", id: 1, method: "tools/list" }), });
Single-tenant HTTP (AUTH_MODE=env, the image default) still requires a valid X-Gateway-S2S header, then reads UNITRENDS_* from the environment when the request does not carry credential headers.
npm install
npm run build npm start # stdio
CONDUIT_S2S_SECRET="$CONDUIT_S2S_SECRET" MCP_TRANSPORT=http npm start
MCP_TRANSPORT=http MCP_ALLOW_INSECURE_DEV=1 npm start
The image listens on 0.0.0.0 inside the container and defaults to AUTH_MODE=env. Publish the port on loopback and pass the S2S secret. HTTP will not start when CONDUIT_S2S_SECRET is empty or a known placeholder.
docker build -t unitrends-mcp .
docker run \ -e CONDUIT_S2S_SECRET="$CONDUIT_S2S_SECRET" \ -e UNITRENDS_BASE_URL="https://unitrends.example.com" \ -e UNITRENDS_USERNAME="..." \ -e UNITRENDS_PASSWORD="..." \ -p 127.0.0.1:8080:8080 \ unitrends-mcp
Gateway mode does not read those vendor variables. Credentials arrive on each request, and the request must also carry X-Gateway-S2S signed with CONDUIT_S2S_SECRET:
docker run \
-e CONDUIT_S2S_SECRET="$CONDUIT_S2S_SECRET" \ -e AUTH_MODE=gateway \ -p 127.0.0.1:8080:8080 \ unitrends-mcp
Compose refuses to start when CONDUIT_S2S_SECRET is unset or empty, sets AUTH_MODE=gateway, does not inject UNITRENDS_BASE_URL, UNITRENDS_USERNAME, or UNITRENDS_PASSWORD, and publishes 127.0.0.1:8080:8080:
CONDUIT_S2S_SECRET="$CONDUIT_S2S_SECRET" docker compose up
Apache 2.0 — see LICENSE.