Acronis Cyber Protect Cloud integration
Acronis Cyber Protect Cloud is the backup and cybersecurity platform service providers run for their customers. Manage the tenant tree (partners, customers, units), its users, enabled services, offering items and usage, schedule usage reports and download them, follow backup tasks and activities, list, dismiss and triage alerts, list protection agents and protected workloads, and list, apply and run protection plans on them. Left out: API client, registration-token and identity routes (they mint or carry secrets), restoring deleted tenants and users, branding, pricing, MFA and infrastructure administration, editing access policies and plan drafts. Authentication is an API client (Settings, API clients in the management portal): its client ID and secret get a token from your data center.
Say what should happen.
The workflow builds itself.
What you can do with Acronis Cyber Protect Cloud
Each of these is one operation on one endpoint, available both as a workflow step and as a tool an AI agent can call on its own. Nothing bundles several operations into one action, so what a run did stays readable afterwards.
Most endpoints run on the free plan. A few, mainly the ones that publish on your behalf, need a paid plan.
Tenant, 7 operations
create_tenantCreate tenantPOSTCreates a partner, folder, customer or unit tenant under a parent tenant, with its contact details. Returns the tenant with its id and version.delete_tenantDelete tenantDELETEDeletes a tenant with all its sub-tenants, users and service data, backups included; Acronis documents it as irreversible. Disable the tenant first (update_tenant, enabled false); version comes from get_tenant.disable_application_for_tenantDisable application for tenantDELETETurns an application (service) off for a tenant and its sub-tenants. Acronis documents it as irreversible: the service stops, its offering items are disabled and its data (backups, synced files) is deleted.enable_application_for_tenantEnable application for tenantPOSTTurns an application (service) on for a tenant.get_tenantGet tenantGETReturns one tenant: name, kind, parent, enabled flag, contact (personal data), language, customer id and the version needed to update or delete it.list_tenantsList tenantsGETReturns tenants by their UUIDs, the child tenants of a parent, or a whole subtree, with kind, enabled flag and optional contacts and offering items. Pass one of uuids, parent_id or subtree_root_id. Contacts are personal data.update_tenantUpdate tenantPUTUpdates a tenant (name, contact, enabled flag, customer id, language and more). enabled false suspends it: its users and sub-tenants lose access to services, data is kept. version must be the current one, from get_tenant.
Application, 6 operations
apply_policyApply policyPOSTApplies a protection plan to resources (context.items holds resource ids), which starts protecting those machines on the plan's schedule. Returns the issues found, empty when it applied cleanly.get_applicationGet applicationGETReturns one application (service) with its name, type and usage names.list_applicationsList applicationsGETReturns every application (service) registered on the platform, with its name, type and usage names.list_policy_applicationsList policy applicationsGETLists where policies are applied: each application links a policy to a resource with its enabled flag, status, last and next run times and issues.list_tenant_applicationsList tenant applicationsGETReturns the UUIDs of the applications (services such as Cyber Protection or File Sync and Share) available to a tenant, in items; read each with get_application.revoke_policy_applicationsRevoke policy applicationsDELETERevokes protection plans from resources: the plan stops protecting those workloads. Always pass a filter (policy_id, context_id or a selection id); several ids go as or(id1,id2). Returns the issues per application.
User, 6 operations
create_userCreate userPOSTCreates a user in a tenant with a login and contact details. Use send_user_activation_email to let the user set a password. Returns the user.delete_userDelete userDELETEDeletes a user account and all data tied to it; Acronis documents it as irreversible. Disable the user first (update_user, enabled false); version comes from get_user.get_userGet userGETReturns one user: login, contact (personal data), tenant, enabled and activated flags, notification settings and the version needed to update or delete it.list_tenant_usersList tenant usersGETReturns the UUIDs of a tenant's users, in items; read each with get_user or several at once with list_users.list_usersList usersGETReturns users by their UUIDs or every user of a tenant subtree, with login, contact (personal data), enabled and activated flags. Pass uuids or subtree_root_tenant_id.update_userUpdate userPUTUpdates a user (login, contact, enabled flag, language, notifications); enabled false disables the account. version must be the user's current version, as returned by get_user.
Report, 5 operations
create_usage_reportCreate usage reportPOSTCreates a usage report for a tenant: a one-time or scheduled report, saved or emailed to the given users (result_action send emails them). Returns the report configuration.delete_usage_reportDelete usage reportDELETEDeletes a usage report configuration.get_usage_reportGet usage reportGETReturns a usage report configuration: tenant, level, kind, formats, period, schedule and recipients.list_tenant_reportsList tenant reportsGETReturns the UUIDs of the usage reports a tenant has, in items; read each with get_usage_report.update_usage_reportUpdate usage reportPUTUpdates a scheduled usage report: recipients, level, kind and whether the schedule is enabled. Only scheduled reports can be updated.
Alert, 3 operations
dismiss_alertDismiss alertDELETEDismisses an alert: it no longer appears among the active alerts.get_alertGet alertGETReturns one alert with its type, severity, category, details, tenant and timestamps.list_alertsList alertsGETLists active alerts (failed backups, detected threats, quota and license problems) with type, severity, category, details and tenant. Filter by severity, type, category, tenant, plan or resource.
Activity, 2 operations
get_activityGet activityGETReturns one activity with its state, result, progress, resource, policy and timing.list_activitiesList activitiesGETLists activities (the steps of tasks) with their state, result, progress, resource, policy and the user who started them. Filter by state, resultCode, taskId, resource or dates.
Agent, 2 operations
get_agentGet agentGETReturns one protection agent: host name, OS, online and enabled flags, installed and latest versions, update settings and network interfaces.list_agentsList agentsGETLists the protection agents installed on machines in a tenant and its children: host name, OS, online flag, versions, update settings and network addresses. Filter by hostname, online or os_family.
Count, 2 operations
count_alertsCount alertsGETReturns alert counts, the total and, on request, grouped by tenant, type, severity or category.count_resourcesCount resourcesGETReturns how many resources match the filters (tenant, agent, type, applied plan, search).
Offering item, 2 operations
list_tenant_offering_itemsList tenant offering itemsGETReturns a tenant's offering items (the billable features and quotas of each service) with their status (1 on, 0 off), quota and measurement unit.set_tenant_offering_itemsSet tenant offering itemsPUTTurns offering items on or off for a tenant and sets their quotas, for the applications named in offering_items. Returns the tenant's offering items.
Policy, 2 operations
get_policyGet policyGETReturns one policy, or a whole composite protection plan with full_composite, with its name, type, enabled flag and tags.list_policiesList policiesGETLists protection plans and other policies with their names, types, enabled flags and tags; each item holds a composite policy as a list. Filter by tenant, types, applicability or search.
Resource, 2 operations
get_resourceGet resourceGETReturns one resource (a workload such as a machine or a group) with its type, name, agent, tenant and allowed actions.list_resourcesList resourcesGETLists protected and protectable resources (workloads such as machines, mailboxes and groups) with their type, name, agent and tenant. Filter by tenant, agent, type, applied plan or search.
Stored, 2 operations
download_stored_reportDownload stored reportGETDownloads one generated usage report file (compressed), as listed by list_stored_reports, and stores it as a file.list_stored_reportsList stored reportsGETReturns the generated files of a usage report: id, format, compressed size, creation time and generation status. Download one with download_stored_report.
Task, 2 operations
get_taskGet taskGETReturns one task with its state, result (code, error, warnings), timing, resource, policy and blockers that wait for user input.list_tasksList tasksGETLists tasks (backups, recoveries, scans and other jobs) with their state, result code, error, timing and executor. Filter by state, resultCode, policy, resource or dates; page with limit and after.
Type, 2 operations
get_alert_typeGet alert typeGETReturns one registered alert type.list_alert_typesList alert typesGETLists the registered alert types with their severity, category and texts.
Usage, 2 operations
get_tenants_usagesGet tenants usagesGETReturns the usage metrics of several tenants at once: one item per tenant, with its list of usages.get_tenant_usagesGet tenant usagesGETReturns a tenant's usage metrics, one item per usage (storage, workloads, seats) with its value, measurement unit, edition and offering item.
Access policy, 1 operation
list_user_access_policiesList user access policiesGETReturns a user's access policies: the roles (role_id) the user holds on which tenant or resource.
Category, 1 operation
list_alert_categoriesList alert categoriesGETLists the alert categories, with their names and whether they are disabled.
Child, 1 operation
list_child_tenantsList child tenantsGETReturns the UUIDs of a tenant's direct child tenants, in items.
Client, 1 operation
get_api_clientGet api clientGETReturns an API client by its client ID: the tenant it belongs to (tenant_id, the starting point for tenant calls), its status and when it was last used. The client secret is never returned.
False positive, 1 operation
set_alert_false_positiveSet alert false positivePATCHMarks an alert as a false positive, or removes that mark.
Policy status, 1 operation
list_policy_statusesList policy statusesGETReturns the status of each policy across the resources it is applied to (applications grouped by policy), with paging.
Resource status, 1 operation
list_resource_statusesList resource statusesGETReturns the protection status of resources: each resource with its aggregate status, licensing and the last and next run times of the plans applied to it.
Run, 1 operation
run_policyRun policyPUTRuns a protection plan now on every resource it is applied to, or only on context_ids; this starts backups or scans on real machines. Returns no data; follow the run with list_policy_applications.
Search, 1 operation
search_tenants_and_usersSearch tenants and usersGETSearches the tenants (name, custom id, contact name and email) and users (login, email, first and last name) below a tenant for a text, case-insensitively. Returns personal data of contacts and users.
Send activation email, 1 operation
send_user_activation_emailSend user activation emailPOSTSends the account activation email to a user, from which the user sets a password. Sends an email to a real person. Works only for users located in sub-tenants.
Stat, 1 operation
get_alert_statsGet alert statsGETReturns the number of active alerts and when an alert last changed.
Use Acronis Cyber Protect Cloud from Claude Code, Cursor or Codex
Connect Acronis Cyber Protect Cloud in LiveContext, create an API key in Settings, then add the LiveContext MCP server to your client. Its Acronis Cyber Protect Cloud operations become tools the client can call, next to every other integration you connected.
claude mcp add --transport http livecontext https://livecontext.ai/mcp --header "X-API-Key: YOUR_API_KEY"[mcp_servers.livecontext]
url = "https://livecontext.ai/mcp"
[mcp_servers.livecontext.http_headers]
"X-API-Key" = "YOUR_API_KEY"{
"mcpServers": {
"livecontext": {
"type": "http",
"url": "https://livecontext.ai/mcp",
"headers": {
"X-API-Key": "YOUR_API_KEY"
}
}
}
}How to connect Acronis Cyber Protect Cloud
- Create your workspace
Sign up free. Nothing to install.
- Connect Acronis Cyber Protect Cloud once
Add your Acronis Cyber Protect Cloud connection in Settings. Every tool from this integration reuses it, and secrets are encrypted at rest and visible only to you.
- Describe the job in chat
The workflow builds itself in front of you and picks the endpoints it needs. Drag the steps yourself on the canvas whenever you would rather be explicit.
Acronis Cyber Protect Cloud integration FAQ
What can you do with the Acronis Cyber Protect Cloud integration?
LiveContext exposes 58 operations on Acronis Cyber Protect Cloud, covering tenant, application, user and report.
