Check Your Rubrik Backups and Compliance Through Your Muse

Through a custom connector, your muse can check your Rubrik backups in plain words: see whether your clusters are healthy, count the objects out of compliance, and find the jobs that failed, without opening the Rubrik console.

What it does

The connector adds 19 tools, and every reading tool is read-only. It can read the account, list clusters with connection state and health, and read one cluster with capacity and estimated runway. It can list backup policies, called SLA Domains, with schedule, retention, and protected object count, and read one in full. It can list protected objects, such as virtual machines, databases, and cloud objects, with protection and compliance status, last snapshot, and missed snapshots, and return a compliance count by status, type, cluster, or policy. It can list the snapshots of one object, list recent activity and the task report, and read one activity series to see why a job failed. It can also list anomaly results and threat hunts, including the latest clean snapshot.

How to use it

1. Start an AnythingMCP account and add the Rubrik Security Cloud connector.
2. In Rubrik, open Settings, then Users and Access, then Service Accounts, and add a service account with a read-only role for clusters, policies, objects, events, and threat results.
3. Download its file and copy the client ID, client secret, and your account name into the connector settings.
4. In Muse, open Settings, then Connectors, and add a custom connector with the address AnythingMCP gives you. Sign in and approve.
5. Ask whether all clusters are healthy, how many objects are out of compliance, or which jobs failed in the last 24 hours and why.

What you need

• A Muse account that can add custom connectors
• An AnythingMCP account with the Rubrik connector added
• A Rubrik Security Cloud account where you can add a service account

What to watch for

• The reading tools take no backups, run no recoveries, and assign no policies. Two general write tools are switched off at install. Leave them off unless an admin turns one on for a specific job.
• The service account role decides what the muse can see. A missing permission shows as an access error, not an empty result.
• The client secret is shown only once. If it is lost, create a new service account.
• There is no search inside the files of a snapshot.
• This is a custom connector, and Meta does not review custom connectors. You can disconnect it in Settings at any time. The muse prepares, you decide.