Barndoor

Barndoor AI is the control plane for agentic AI, providing secure access and governance for AI agents and Model Context Protocol (MCP) servers. Founded in 2024 by Oren Michels (founder of Mashery), Barndoor enables enterprise IT, security, and developer teams to register agents, govern MCP server access through policy, broker OAuth connections to backend SaaS, and proxy MCP traffic with runtime policy enforcement and full audit trails. The Barndoor Platform REST API manages servers, connections, policies, agents, and MCP / SSE request proxying. Python, TypeScript, and Go SDKs are published on GitHub alongside Rust SDKs (Cerbos, official MCP, MCP OAuth compliance suite) and a Crew AI example. Deployment options include SaaS (trial), private cloud, and on-premises (Enterprise).

Barndoor publishes 13 API contracts indexed on the APIs.io network, including Agents API, Connections API, MCP Proxy API, and 10 more. Tagged areas include AI Agents, AI Governance, MCP, Policy Enforcement, and OAuth.

The Barndoor catalog on APIs.io includes 1 JSON-LD context and 2 Spectral governance rulesets.

Barndoor’s developer surface includes authentication, engineering blog, documentation, API reference, developer portal, signup flow, pricing, and 29 more developer resources.

🌐 Visit website 📡 Profile data on GitHub

59.0/100 strong ▬ flat Agent 39/100 agent ready Front door AI 6/6 dominant Heartbeat 100/100 alive open core · MIT Full breakdown ↓
scored 2026-11-06 · rubric v0.27.0 · Show this score on your site →

AccessFreemiumSelf serveFree trial⚡ Free to try

1 published contract 1 MCP Servers 14 Features 7 Use Cases

AI Agents AI Governance MCP Policy Enforcement OAuth Identity Security Audit Control Plane Authentication

What this lets a business do 2

Business capabilities this provider's published APIs can perform, derived from its own contracts. Browse all capabilities →

Cybersecurity Management

BC-620

ConnectionsPolicies

POST /api/servers/{server_id}/connect GET /api/v2/policies/summary GET /api/v2/policies POST /api/v2/policies/validate

Agent Infrastructure & Agentic Commerce

AE-100

Agents

DELETE /api/agents/{agent_id} POST /api/agents

Kin Score

Kin Score How this is scored →
scored 2026-11-06 · rubric v0.27.0

Composite quality — 59.0/100 · strong

Contract Quality 9.7 / 16

Developer Ergonomics 6.3 / 13

Access Clarity 9.2 / 13

Operational Transparency 3.3 / 8

Contract Governance 2.1 / 8

Discoverability 4.9 / 7

Regulatory Posture 4.1 / 15

Open Source Surface 8.5 / 10

Create-or-Update Ergonomics 0.0 / 10

Agent readiness — 39/100 · agent ready

Machine-Readable Contract 18 / 18

Agentic Access Contract 10 / 10

Documented Reversibility 0 / 6

MCP Server 12 / 12

Machine-Readable Auth 10 / 10

Idempotency 0 / 9

Stable Error Semantics 8 / 8

Request/Response Examples 7 / 7

Rate-Limit Signaling 7 / 7

Typed Event Surface 0 / 6

Agent Skills 0 / 5

Well-Known Catalog 0 / 4

Consent & Bot Identity 0 / 3

A2A Agent Card 0 / 8

Dry-Run / Simulate Mode 0 / 4

Delegated User Identity 0 / 6

Protected Resource Metadata 0 / 5

Registration Without a Human 0 / 6

Agentic Commerce Well-Known Document 0 / 5

Pagination 5 / 5

Distinct Operations 3 / 3

MCP Tool Quality 6 / 6

Regulatory Posture applies to this provider. Its tags matched the Horizontal (data, software, accessibility, platform) regime, so Regulatory Posture carries 15 points of the composite. If this regime is wrong for your business, say so on your provider repo — the applicability map is public and we will correct it.

Open Source Surface applies to this provider. This product is open source and we read its repository directly, so Open Source Surface carries 10 points of the composite. It is scored from what the repository actually publishes — a security policy, a contribution guide, a release history, a code of conduct — read live from the provider rather than inferred from our own catalog pointers. This facet adds; nothing was taken away to make room for it. An open-source project is not excused from the commercial facets, because exemption would strip it of the points it does earn. If we have the wrong repository, or this product is not open source, say so on your provider repo and we will drop the facet rather than have you publish against it.

Create-or-Update Ergonomics applies to this provider. This API accepts writes, so it carries 10 points of the composite. It is scored from the published contracts themselves: whether a caller can create-or-update in one call, whether the write accepts a key the caller already holds, and whether the response says which branch ran. Without that, every write needs a search-and-branch in front of it, and the first time that check is skipped a duplicate record is created. Scored against the observed mean rather than raw — a provider at the catalog average is unchanged by this facet, not penalised by it.

The six quality facets above are damped to 65 points between them, because both conditional facets apply and carry 35 points together. That is why each facet's contribution is shown against a damped maximum: raising a quality facet moves the composite by 65% of its nominal weight, not 100%. The full arithmetic is at apis.io/rating/.

Show this score on your site.

It updates itself when the score changes. Paste this where you link to your API docs:

<a href="https://apis.io/providers/barndoor/"><img src="https://apis.io/badge/barndoor/card.svg" alt="Barndoor on APIs.io — Kin Score by API Evangelist"></a>

Other styles, a README pill and a shields.io endpoint are on the badge page.

Raise your score.

Agent readiness — checks not met, largest first (exact, from this profile):

Idempotency +9 pts — OpenAPI mutating operations declare an idempotency key — a header, a request-body property, or a named de-duplication token whose own description says so (verified); else common[].type matches /idempoten/i (documented)
A2A Agent Card +8 pts — a2a/-a2a.yml manifest, graded on conformance.grade against A2A 1.0.0
Registration Without a Human +6 pts — a `registration_endpoint` in the served RFC 8414 / OIDC discovery document
Delegated User Identity +6 pts — a served discovery document listing authorization_code in grant_types_supported (served), else an oauth2 authorizationCode flow or openIdConnect declared in an OpenAPI (documented)
Typed Event Surface +6 pts — AsyncAPI document, OR webhooks/callbacks objects in the as-published OpenAPI, OR common[].type includes Webhooks
Documented Reversibility +6 pts — a reversal operation in the contract, graded up when a window is documented too

6 more unmet checks in the Agent Readiness table above.

Kin Score — facets with the most composite points still available (weight × headroom):

Developer Ergonomics scores 48.8 — up to +10.2 composite points
Contract Quality scores 59.6 — up to +10.1 composite points
Contract Governance scores 27.3 — up to +8.7 composite points

Each check links to what satisfies it. Publish the artifact, or tell us where it already lives, and the score moves on the next scoring run.

Improve this rating by publishing the missing artifacts — every area above can be raised, and the full rubric is at apis.io/rating/. Every facet and dimension name above is a link: it opens that measurement's own page — what it means, the exact checks that feed it, how the whole catalog distributes on it, and the providers at the top of it. This rating is computed from the provider profile at artifacts.apis.io/barndoor/apis.yml: open an issue on github.com/api-evangelist/barndoor to ask a question or point us at an artifact you publish. Submit an artifact on GitHub — free → Manage your own listing — the Influence plan, $499/mo →

Standards implemented 5

Standards this provider implements or carries. De facto ones are profiled and measured by the API Commons; formal ones come from the standards directory and are linked by the provider's own tags. The evidence column says how each claim was established — not that it was made.

Model Context Protocol (MCP)

measured — observed by APIs.io (verified)

OAuth

tagged — the provider's own APIs.json carries the standard as a tag; implementation not verified

The OpenAI Interface

prose — states compatibility; nothing published to check it against

2 core of 338 operations graded · api-commons/models

The S3 Interface

prose — states compatibility; nothing published to check it against

8 core of 116 operations graded · api-commons/storage

OpenAPI

measured — observed by APIs.io (published)

APIs 13

Individual APIs this provider publishes, each with its own machine-readable definition.

Barndoor Python SDK

Python SDK for the Barndoor AI Platform. Wraps the Platform REST API, handles Auth0 PKCE login (`loginInteractive()`), discovers governed MCP tools, brokers OAuth connections to...

Barndoor TypeScript SDK

TypeScript SDK for the Barndoor AI Platform. Browser- and Node-friendly client for Auth0 PKCE login, governed MCP tool discovery, OAuth connection initiation, and proxying MCP /...

Barndoor Go SDK

Go SDK for the Barndoor AI Platform. Server-side client for registering agents, managing MCP servers and policies, brokering OAuth connections, and proxying MCP requests from Go...

Official MCP Rust SDK

The official Rust SDK for the Model Context Protocol. Maintained under the Barndoor AI GitHub organization; provides primitives to build MCP clients and servers in Rust.

Cerbos Rust SDK

Rust SDK for Cerbos, the policy-decision-point used by Barndoor for attribute-based access control. Lets Rust services request policy decisions from a Cerbos PDP.

MCP OAuth Compliance Suite

Rust test suite that validates remote MCP servers against the MCP authorization specification - RFC 9728 (Protected Resource Metadata), RFC 8414 (Authorization Server Metadata),...

Barndoor + Crew AI Example

Reference Python demo application showing how to plug Barndoor-governed MCP tools into a Crew AI multi-agent workflow.

Barndoor Agents API

Manage AI agent registrations

Barndoor Connections API

Manage OAuth connections to MCP servers

Barndoor MCP Proxy API

Proxy requests to MCP servers

Barndoor Policies API

Manage access control policies for agents and servers

Barndoor Policy API

The Policy API from Barndoor — 1 operation(s) for policy.

Barndoor Servers API

Barndoor Platform API

OPEN COLLECTION

Scroll for all 7

MCP Servers 1

Model Context Protocol servers that expose these APIs to AI agents.

Barndoor MCP Server

Remote MCP server at docs.barndoor.ai over HTTP; 3 tools listed.

MCP SERVER

Barndoor API pricing

Prices published by Barndoor, read 2026-10-28 from barndoor.ai/pricing/. A free plan or tier is listed.

Plan	Price
Pro	Contact Sales Includes: Up to 50 human identities; Unlimited agent and MCP connections; RBAC & ABAC policies; MCP & AI regis
Enterprise	Contact Sales Includes: Everything in Pro, plus LLM Gateway capabilities. Unlimited human identities
Free 14-day trial	Free 14-day trial Includes: AI Gateway: MCP Governance and LLM Gateway included, 100K LLM requests, no credit card required

Plan details, limits and sources →

Rate limits

Per-Customer Platform API Throttle: undocumented requests
List-Endpoint Page Size: 100 items per page
Static Egress IP Pool (Outbound to MCP Servers): 5 egress ip

Compiled by API Evangelist, not yet checked against Barndoor's documentation. All 6 limits →

Pricing Plans 1

Published pricing tiers and plan structures.

Barndoor Plans Pricing

3 plans

PLANS

Rate Limits 1

Documented rate limits and quota policies.

Barndoor Rate Limits

6 limits

RATE LIMITS

Service Levels 1

Uptime the provider promises or reports, as SLA4OAI. Read from its own pages; APIs.io runs no monitors.

Barndoor

SLA

FinOps 1

Cost, billing, and metering signals for API financial operations.

Barndoor Finops

FINOPS

Features 14

Notable capabilities this provider offers.

MCP Governance

Secure access control and policy enforcement for Model Context Protocol servers.

Runtime Policy Enforcement

Continuous governance applied at the moment AI agents act, not just at login.

Right-Sized Permissions

Precise, scoped access for agents - not broad human-level permissions.

Context Filtering

Dynamically surface only policy-compliant MCP tools, optimizing the context window.

AI Agent Registry

OAuth Connection Brokering

Initiate and manage OAuth 2.0 connections from agents to backend SaaS.

MCP / SSE Proxying

Streaming proxy that injects credentials and enforces policy on every MCP and SSE request.

Policy Authoring (RBAC/ABAC)

Create, clone, version, validate, and apply Cerbos-based RBAC and ABAC policies.

Audit Dashboards and Activity Logs

Complete audit trails for every AI action, applied policy, and outcome.

Audit Log Export

Stream audit events as gzipped JSON Lines to S3 / GCS / MinIO / SeaweedFS buckets.

Shadow AI Discovery

Centralized visibility into unauthorized AI apps and agents in the environment.

Identity Provider Integration

Connect to existing enterprise IdPs (Keycloak-based) for SSO and identity.

Static Egress IPs

Five dedicated outbound IPs for whitelisting Barndoor traffic at MCP servers.

Private and On-Prem Deployment

SaaS, private cloud, and on-premises deployment options for sensitive environments.

Scroll for all 14

Semantic Vocabularies 1

JSON-LD contexts and semantic vocabularies used across these APIs.

Barndoor Context

3 classes · 14 properties

JSON-LD

Spectral Rules 2

Spectral governance rulesets for linting and validating these APIs.

Barndoor — jsonschema rules

5 rules · 4 warnings 1 info

SPECTRAL

Barndoor API Rules

21 rules · 10 errors 10 warnings 1 info

SPECTRAL

3 properties

JSON SCHEMA

Scroll for all 24

3 properties

JSON STRUCTURE

Scroll for all 24

3 fields

EXAMPLE

Scroll for all 48

Security Posture 3

Authentication, domain security, vulnerability disclosure, and trust-center signals.

Barndoor Authentication

http · 1 scheme

SECURITY

Barndoor Domain Security

TLSv1.3 · HSTS · DMARC

SECURITY

Barndoor Vulnerability Disclosure

security.txt · contact published

SECURITY

Agentic Access 1

Recommended x-agentic-access execution contracts for AI agents.

Barndoor Agentic Access

26 operations · 13 acting · 1 human-in-the-loop

26 operations · 13 acting

AGENTIC

Use Cases 7

What developers build with this provider.

Enterprise AI Governance

Apply access policies and governance to AI agents across the organization.

MCP Server Management

Centrally register, secure, and manage MCP server deployments for AI agents.

Agentic Workflow Orchestration

Coordinate multi-agent workflows with security and accountability controls.

AI Security and Data Exfiltration Prevention

Prevent unauthorized AI agent actions and limit data exfiltration.

Shadow AI Discovery

Surface unauthorized AI apps and agents already running in the environment.

Developer Tooling for Governed Agents

Build agents safely with end-to-end policy enforcement via SDKs.

Microsoft 365 Agent Governance

Govern agents that work across Microsoft 365 (Excel, Outlook, Teams, OneDrive).

Scroll for all 7

Solutions 2

Packaged solutions this provider offers.

IT & Security Teams

Centralize AI governance, manage shadow AI, and enforce real-time access controls at scale.

Developers

Deploy agents safely without custom security logic, with end-to-end policy across dev, staging, and prod.

Resources

Get Started 2

Portal, sign-up, and the first successful call

Portal

Portal

Signup

Signup

Documentation 4

Reference material describing how the API behaves

ContributionGuide

Documentation

APIReference

OpenAPI

Agent Surfaces 3

MCP servers, agent skills, and machine-readable catalogs

AgenticAccess

AgenticAccess

MCPCatalog

MCPCatalog

LlmsText

LlmsText

Design & Contract 3

Pagination, idempotency, versioning, errors, and events

SpectralRules

SpectralRules

Vocabulary

Vocabulary

JSONLD

JSONLD

Build 3

SDKs, sample code, and the tooling you integrate with

PostmanWorkspace

PostmanWorkspace

SDKs

SDKs

GitHub

GitHub

Access & Security 9

Authentication, authorization, and security posture

SecurityPolicy

SecurityPolicy

VulnerabilityDisclosure

VulnerabilityDisclosure

DomainSecurity

Authentication

Authentication

TokensManagement

Security

TrustCenter

Scroll for all 9

Operate 2

Status, limits, changes, and where to get help

Releases

Releases

RateLimits

RateLimits

Commercial 4

Pricing, plans, and the legal terms of use

License

Pricing

Plans

FinOps

Company 4

The organization behind the API

Blog

Blog

LinkedIn

Website

Website

About

About

Other 3

Properties that don't map to a standard resource type

CapabilityMap

CapabilityMap

IPAllowlist

IPAllowlist

LogExport

LogExport

Source (apis.yml)

aid: barndoor
url: https://raw.githubusercontent.com/api-evangelist/barndoor/refs/heads/main/apis.yml
name: Barndoor
kind: company
description: Barndoor AI is the control plane for agentic AI, providing secure access and governance for AI agents and Model
  Context Protocol (MCP) servers. Founded in 2024 by Oren Michels (founder of Mashery), Barndoor enables enterprise IT, security,
  and developer teams to register agents, govern MCP server access through policy, broker OAuth connections to backend SaaS,
  and proxy MCP traffic with runtime policy enforcement and full audit trails. The Barndoor Platform REST API manages servers,
  connections, policies, agents, and MCP / SSE request proxying. Python, TypeScript, and Go SDKs are published on GitHub alongside
  Rust SDKs (Cerbos, official MCP, MCP OAuth compliance suite) and a Crew AI example. Deployment options include SaaS (trial),
  private cloud, and on-premises (Enterprise).
deliveryModel:
  model: open-core
  license: MIT
  open_source: true
  commercial: true
  callable_host: true
  label: Open core · an OSS project plus a commercial hosted product
  confidence: high
  source:
  - license
  - openapi
  - pricing
  generated: '2026-08-28'
  method: derived
accessModel:
  pricing: freemium
  onboarding: self-serve
  trial: true
  try_now: true
  public: false
  gated: none
  gated_source:
  - onboarding
  label: Freemium (free trial) · Self-serve signup
  confidence: medium
  source:
  - plans
  - authentication
  - security
  generated: '2026-11-06'
  method: derived
image: https://kinlane-images.s3.amazonaws.com/shared/apis-json/icons/barndoor.png
x-docs-platform: mintlify
x-docs-platform-confidence: medium
x-docs-platform-checked: 2026-09-20
tags:
- AI Agents
- AI Governance
- MCP
- Policy Enforcement
- OAuth
- Identity
- Security
- Audit
- Control Plane
- Authentication
tags_raw:
- AI Agents
- AI Governance
- Agentic AI
- MCP
- Model Context Protocol
- Policy Enforcement
- OAuth
- Identity
- Security
- Audit
- Control Plane
- Authentication
created: '2026-03-16'
modified: '2026-05-19'
specificationVersion: '0.23'
apis:
- aid: barndoor:python-sdk
  name: Barndoor Python SDK
  description: Python SDK for the Barndoor AI Platform. Wraps the Platform REST API, handles Auth0 PKCE login (`loginInteractive()`),
    discovers governed MCP tools, brokers OAuth connections to backend SaaS, and exposes the catalog through Pythonic helpers
    compatible with OpenAI tool-calling and frameworks such as Crew AI.
  humanURL: https://docs.barndoor.ai/sdks/python
  baseURL: https://github.com/barndoor-ai/barndoor-python-sdk
  tags:
  - Python SDK
  - SDK
  - MCP
  properties:
  - type: Documentation
    url: https://docs.barndoor.ai/sdks/python
  - type: Repository
    url: https://github.com/barndoor-ai/barndoor-python-sdk
- aid: barndoor:typescript-sdk
  name: Barndoor TypeScript SDK
  description: TypeScript SDK for the Barndoor AI Platform. Browser- and Node-friendly client for Auth0 PKCE login, governed
    MCP tool discovery, OAuth connection initiation, and proxying MCP / SSE requests through Barndoor.
  humanURL: https://docs.barndoor.ai/sdks/typescript
  baseURL: https://github.com/barndoor-ai/barndoor-ts-sdk
  tags:
  - TypeScript SDK
  - SDK
  - MCP
  properties:
  - type: Documentation
    url: https://docs.barndoor.ai/sdks/typescript
  - type: Repository
    url: https://github.com/barndoor-ai/barndoor-ts-sdk
- aid: barndoor:go-sdk
  name: Barndoor Go SDK
  description: Go SDK for the Barndoor AI Platform. Server-side client for registering agents, managing MCP servers and policies,
    brokering OAuth connections, and proxying MCP requests from Go services.
  humanURL: https://github.com/barndoor-ai/barndoor-go-sdk
  baseURL: https://github.com/barndoor-ai/barndoor-go-sdk
  tags:
  - Go SDK
  - SDK
  - MCP
  properties:
  - type: Repository
    url: https://github.com/barndoor-ai/barndoor-go-sdk
- aid: barndoor:official-mcp-rust-sdk
  name: Official MCP Rust SDK
  description: The official Rust SDK for the Model Context Protocol. Maintained under the Barndoor AI GitHub organization;
    provides primitives to build MCP clients and servers in Rust.
  humanURL: https://github.com/barndoor-ai/official-mcp-rust-sdk
  baseURL: https://github.com/barndoor-ai/official-mcp-rust-sdk
  tags:
  - MCP
  - Rust
  - SDK
  properties:
  - type: Repository
    url: https://github.com/barndoor-ai/official-mcp-rust-sdk
- aid: barndoor:cerbos-sdk-rust
  name: Cerbos Rust SDK
  description: Rust SDK for Cerbos, the policy-decision-point used by Barndoor for attribute-based access control. Lets Rust
    services request policy decisions from a Cerbos PDP.
  humanURL: https://github.com/barndoor-ai/cerbos-sdk-rust
  baseURL: https://github.com/barndoor-ai/cerbos-sdk-rust
  tags:
  - Cerbos
  - ABAC
  - Policy
  - Rust
  - SDK
  properties:
  - type: Repository
    url: https://github.com/barndoor-ai/cerbos-sdk-rust
- aid: barndoor:mcp-auth-compliance
  name: MCP OAuth Compliance Suite
  description: Rust test suite that validates remote MCP servers against the MCP authorization specification - RFC 9728 (Protected
    Resource Metadata), RFC 8414 (Authorization Server Metadata), RFC 7591 (Dynamic Client Registration), and OAuth 2.1. Useful
    for vendors and customers verifying MCP server conformance before onboarding to Barndoor.
  humanURL: https://github.com/barndoor-ai/mcp-auth-compliance
  baseURL: https://github.com/barndoor-ai/mcp-auth-compliance
  tags:
  - MCP
  - OAuth
  - Compliance
  - Rust
  - Conformance
  - Authentication
  tags_raw:
  - MCP
  - OAuth
  - Compliance
  - Rust
  - Conformance
  - Authentication
  properties:
  - type: Repository
    url: https://github.com/barndoor-ai/mcp-auth-compliance
- aid: barndoor:crew-ai-example
  name: Barndoor + Crew AI Example
  description: Reference Python demo application showing how to plug Barndoor-governed MCP tools into a Crew AI multi-agent
    workflow.
  humanURL: https://github.com/barndoor-ai/barndoor-ai-crew-ai-python-example
  baseURL: https://github.com/barndoor-ai/barndoor-ai-crew-ai-python-example
  tags:
  - CrewAI
  - Python
  - Example
  - MCP
  tags_raw:
  - Crew AI
  - Python
  - Example
  - MCP
  properties:
  - type: Repository
    url: https://github.com/barndoor-ai/barndoor-ai-crew-ai-python-example
- aid: barndoor:barndoor-agents-api
  name: Barndoor Agents API
  description: Manage AI agent registrations
  humanURL: https://docs.barndoor.ai/api-reference/introduction
  baseURL: https://{organization_id}.platform.barndoor.ai
  tags:
  - Agents
  properties:
  - type: OpenAPI
    url: openapi/barndoor-agents-api-openapi.yml
  - type: Documentation
    url: https://docs.barndoor.ai/api-reference/introduction
  - type: Authentication
    url: https://docs.barndoor.ai/api-reference/introduction
  - type: SDKs
    url: https://docs.barndoor.ai/sdks/introduction
- aid: barndoor:barndoor-connections-api
  name: Barndoor Connections API
  description: Manage OAuth connections to MCP servers
  humanURL: https://docs.barndoor.ai/api-reference/introduction
  baseURL: https://{organization_id}.platform.barndoor.ai
  tags:
  - Connections
  properties:
  - type: OpenAPI
    url: openapi/barndoor-connections-api-openapi.yml
  - type: Documentation
    url: https://docs.barndoor.ai/api-reference/introduction
  - type: Authentication
    url: https://docs.barndoor.ai/api-reference/introduction
  - type: SDKs
    url: https://docs.barndoor.ai/sdks/introduction
- aid: barndoor:barndoor-mcp-proxy-api
  name: Barndoor MCP Proxy API
  description: Proxy requests to MCP servers
  humanURL: https://docs.barndoor.ai/api-reference/introduction
  baseURL: https://{organization_id}.platform.barndoor.ai
  tags:
  - MCP Proxy
  properties:
  - type: OpenAPI
    url: openapi/barndoor-mcp-proxy-api-openapi.yml
  - type: Documentation
    url: https://docs.barndoor.ai/api-reference/introduction
  - type: Authentication
    url: https://docs.barndoor.ai/api-reference/introduction
  - type: SDKs
    url: https://docs.barndoor.ai/sdks/introduction
- aid: barndoor:barndoor-policies-api
  name: Barndoor Policies API
  description: Manage access control policies for agents and servers
  humanURL: https://docs.barndoor.ai/api-reference/introduction
  baseURL: https://{organization_id}.platform.barndoor.ai
  tags:
  - Policies
  properties:
  - type: OpenAPI
    url: openapi/barndoor-policies-api-openapi.yml
  - type: Documentation
    url: https://docs.barndoor.ai/api-reference/introduction
  - type: Authentication
    url: https://docs.barndoor.ai/api-reference/introduction
  - type: SDKs
    url: https://docs.barndoor.ai/sdks/introduction
- aid: barndoor:barndoor-policy-api
  name: Barndoor Policy API
  description: The Policy API from Barndoor — 1 operation(s) for policy.
  humanURL: https://docs.barndoor.ai/api-reference/introduction
  baseURL: https://{organization_id}.platform.barndoor.ai
  tags:
  - Policy
  properties:
  - type: OpenAPI
    url: openapi/barndoor-policy-api-openapi.yml
  - type: Documentation
    url: https://docs.barndoor.ai/api-reference/introduction
  - type: Authentication
    url: https://docs.barndoor.ai/api-reference/introduction
  - type: SDKs
    url: https://docs.barndoor.ai/sdks/introduction
- aid: barndoor:barndoor-servers-api
  name: Barndoor Servers API
  description: Manage MCP server instances
  humanURL: https://docs.barndoor.ai/api-reference/introduction
  baseURL: https://{organization_id}.platform.barndoor.ai
  tags:
  - Servers
  properties:
  - type: OpenAPI
    url: openapi/barndoor-servers-api-openapi.yml
  - type: Documentation
    url: https://docs.barndoor.ai/api-reference/introduction
  - type: Authentication
    url: https://docs.barndoor.ai/api-reference/introduction
  - type: SDKs
    url: https://docs.barndoor.ai/sdks/introduction
common:
- type: CapabilityMap
  url: capabilities/barndoor-capability-edges.yml
  name: Barndoor Business Capability Map
- type: Releases
  url: https://github.com/barndoor-ai/barndoor-python-sdk/releases
- type: SecurityPolicy
  url: https://github.com/barndoor-ai/barndoor-python-sdk/blob/main/SECURITY.md
- type: ContributionGuide
  url: https://github.com/barndoor-ai/barndoor-python-sdk/blob/main/CONTRIBUTING.md
- type: License
  name: MIT
  url: https://github.com/barndoor-ai/barndoor-python-sdk/blob/main/LICENSE
- type: PostmanWorkspace
  url: https://www.postman.com/kinlaneapi/barndoor/overview
- type: AgenticAccess
  url: agentic-access/barndoor-agentic-access.yml
- type: VulnerabilityDisclosure
  url: security/barndoor-vulnerability-disclosure.yml
- type: DomainSecurity
  url: security/barndoor-domain-security.yml
- type: Authentication
  url: authentication/barndoor-authentication.yml
- url: http://barndoor.ai/feed/
  type: Blog
- type: LinkedIn
  url: https://www.linkedin.com/company/barndoor-ai
- type: Website
  url: https://barndoor.ai/
  name: Barndoor AI
- type: Documentation
  url: https://docs.barndoor.ai/
  name: Barndoor Developer Documentation
- type: APIReference
  url: https://docs.barndoor.ai/api-reference/introduction
  name: Barndoor API Reference
- type: OpenAPI
  url: openapi/_original/barndoor-openapi.yml
  name: Barndoor Platform API OpenAPI
- type: Authentication
  url: https://docs.barndoor.ai/api-reference/introduction
  name: Authentication (Auth0 OAuth 2.0 with PKCE)
- type: SDKs
  url: https://docs.barndoor.ai/sdks/introduction
  name: Barndoor SDKs (Python, TypeScript, Go)
- type: Portal
  url: https://app.barndoor.ai/
  name: Barndoor App
- type: Signup
  url: https://app.barndoor.ai/auth/signup/trial
  name: Barndoor Free Trial Signup
- type: TokensManagement
  url: https://app.barndoor.ai/settings/tokens
  name: Platform API Tokens
- type: Pricing
  url: https://barndoor.ai/pricing
  name: Barndoor Pricing
- type: Plans
  url: plans/barndoor-plans-pricing.yml
  name: Barndoor Plans (API Commons)
- type: RateLimits
  url: rate-limits/barndoor-rate-limits.yml
  name: Barndoor Rate Limits (API Commons)
- type: FinOps
  url: finops/barndoor-finops.yml
  name: Barndoor FinOps (FOCUS 1.3)
- type: GitHub
  url: https://github.com/barndoor-ai
  name: Barndoor AI GitHub Org
- type: Security
  url: https://barndoor.ai/security/
  name: Barndoor Security
- type: TrustCenter
  url: https://trust.barndoor.ai
  name: Barndoor Trust Center
- type: About
  url: https://barndoor.ai/about-us/
  name: About Barndoor AI
- type: MCPCatalog
  url: https://docs.barndoor.ai/mcp-servers/servers
  name: Barndoor MCP Catalog (60+ servers)
- type: IPAllowlist
  url: https://docs.barndoor.ai/how-tos/ip-whitelisting
  name: Static Egress IPs for MCP Servers
- type: LogExport
  url: https://docs.barndoor.ai/how-tos/log-export
  name: Audit Log Export to S3-Compatible Storage
- type: SpectralRules
  url: rules/barndoor-spectral-rules.yml
  name: Spectral Ruleset
- type: Vocabulary
  url: vocabulary/barndoor-vocabulary.yaml
  name: Barndoor Vocabulary
- type: JSONLD
  url: json-ld/barndoor-context.jsonld
  name: Barndoor JSON-LD Context
- name: Features
  type: Features
  data:
  - name: MCP Governance
    description: Secure access control and policy enforcement for Model Context Protocol servers.
  - name: Runtime Policy Enforcement
    description: Continuous governance applied at the moment AI agents act, not just at login.
  - name: Right-Sized Permissions
    description: Precise, scoped access for agents - not broad human-level permissions.
  - name: Context Filtering
    description: Dynamically surface only policy-compliant MCP tools, optimizing the context window.
  - name: AI Agent Registry
    description: Register internal and external agents, group them, and track activity.
  - name: OAuth Connection Brokering
    description: Initiate and manage OAuth 2.0 connections from agents to backend SaaS.
  - name: MCP / SSE Proxying
    description: Streaming proxy that injects credentials and enforces policy on every MCP and SSE request.
  - name: Policy Authoring (RBAC/ABAC)
    description: Create, clone, version, validate, and apply Cerbos-based RBAC and ABAC policies.
  - name: Audit Dashboards and Activity Logs
    description: Complete audit trails for every AI action, applied policy, and outcome.
  - name: Audit Log Export
    description: Stream audit events as gzipped JSON Lines to S3 / GCS / MinIO / SeaweedFS buckets.
  - name: Shadow AI Discovery
    description: Centralized visibility into unauthorized AI apps and agents in the environment.
  - name: Identity Provider Integration
    description: Connect to existing enterprise IdPs (Keycloak-based) for SSO and identity.
  - name: Static Egress IPs
    description: Five dedicated outbound IPs for whitelisting Barndoor traffic at MCP servers.
  - name: Private and On-Prem Deployment
    description: SaaS, private cloud, and on-premises deployment options for sensitive environments.
- name: Use Cases
  type: UseCases
  data:
  - name: Enterprise AI Governance
    description: Apply access policies and governance to AI agents across the organization.
  - name: MCP Server Management
    description: Centrally register, secure, and manage MCP server deployments for AI agents.
  - name: Agentic Workflow Orchestration
    description: Coordinate multi-agent workflows with security and accountability controls.
  - name: AI Security and Data Exfiltration Prevention
    description: Prevent unauthorized AI agent actions and limit data exfiltration.
  - name: Shadow AI Discovery
    description: Surface unauthorized AI apps and agents already running in the environment.
  - name: Developer Tooling for Governed Agents
    description: Build agents safely with end-to-end policy enforcement via SDKs.
  - name: Microsoft 365 Agent Governance
    description: Govern agents that work across Microsoft 365 (Excel, Outlook, Teams, OneDrive).
- name: Solutions
  type: Solutions
  data:
  - name: IT & Security Teams
    description: Centralize AI governance, manage shadow AI, and enforce real-time access controls at scale.
  - name: Developers
    description: Deploy agents safely without custom security logic, with end-to-end policy across dev, staging, and prod.
- name: Compliance
  type: Compliance
  data:
  - name: SOC 2 Type II
    description: Barndoor holds a SOC 2 Type II attestation for security controls effectiveness over time.
- type: LlmsText
  url: https://docs.barndoor.ai/llms.txt
integrations:
- name: Salesforce
- name: Notion
- name: GitHub
- name: GitLab
- name: Slack
- name: HubSpot
- name: Microsoft 365
- name: Microsoft Teams
- name: Microsoft Excel
- name: Microsoft Word
- name: OneDrive
- name: OneNote
- name: PowerPoint
- name: Outlook Mail
- name: Outlook Calendar
- name: Microsoft Planner
- name: Microsoft Dynamics
- name: SharePoint
- name: Gmail
- name: Google Calendar
- name: Google Docs
- name: Google Sheets
- name: Google Slides
- name: Google Drive
- name: Atlassian
- name: Linear
- name: Asana
- name: Monday
- name: Basecamp
- name: Aha!
- name: Box
- name: Dropbox
- name: Figma
- name: Airtable
- name: Snowflake
- name: Hex
- name: Amplitude
- name: SonarQube
- name: Datadog
- name: Grafana
- name: Sentry
- name: Harness
- name: Finch
- name: ServiceNow
- name: Zendesk
- name: Freshdesk
- name: Intercom
- name: Zoom
- name: Fireflies.ai
- name: Granola
- name: Otter
- name: Apollo
- name: Attio
- name: Close
- name: Gong
- name: Shopify
- name: Zoho CRM
- name: Stripe
- name: Plaid
- name: QuickBooks
- name: Xero
- name: Octagon
- name: Crew AI
- name: Auth0
- name: Keycloak
- name: Cerbos
maintainers:
- FN: Kin Lane
  email: kin@apievangelist.com

Barndoor API — frequently asked questions

Does Barndoor have an API?

Yes. APIs.io lists 13 APIs from Barndoor, including Barndoor Python SDK, Barndoor TypeScript SDK and Barndoor Go SDK, and 10 more.

Is there an OpenAPI specification for the Barndoor API?

Yes. APIs.io indexes 6 OpenAPI specifications for Barndoor, each linked for download from this page.

How do I authenticate with the Barndoor API?

Barndoor uses bearer-token authentication (http · 1 scheme). The details are profiled on APIs.io as Barndoor Authentication.

How much does the Barndoor API cost?

Barndoor publishes its prices; its Free 14-day trial plan is Free 14-day trial as of 2026-10-28. APIs.io lists 3 pricing plans for Barndoor, with each plan's price, limits and inclusions under Pricing on this page.

Does Barndoor have an MCP server?

Yes. APIs.io lists 1 MCP server for Barndoor: Remote MCP server at docs.barndoor.ai over HTTP; 3 tools listed.

Is the Barndoor API ready for AI agents?

Barndoor has a Kin Score of 59.0 out of 100 (strong) and an Agent Readiness score of 39.1 (agent-ready), scored by API Evangelist on 2026-11-06.

Work with this as data

Every provider here is available over the APIs.io API and to AI agents over MCP.

MCP server

One button, every client — Claude, Cursor, VS Code and the rest.

https://apis.io/mcp

Tools for providers

9 MCP tools reach this

find_providersBrowse and filter every provider in the catalog.
get_provider_artifactsEvery artifact this provider publishes, grouped by type.
get_provider_operationsEvery operation across all of their OpenAPIs — one call instead of parsing every spec.
get_provider_toolsEvery MCP tool they ship, with the operation each wraps.
get_provider_evidenceHow each part of their score was established. Free — the basis for a claim should not sit behind it.
get_provider_ratingPRO — composite, band, trend and facet scores.
apis_io_searchSTART HERE — APIs, providers and tags for one query, each with its total.
resolveTurn a domain, URL or GitHub org into the provider it belongs to.
find_cohortsEvery scored population of providers in the catalog.

All 92 tools →

Call it yourself

curl for this page

This provider

curl "https://apis.io/api/v1/providers/barndoor"

All providers

curl "https://apis.io/api/v1/providers?limit=25"

Every operation they expose

curl "https://apis.io/api/v1/providers/barndoor/operations?limit=25"

How their score was established

curl "https://apis.io/api/v1/providers/barndoor/evidence"

Calls without X-API-Key need no key. Calls with it need a paid plan — get a key.

Get an API key

Free tier, no form to fill in. Signing in shares your email address with us — we store it to create your key and to recognise you if you sign in with another provider. See our Privacy Policy and Terms.

GitHub Google LinkedIn

A second provider on the same verified email joins the account you already have.