RMM & Endpoint

Datto RMM

Manage Datto RMM sites, devices, alerts, and on-demand jobs from plain-language requests.

Dex connects to Datto RMM (formerly CentraStage, by Kaseya) through its REST API and lets MSP admins and end users run everyday monitoring and remediation operations in natural language — listing sites and devices, inspecting device hardware and status, reviewing open alerts, checking patch and antivirus compliance, looking up installed software, and running Quick Jobs on demand — with policy guardrails, per-tenant site scoping, and audit logging.

Book a Demo

What Dex does with Datto RMM

Dex handles both admin workflows and employee self-service — all policy-guardrailed and audit-logged.

For admins (CoAdmin)

List every site and device across the Datto RMM account, scoped per customer tenant
Drill into a device for hardware, operating system, last-seen time, and online status
Review all open alerts for a site or device and inspect alert detail
Check patch status and compliance for any device in the fleet
Review antivirus status and threat state for a device
Pull installed software and audit data captured by the Datto RMM agent
Run Quick Jobs and components on demand against a device or group of devices
Isolate each customer to its own devices through path-based site scoping for safe multi-tenant operation

For employees (self-service)

Check whether your own device is online and what Datto RMM is reporting
Look up the patch compliance status of your own computer
Review the antivirus status flagged on your device before contacting IT
See the installed software and audit details Datto RMM has for your machine

Just ask Dex

Your team types a request in plain language. Dex investigates, plans, and executes — with the right guardrails.

Admin prompts

>List every device at the "Acme HQ" site that is currently offline
>Show me all open alerts for site 5678 and the detail on the critical ones
>What is the patch compliance status for device 11111?
>Run the "Restart Print Spooler" Quick Job on every workstation at the "Branch-Toronto" site
>Pull the installed software audit for device 22222

Employee prompts

>Is my computer online in Datto RMM?
>What is the patch status on my laptop?
>Has Datto RMM flagged any antivirus issues on my device?
>What software does Datto RMM see installed on my machine?

Policy actions

Every action Dex can take on Datto RMM is declared, scoped, and guardrailed. Admins control which apply, who approves them, and whether they're limited to self-service.

Action	What it does	Guardrails
`datto_rmm_list_devices`	List and view sites and devices in Datto RMM	self-only
`datto_rmm_view_alerts`	View open alerts and alert detail for sites and devices	self-only
`datto_rmm_view_compliance`	View patch status, antivirus status, and installed software audit for a device	self-only
`datto_rmm_run_job`	Run Quick Jobs and components on demand against devices	approval

How to configure Datto RMM

Onboarding takes minutes. Dex validates your credentials before saving them.

Setup steps

1
Sign in to your Datto RMM web portal as an administrator and go to Setup > Users.
2
Open the user that Dex should authenticate as and find the API section ("Generate API Keys").
3
Generate the API Key and API Secret Key for that user and copy both values.
4
Note your platform API URL shown on the user page — it is region-specific (e.g., https://zinfandel-api.centrastage.net).
5
In Dex, enable the Datto RMM integration and paste the API URL, API Key, and API Secret Key.
6
Dex validates the credentials by requesting an OAuth2 token and listing sites before saving, then you configure policy actions and approval requirements.

Vendor documentation ↗

Credentials required

api_url: Region-specific Datto RMM API URL shown on the user page (e.g., https://zinfandel-api.centrastage.net)
api_key: API Key generated for the user in Setup > Users (Generate API Keys)
api_secret_key: API Secret Key generated alongside the API Key for the same user

Requirements

•Datto RMM (CentraStage) subscription with at least one site and one enrolled device
•API Key and API Secret Key generated per user in Setup > Users
•API URL must match your platform region — pinotage, merlot, syrah, zinfandel, vidal, etc. each have their own host
•The API uses an OAuth2 password grant with the API keys to obtain an access token
•For MSPs, per-tenant isolation is enforced via path-based site scoping so each customer sees only its own devices

Related integrations

See Dex run Datto RMM

Book a 30-minute walkthrough with our team and see how autonomous IT works in your environment — or get started for free.

Book a Demo Browse all integrations →