SkyKick + AI in 60 seconds
Unofficial. Community-built Claude Code Skill and MCP server for the SkyKick API. Not affiliated with, endorsed by, or sponsored by ConnectWise, LLC.
Awaiting live verification - passes every mechanical gate (build, command-surface, claims, install). Be the first to confirm it against your tenant: report it works.
Run one fleet-sync, then ask your AI which SkyKick customers have a backup gap right now. It reads every subscription’s Exchange/SharePoint posture, snapshot recency, coverage, and retention from a local copy and answers across all your tenants at once - the cross-customer view the per-tenant SkyKick portal never rolls up.
New to the term? An MCP server is the same thing ChatGPT calls an app or connector, Claude on the web calls a connector, and Claude Code calls a Skill. One thing, many names →
Install in 60s → View on GitHub →
Instead of clicking through SkyKick, just ask
Instead of Log into the SkyKick partner portal and open each customer one at a time to eyeball whether Exchange and SharePoint backup are on and recent.
just ask: “Which of my SkyKick customers has a backup gap right now?”
Your agent runs: skykick-cli fleet-health --flag-gaps --agent
Instead of Export per-tenant snapshot reports and scan them by hand for mailboxes that quietly stopped backing up.
just ask: “Show me every mailbox that hasn’t been snapshotted in the last two days.”
Your agent runs: skykick-cli stale-snapshots --hours 48 --agent
Instead of Manually reconcile each tenant’s discovered mailboxes and sites against what’s actually enabled after onboarding a new client.
just ask: “What’s discovered but not protected across all my tenants?”
Your agent runs: skykick-cli coverage-gaps --type all --agent
See it in 30 seconds
Demo data is simulated. Every command shown exists in the real CLI.
What it does
| Question your MSP keeps asking | Command your agent runs |
|---|---|
| Which customers have a protection gap right now? | skykick-cli fleet-health --flag-gaps --agent |
| Whose mailboxes haven’t been snapshotted in 48 hours? | skykick-cli stale-snapshots --hours 48 --agent |
| What’s discovered but not actually being backed up? | skykick-cli coverage-gaps --type all --agent |
| Which tenants fall below our retention floor? | skykick-cli retention-audit --floor-days 365 --agent |
| Where is autodiscover off, so new mailboxes silently never enroll? | skykick-cli autodiscover-audit --only-off --agent |
| What protection changed since my last review? | skykick-cli drift --agent |
| What open alerts exist across the whole fleet, worst first? | skykick-cli alert-sweep --agent |
| How does backup posture roll up by partner? | skykick-cli partner-rollup --agent |
Full command reference at github.com/servosity/msp-skills/blob/main/skills/skykick/guide.md.
What makes this one different
Most SkyKick MCP wrappers proxy each question into a live API call, and the SkyKick API only serves data one subscription at a time - no fleet endpoint, no skip paging on alerts. Asking ‘which of my 50 tenants has a gap’ becomes 50+ sequential calls every single time. This skill runs fleet-sync once into a local SQLite store, then fleet-health, stale-snapshots, coverage-gaps, and drift are instant local queries the API cannot answer directly.
The SkyKick portal is per-customer and has no AI surface; this skill adds the cross-tenant posture, staleness, coverage, retention-compliance, and partner roll-up views the portal never aggregates, and hands them to whatever agent you already use. It complements the portal - restores and configuration still happen there.
Also from Servosity. Backup & DR is Servosity’s own field - the first-party Servosity connector brings this same fleet-wide, local-mirror approach (fleet attention, stale backups, restores, QBR reporting) to Servosity Backup and DR.
The pain this closes
- Microsoft 365 backup is set-and-forget until it silently fails - a mailbox stops snapshotting, a new hire never enrolls, retention drifts below your compliance floor - and the worst time to find out is when a customer asks for a restore.
- The SkyKick portal shows one customer at a time. With 30-50 tenants there is no single screen that answers ‘who is not fully protected today’, so backup verification quietly falls off the weekly routine.
Install
Works in any of these agents - pick yours:
| Agent | Quick install |
|---|---|
| Claude Desktop | Step-by-step → |
| ChatGPT (Plus/Pro+) | Step-by-step → |
| Claude Code | Step-by-step → |
| Codex CLI | Step-by-step → |
| Cursor, Windsurf, Cline, Continue, Zed, Copilot, Gemini, Hermes, OpenClaw | Which agent? → |
Quickest path for everyone else (terminal):
macOS / Linux:
bash <(curl -fsSL https://raw.githubusercontent.com/servosity/msp-skills/main/skills/skykick/install.sh)
Windows (PowerShell):
iwr -useb https://raw.githubusercontent.com/servosity/msp-skills/main/skills/skykick/install.ps1 | iex
After install, authenticate once with your SkyKick credentials, then verify with skykick-cli --version.
Safety model
| Tier | Examples | Recommended agent policy |
|---|---|---|
| Read | fleet-health, stale-snapshots, coverage-gaps, retention-audit, autodiscover-audit, drift, partner-rollup, alert-sweep (without –apply), backup list / mailboxes / sites / storage-settings / subscription-settings, alerts list, identity | Allow |
| Write (routine) | alerts complete, alert-sweep –complete |
Preview with –dry-run, then a reviewed write |
| Destructive / config | none - the wrapped SkyKick API surface has no delete, credential-rotation, or admin commands | Human-in-the-loop only |
The skill is read-first: every posture, staleness, coverage, retention, autodiscover, drift, alert, and partner view only reads. It can change a small, explicit set of things, all of which POST to the live SkyKick API: marking alerts complete (one at a time, or in bulk only with –apply), triggering Exchange mailbox and SharePoint site discovery, and bulk import from JSONL. There are no delete, credential, or admin commands. Keep an autonomous agent to read plus previewed writes, and require a human to approve the completion, discovery, and import commands. Full details in governance.md.
Frequently asked questions
Does this work with ChatGPT?
Yes, on paid ChatGPT plans. ChatGPT connects to remote MCP servers over HTTPS, so you expose the local SkyKick MCP server via a secure bridge. Step-by-step in the install guide.
Do I need to know how to code?
No. Paste one sentence into Claude Code or Codex and your agent does the install, or run a one-line installer. You enter your credentials once.
Is my SkyKick data safe?
Your data stays on your machine. The CLI, MCP server, and the local mirror are all local. The AI sees query results, not raw bulk data, and credentials are never bundled or transmitted by MSP Skills.
What does it cost?
Free. Apache-2.0 licensed. You pay only for whichever AI agent you already use.
Do I need to be a SkyKick partner, and will this hit my API rate limits?
Yes - it authenticates with SkyKick Partner API client credentials (your API user ID and partner subscription key) from your SkyKick / ConnectWise Cloud Services partner account, and reads only what those credentials already permit. On rate limits: fleet-sync fans out per subscription with bounded concurrency and caches results in local SQLite, and SkyKick rate-limits the token endpoint aggressively, so the CLI mints and reuses cached tokens. Day-to-day questions run against the local store and never re-hit the API; you control –workers and –rate-limit.
Status
Beta. Validated against the SkyKick API surface and being validated with MSPs running it live against their own production tenants in our weekly Build Sessions.
Standards. Conforms to the open Agent Skills spec (Anthropic, Dec 2025; 40+ agents). MCP-compatible - works with any MCP-capable agent including Hermes. OpenClaw-ready (frontmatter pre-wired, awaiting OpenClaw launch).
Maintained by Servosity for the MSP community. Apache-2.0 licensed. Built with CLI Printing Press.