Veeam Service Provider Console Claude Code Skill

Prerequisites: Install the CLI

This skill drives the veeam-cli binary. You must verify the CLI is installed before invoking any command from this skill. If it is missing, install it first:

1. macOS / Linux:

   bash <(curl -fsSL https://raw.githubusercontent.com/servosity/msp-skills/main/skills/veeam/install.sh)
   

2. Windows (PowerShell):

   iwr -useb https://raw.githubusercontent.com/servosity/msp-skills/main/skills/veeam/install.ps1 | iex
   

3. Verify: veeam-cli --version
4. Ensure ~/.local/bin (macOS / Linux) or %LOCALAPPDATA%\Programs\msp-skills (Windows) is on $PATH.

If --version reports "command not found" after install, the install step did not put the binary on $PATH. Do not proceed with skill commands until verification succeeds.

Drive the full VSPC v3 REST surface - companies, backup servers, jobs, backup agents, protected workloads, alarms, licensing, and billing - from one CLI built for AI agents. A local SQLite mirror powers offline search and cross-tenant commands the web console can't: fleet-health, stale-backups, at-risk, alarms-triage, license-usage, company-overview, and since (drift).

When to Use This CLI

Reach for this CLI when an agent or operator needs to inspect or manage Veeam-protected estates across many tenants from a Veeam Service Provider Console: checking backup job health, finding stale or at-risk protection, triaging alarms, reviewing license consumption, or scripting bulk reads against the VSPC v3 API. The local mirror makes fleet-wide questions fast and offline.

Anti-triggers

Do not use this CLI for:

• Driving a single standalone Veeam Backup & Replication server with no VSPC in front of it (that is the separate VBR REST API)
• Restoring data or running production backup jobs as the system of record - use the Veeam console for irreversible recovery operations
• Managing Microsoft 365 backups directly on a VB365 server that is not registered to the console

Unique Capabilities

These capabilities aren't available in any other tool for this API.

Cross-tenant rollups that compound

• fleet-health - One-pane cross-company backup health: jobs by last status, agents online/offline, and active alarms per tenant.

  The MSP morning-coffee command: reach for it to see every tenant's backup posture in one shot before triaging.

  veeam-cli fleet-health --agent --select companies.company,companies.failed,companies.agents_offline
  

• stale-backups - Every backup job and agent job whose last successful run is older than N days, across all tenants, sorted by staleness.

  The #1 MSP risk question. Use it to catch silently-failing protection before a customer needs a restore.

  veeam-cli stale-backups --days 3 --agent
  

• company-overview - Single-tenant 360: backup servers, job status breakdown, agents, active alarms, protected workloads, and license usage assembled from the local store.

  Answers 'how is this one customer doing?' without a six-tab tour of the web console.

  veeam-cli company-overview --company "Contoso Ltd" --agent
  

Risk and SLA answers

• at-risk - Protected workloads whose latest restore point is older than the RPO threshold (or missing entirely) - the data that would be lost on failure today.

  Turns raw restore-point timestamps into the SLA answer an MSP actually owns.

  veeam-cli at-risk --rpo 24h --agent
  

• alarms-triage - Active alarms grouped by company and severity with first-seen / last-seen from local history, deduped for fleet-wide triage.

  Cuts a noisy multi-tenant alarm feed down to the handful of distinct problems worth acting on.

  veeam-cli alarms-triage --severity Error --agent
  

• since - What changed across the fleet inside a time window: backup jobs that failed or warned, alarms that fired, and agents that newly activated.

  Replaces re-reading the whole console with a focused 'what's new and bad' delta for the shift handoff.

  veeam-cli since 24h --agent
  

Billing and capacity

• license-usage - Per-organization license consumption (used points) with the delta since the previous run.

  Billing-relevant: spot tenants approaching their license ceiling before overage, in one command.

  veeam-cli license-usage --agent --select organizations.organization,organizations.used_points,organizations.delta
  

Command Reference

alarms - This resource collection represents Veeam Service Provider Console alarms.

• veeam-cli alarms acknowledge-active - Assigns the Acknowledged status to a triggered alarm with the specified UID.
• veeam-cli alarms clone - Creates a clone of an alarm template with the specified UID.
• veeam-cli alarms delete - Deletes an alarm template with the specified UID.
• veeam-cli alarms delete-active - Deletes a triggered alarm with the specified UID.
• veeam-cli alarms get - Returns a collection resource representation of all Veeam Service Provider Console alarm templates.
• veeam-cli alarms get-active - Returns collection resource representation of all Veeam Service Provider Console triggered alarms.
• veeam-cli alarms get-active-active - Returns a resource representation of a triggered alarm with the specified UID.
• veeam-cli alarms get-active-by - Returns all status changes of a triggered alarm with the specified template UID.
• veeam-cli alarms get-active-history - Returns a collection resource representation of all status changes of a triggered alarm with the specified UID in
• veeam-cli alarms get-templates - Returns a resource representation of an alarm template with the specified UID.
• veeam-cli alarms resolve-active - Resolves a triggered alarm with the specified UID.

async-actions - This resource collection represents Veeam Service Provider Console REST API async actions.

• veeam-cli async-actions cancel - Cancels an action with the specified UID.
• veeam-cli async-actions get-config - Returns a configuration of an async action service.
• veeam-cli async-actions get-info - Returns a collection resource representation of all active async actions of the current user.
• veeam-cli async-actions get-info-asyncactions - Returns a resource representation of an async action with the specified UID.

authentication - This resource collection allows to authenticate to Veeam Service Provider Console REST API.

• veeam-cli authentication decrypt-pkcs12-container - Decrypts an encrypted PKCS#12 container.
• veeam-cli authentication generate-new-pkcs12-key-pair - Issues a PKCS#12 container with an RSA private key and an X.509 certificate.
• veeam-cli authentication generate-new-rsa-key-pair - Issues an RSA key pair. > You can specify the key size if needed.
• veeam-cli authentication generate-totp-secret - Issues a TOTP secret and a URL-encoded secret.

configuration - This resource collection represents security certificate installed on Veeam Service Provider Console server.

• veeam-cli configuration copy-backup-policy - Creates a copy of a backup policy with the specified UID.
• veeam-cli configuration create-linux-backup-policy - Creates a backup policy for Linux computers.
• veeam-cli configuration create-mac-backup-policy - Creates a backup policy for Mac computers.
• veeam-cli configuration create-windows-backup-policy - Creates a backup policy for Microsoft Windows computers.
• veeam-cli configuration delete-backup-policy - Deletes a backup policy with the specified UID.
• veeam-cli configuration get-all-available-certificates - Returns a collection resource representation of security cerificates on Veeam Service Provider Console server that are
• veeam-cli configuration get-backup-policies - Returns a collection resource representation of all backup policies.
• veeam-cli configuration get-backup-policies-to-assign - Returns a collection resource representation of all backup policies that can be assigned to agents.
• veeam-cli configuration get-backup-policy - Returns a resource representation of a backup policy with the specified UID.
• veeam-cli configuration get-certificate - Returns a Veeam Service Provider Console server security certificate.
• veeam-cli configuration get-linux-backup-policies - Returns a collection resource representation of all backup policies configured for Linux computers.
• veeam-cli configuration get-linux-backup-policy - Returns a resource representation of a Linux computer backup policy with the specified UID.
• veeam-cli configuration get-mac-backup-policies - Returns a collection resource representation of all backup policies configured for Mac computers.
• veeam-cli configuration get-mac-backup-policy - Returns a resource representation of a Mac computer backup policy with the specified UID.
• veeam-cli configuration get-windows-backup-policies - Returns a collection resource representation of all backup policies configured for Microsoft Windows computers.
• veeam-cli configuration get-windows-backup-policy - Returns a resource representation of a Windows computer backup policy with the specified UID.
• veeam-cli configuration install-certificate - Installs a Veeam Service Provider Console server security certificate.
• veeam-cli configuration patch-backup-policy - Modifies a backup policy with the specified UID.
• veeam-cli configuration patch-linux-backup-policy - Modifies a Linux computer backup policy with the specified UID.
• veeam-cli configuration patch-mac-backup-policy - Modifies a Mac computer backup policy with the specified UID.
• veeam-cli configuration patch-windows-backup-policy - Modifies a Windows computer backup policy with the specified UID.

deployment - This resource collection represents deployment tasks.

• veeam-cli deployment get-backup-server-configuration-xml - Returns a resource representation of an example for Veeam Backup & Replication server deployment configuration in the
• veeam-cli deployment get-log - Returns a resource representation of deployment task status.
• veeam-cli deployment get-task - Returns a resource representation of a deployment task with the specified UID.
• veeam-cli deployment get-tasks - Returns a collection resource representation of all deployment tasks.
• veeam-cli deployment get-vone-server-configuration-xml - Returns a resource representation of an example for Veeam ONE server deployment configuration in the XML format.
• veeam-cli deployment wait-task - Initiates an async action that waits for a deployment task with the specified UID to complete.

discovery - This resource collection represents discovery rules and discovered computers.

• veeam-cli discovery create-linux-custom-rule - Creates a Linux rule based on a list of IP addresses and DNS names.
• veeam-cli discovery create-linux-network-based-rule - Creates a Linux network-based discovery rule.
• veeam-cli discovery create-windows-active-directory-based-rule - Create Microsoft Entra ID Discovery Rule for Windows
• veeam-cli discovery create-windows-custom-rule - Creates a Windows rule based on a list of IP addresses and DNS names.
• veeam-cli discovery create-windows-network-based-rule - Creates a Windows network-based discovery rule.
• veeam-cli discovery delete-rule - Deletes a discovery rule with the specified UID.
• veeam-cli discovery delete-scheduled-deployment-task-for-computer - Deletes a computer scheduled deployment task with the specified UID.
• veeam-cli discovery get-computer - Returns a resource representation of a discovered computer with the specified UID.
• veeam-cli discovery get-computers - Returns a collection resource representation of all discovered computers.
• veeam-cli discovery get-computers-by-rule - Returns a collection resource representation of all computers discovered with a rule with the specified UID.
• veeam-cli discovery get-linux-custom-rule - Returns a resource representation of a Linux discovery rule based on a list of IP addresses and DNS names.
• veeam-cli discovery get-linux-custom-rules - Returns a collection resource representation of all Linux discovery rules based on lists of IP addresses and DNS names.
• veeam-cli discovery get-linux-network-based-rule - Returns a resource representation of a Linux network-based discovery rule.
• veeam-cli discovery get-linux-network-based-rules - Returns a collection resource representation of all Linux network-based discovery rules.
• veeam-cli discovery get-linux-rule - Returns a resource representation of a Linux discovery rule with the specified UID.
• veeam-cli discovery get-linux-rules - Returns a collection resource representation of all Linux discovery rules.
• veeam-cli discovery get-rule - Returns a resource representation of a discovery rule with the specified UID.
• veeam-cli discovery get-rules - Returns a collection resource representation of all discovery rules.
• veeam-cli discovery get-scheduled-deployment-task-for-computer - Returns a resource representation of a computer scheduled deployment task with the specified UID.
• veeam-cli discovery get-scheduled-deployment-tasks-for-computer - Returns a collection resource representation of all deployment tasks scheduled for a computer with the specified UID.
• veeam-cli discovery get-time-zones - Returns a collection resource representation of all time zones.
• veeam-cli discovery get-windows-active-directory-based-rule - Returns a resource representation of an Microsoft Entra ID discovery rule with the specified UID.
• veeam-cli discovery get-windows-active-directory-based-rules - Returns a collection resource representation of all Microsoft Entra ID discovery rules.
• veeam-cli discovery get-windows-custom-rule - Returns a resource representation of a Windows discovery rule based on a list of IP addresses and DNS names.
• veeam-cli discovery get-windows-custom-rules - Returns a collection resource representation of all Windows discovery rules based on lists of IP addresses and DNS
• veeam-cli discovery get-windows-network-based-rule - Returns a resource representation of a Windows network-based discovery rule.
• veeam-cli discovery get-windows-network-based-rules - Returns a collection resource representation of all Windows network-based discovery rules.
• veeam-cli discovery get-windows-rule - Returns a resource representation of a Windows discovery rule with the specified UID.
• veeam-cli discovery get-windows-rules - Returns a collection resource representation of all Windows discovery rules.
• veeam-cli discovery install-backup-agent-on-computer - Deploys Veeam backup agent and management agent on a discovered computer with the specified UID.
• veeam-cli discovery install-backup-server-on-computer - Installs Veeam Backup & Replication and management agent on a discovered computer with the specified UID.
• veeam-cli discovery install-linux-backup-agent-on-computer - Deploy Veeam backup agent and management agent on a discovered Linux computer with the specified UID.
• veeam-cli discovery install-vone-server-on-computer - Installs Veeam ONE and management agent on a discovered computer with the specified UID.
• veeam-cli discovery patch-linux-custom-rule - Modifies a Linux discovery rule based on a list of IP addresses and DNS names.
• veeam-cli discovery patch-linux-network-based-rule - Modifies a Linux network-based discovery rule with the specified UID.
• veeam-cli discovery patch-linux-rule - Modifies a Linux discovery rule with the specified UID.
• veeam-cli discovery patch-rule - Modifies a discovery rule with the specified UID.
• veeam-cli discovery patch-scheduled-deployment-task-for-computer - Modifies a computer scheduled deployment task with the specified UID.
• veeam-cli discovery patch-windows-active-directory-based-rule - Modifies an Microsoft Entra ID discovery rule with the specified UID.
• veeam-cli discovery patch-windows-custom-rule - Modifies a Windows discovery rule based on a list of IP addresses and DNS names.
• veeam-cli discovery patch-windows-network-based-rule - Modifies a Windows network-based discovery rule with the specified UID.
• veeam-cli discovery patch-windows-rule - Modifies a Windows discovery rule with the specified UID.
• veeam-cli discovery reboot-computer - Reboots Veeam backup agent on a discovered computer with the specified UID.
• veeam-cli discovery reset-computers-by-rule - Resets results of discovery by a discovery rule with the specified UID.
• veeam-cli discovery schedule-install-backup-server-on-computer - Creates a sheduled task that installs Veeam Backup & Replication and management agent on a discovered computer with the
• veeam-cli discovery schedule-install-vone-server-on-computer - Creates a sheduled task that installs Veeam ONE and management agent on a discovered computer with the specified UID.
• veeam-cli discovery start-rule - Run discovery by a discovery rule with the specified UID.
• veeam-cli discovery start-scheduled-deployment-task-for-computer - Starts a computer scheduled deployment task with the specified UID.
• veeam-cli discovery stop-rule - Stop discovery by a discovery rule with the specified UID.

event-logs - This resource collection represents event log entries.

• veeam-cli event-logs get-activity-logs - Returns a collection resource representation of all activity log records.
• veeam-cli event-logs get-management-agent-tasks - Returns a collection resource representation of all management agent task log records.

infrastructure - Manage infrastructure