> ## Documentation Index
> Fetch the complete documentation index at: https://docs.neoagent.io/llms.txt
> Use this file to discover all available pages before exploring further.

# Connecting Datto Networking to Neo

> Create a Datto Networking API key and secret in the Datto Networking Portal and save them in Neo

You connect Datto Networking once at the MSP level. The key reaches every network its user can reach in the Datto Networking Portal.

## 1. Create the API key

A key acts with the role of the portal user who creates it: an Account Admin reaches every network, a Group Manager or a Network User only the networks given to them. Create the key as the user whose access you want Neo to have.

**1. Open My Settings**

Sign in to the Datto Networking Portal as that user, and click **My Settings** under the email address at the top right.

**2. Add API credentials**

In the **API Credentials** section, click **Add New**.

**3. Copy the key and the secret**

Copy the key and its secret. The key shows only once.

> [!NOTE]
>
> Datto's API documentation says the API is free for accounts with fewer than 100 devices, and that larger accounts ask Datto for pricing.

## 2. Add the key in Neo

**1. Open Integrations**

In the Neo Dashboard, open **Integrations** and find the Datto Networking card, under Networking.

**2. Save the key and secret**

Paste the API key and the API secret and click **Save settings**. Neo checks them against Datto Networking before saving, so a wrong pair is rejected straight away.

## 3. Turn Datto Networking on per agent

Open the agent, go to its **Tools & Settings** tab, click **Networking**, and expand the **Datto Networking** block. Pick one of its **Presets**, or set each area yourself:

| Area | Access levels you can pick | Notes |
| - | - | - |
| **Networks & Devices** | Disabled, Read Only, Read / Write | Networks and their access points, switches and power strips: status, last check-in, model, MAC address, serial, firmware, subscription and end-of-life dates, traffic history and site survey results. Write edits an access point's or power strip's name, description, location and radio settings. |
| **Device Actions** | Disabled, Read Only, Read / Write | Reboot a device, reset a switch or power strip port, upgrade firmware now, re-pair a device, reset an access point's encryption key, check a power strip in, start a site survey scan. |
| **Device Inventory** | Disabled, Read Only, Read / Write | Add a device to a network by its MAC address, move one from another network, remove one. |
| **Network Settings** | Disabled, Read Only, Read / Write | SSIDs, WiFi passwords, captive portal, radio, firmware and maintenance settings, splash page files; switch ports, VLANs, SNMP traps and ACLs; power strip settings. |
| **WiFi Clients & Vouchers** | Disabled, Read Only, Read / Write | The devices on a network's WiFi and their traffic; block, unblock and name them; guest vouchers. |
| **Networks & Network Groups** | Disabled, Read Only, Read / Write | Create and delete networks, and the network groups that file them. |
| **Users & Account** | Disabled, Read Only, Read / Write | Portal users, their roles on networks and groups and their API keys; the account, its owner, audit log and service agreement. |

| Preset | What runs on its own | What asks a technician |
| - | - | - |
| **Read Only** | Every read | No write is allowed |
| **Helpdesk** | Every read, guest vouchers and WiFi client changes | Every other change, reboots included |
| **IT Admin** | Every read, device actions and edits, WiFi clients and vouchers | Device inventory, network settings, networks and users |
| **Full Automation** | Every read and write | Only what always asks (below) |

These always wait for a technician, whatever the preset: deleting a network or a network group, a portal user's password change, a change of account owner, accepting Datto's service agreement, and any write that sets a password, a WPA key, a shared secret or an SNMP community.

## Use it on device-down tickets and audits

An agent on a device-down ticket finds the access point or switch in the client's network, reads whether it is down and when it last checked in, and reboots it when it is up but misbehaving. Map each client's networks on the Organization Mapping tab first: on a ticket, the agent reads only the networks mapped to the ticket's company.

A scheduled agent with no ticket can read every network, for example to list the devices whose subscription is not active or ends this month, with their MAC addresses.

See [Datto Networking API](/agents/tools/networking/datto-networking-api.md) for what the agent can read and change.


This documentation is built and hosted on [Mintlify](https://mintlify.com), a developer documentation platform.