Metorial vs Barndoor

Barndoor and Metorial both put a governed layer between AI clients and the tools your company uses.

Where Barndoor wins: Built-in Data Control Center detects, blocks or redacts PII, secrets and prompt injection in MCP traffic, with field-level and conditional rules.

Metorial is the stronger fit if you want Git-synced skills, skills teams write together and an EU data region.

Every Barndoor fact below links to Barndoor's own page. Anything they don't publish is marked "Not published", not "No".

Where Barndoor wins

  • Built-in Data Control Center detects, blocks or redacts PII, secrets and prompt injection in MCP traffic, with field-level and conditional rules.source
  • Per-call human approval for any governed tool, and MCP tool-inventory change history with alerts.source
  • Enterprise plan includes air-gapped and on-prem deployment plus an LLM gateway with token/cost budgets, routing and failover.source

Key differences

Each cell links to the page it comes from.

FeatureMetorialBarndoor
Source licenseFSL-1.1-ALv2 engine (Apache 2.0 after two years); Apache-2.0 integration catalogsourceThe engine (metorial-platform) is source-available under FSL and converts to Apache 2.0 two years after each release. The integration catalog (metorial/metorial) is Apache-2.0.Not publishedAcquired Diaphora's open-source Frags engine; the gateway itself has no published source.
Self-hostYessourceYessourceEnterprise plan.
Integration catalog1,000+source100+source
One URL for all toolsYessourceYessource
Per-user OAuthYessourceYessource
SSO (SAML or OIDC)YessourceYessource
SCIM provisioningYessourcePartialsourceSCIM documented for Okta and Entra ID; other IdPs sync roles on login.
Role or group-based tool accessYessourceYessource
Audit log per personYessourceYessource
Create and edit skillsYessourceNot publishedDiaphora acquisition (Sep 16, 2026) adds workflow 'blueprints', not skills.
Git sync for skillsYessourceNot published
Own chat app requiredNosourceNosource
Prompt-injection detectionYessourceYessource
EU data regionYessourceNot published
SOC 2 Type IIYessourceYessource
LLM gateway or model routingNoYessourceEnterprise plan per pricing page.
Starting price$0 (Dev); Scale from $250/monthsourceContact Salessource

Which AI clients each works in

FeatureMetorialBarndoor
Claude (web and desktop)YessourceYessource
Claude CodeYessourcePartialsourceDocumented for the LLM gateway; no Claude Code MCP setup guide found.
ChatGPTYessourceYessource
CursorYessourceYessource
CodexYessourcePartialsourceLLM gateway only; no Codex MCP setup documented.
GitHub CopilotYessourcePartialsourceVS Code MCP setup documented; GitHub Copilot not named.
Custom agents (SDK or API)YessourceYessourcePython and TypeScript SDKs; CrewAI example.

Full checklist

Every row we track, with what it means. "Not published" means the vendor's own pages don't say.

Connect

FeatureMetorialBarndoor
Integration catalogHow many ready-made integrations or MCP servers the vendor publishes.1,000+source100+source
Verified or official serversThe catalog includes servers the vendor tests or maintains, not only community listings.YessourceYessource
Bring your own MCP serverYou can add an MCP server you built or host yourself.YessourceYessource
Remote (HTTP) MCP serversConnects to MCP servers hosted elsewhere over HTTP.YessourceYessource
Local, stdio or Docker serversRuns MCP servers that ship as local processes or containers.YessourceNot published
One URL for all toolsA user adds one endpoint to their AI client and reaches every approved tool through it.YessourceYessource
Version pinningYou can lock an integration to a known version.YessourceNot published
Schema change monitoringChanges to tool definitions are detected and flagged.YessourceYessource

AI clients

FeatureMetorialBarndoor
Claude (web and desktop)Documented to work in the Claude apps.YessourceYessource
Claude CodeDocumented to work in Claude Code.YessourcePartialsourceDocumented for the LLM gateway; no Claude Code MCP setup guide found.
ChatGPTDocumented to work in ChatGPT.YessourceYessource
CursorDocumented to work in Cursor.YessourceYessource
CodexDocumented to work in Codex.YessourcePartialsourceLLM gateway only; no Codex MCP setup documented.
GitHub CopilotDocumented to work in GitHub Copilot.YessourcePartialsourceVS Code MCP setup documented; GitHub Copilot not named.
Custom agents (SDK or API)Your own agents can use the tools through an SDK or API.YessourceYessourcePython and TypeScript SDKs; CrewAI example.
Own chat app requiredYes means people must work inside the vendor’s own app rather than the AI client they already use.NosourceNosource

Identity and access

FeatureMetorialBarndoor
Per-user OAuthTool calls run with each person’s own account, not a shared key.YessourceYessource
Managed OAuth appsThe vendor provides OAuth apps so you don’t register your own.YessourceNot published
Bring your own OAuth appYou can use OAuth apps registered under your own company.YessourceYessource
SSO (SAML or OIDC)People sign in through your identity provider.YessourceYessource
SCIM provisioningUsers and groups sync automatically from your identity provider.YessourcePartialsourceSCIM documented for Okta and Entra ID; other IdPs sync roles on login.
Role or group-based tool accessAccess to tools follows roles or groups.YessourceYessource
Tool-level allow and denyIndividual tools can be allowed or blocked, not only whole servers.YessourceYessource
Read-only modesAn integration can be limited to read-only tools.YessourcePartialsourceNo dedicated read-only mode; achieved by per-tool policy rules.

Visibility and security

FeatureMetorialBarndoor
Audit log per personEvery call is recorded and tied to the person or agent who made it.YessourceYessource
Call tracingTool arguments and results are recorded for debugging and review.YessourceYessource
Log export or SIEMLogs can be exported or streamed to your security tools.YessourceYessourceDocs describe export to S3-compatible or Azure Blob storage; 'Log export & streaming' is Enterprise plan.
Data redaction or DLPSensitive data in tool traffic can be detected, masked or blocked.YessourceYessource
Prompt-injection detectionTool traffic is inspected for prompt-injection attacks.YessourceYessource
Tool-poisoning protectionMalicious or changed tool descriptions are detected.YesThrough Protoguard.Not publishedTool-listing change alerts exist but are not framed as tool-poisoning protection.

Skills

FeatureMetorialBarndoor
Create and edit skillsTeams can write and edit shared skills in the product.YessourceNot publishedDiaphora acquisition (Sep 16, 2026) adds workflow 'blueprints', not skills.
Git sync for skillsSkills sync to or from a Git repository.YessourceNot published
Skills delivered by roleSkills reach people based on their role or group.YessourceNot published
Skills over MCPSkills are served to AI clients through MCP.Not publishedNot published

Deployment

FeatureMetorialBarndoor
Source licenseThe license the product’s code is published under, if any.FSL-1.1-ALv2 engine (Apache 2.0 after two years); Apache-2.0 integration catalogsourceThe engine (metorial-platform) is source-available under FSL and converts to Apache 2.0 two years after each release. The integration catalog (metorial/metorial) is Apache-2.0.Not publishedAcquired Diaphora's open-source Frags engine; the gateway itself has no published source.
Self-hostYou can run it on your own infrastructure.YessourceYessourceEnterprise plan.
VPC or on-premCan be deployed in your own cloud account or data center.YessourceYessourcePrivate cloud and on-prem, Enterprise plan.
Air-gappedCan run with no internet connection.YesYessourceEnterprise plan.
EU data regionData can be hosted in the EU.YessourceNot published

Compliance

FeatureMetorialBarndoor
SOC 2 Type IIHolds a SOC 2 Type II report.YessourceYessource
ISO 27001Holds ISO/IEC 27001 certification.Not publishedNot published
HIPAASupports HIPAA workloads, usually with a BAA.YesSigns BAAs.Not published
GDPR and DPAStates GDPR compliance and offers a data processing agreement.YessourceA data processing agreement is published at /legal/data-processing-agreement.Not published

Pricing

FeatureMetorialBarndoor
Public pricingPrices are published on the vendor’s site.YessourceNosource
Free tierA free plan or free edition exists.YessourceNosourceTime-limited trial only (100K LLM requests, no credit card); no permanent free plan listed.
Starting priceThe lowest published paid price, as listed.$0 (Dev); Scale from $250/monthsourceContact Salessource
Pricing modelHow the vendor charges: per seat, usage, platform fee, or a mix.Flat monthly plans with paid add-ons (extra seats, tool calls)sourceTwo tiers (Pro up to 50 identities, Enterprise unlimited), sales-quotedsource

Model layer

FeatureMetorialBarndoor
LLM gateway or model routingRoutes model traffic, not only tool traffic.NoYessourceEnterprise plan per pricing page.
Cost tracking per personShows AI spend per person or team.NoYessource

Which should you pick?

SituationPickWhy
Rolling AI out to every employee in the clients they already useEitherBoth connect to existing AI clients. Compare the client list below.
You must self-hostEitherBoth document a self-hosted option.
You need an LLM gateway or model routing todayBarndoorBarndoor documents an LLM gateway. Metorial doesn't ship one yet.
Teams should share skills, not only toolsMetorialMetorial lets teams write skills together and deliver them by role.
You are building integrations into your own productEitherBoth offer an SDK or API for your own agents.

Pricing

Published prices only. Nothing is estimated.

Metorial

  • Metorial Dev: $0 monthsource
  • Metorial Scale: $250 monthsource
  • Metorial for Enterprise: Contact salessource

Barndoor

  • Pro: Contact Sales not-publishedsource
  • Enterprise: Contact Sales not-publishedsource

What each Metorial plan includes

From the Metorial pricing page.

IncludedMetorial DevMetorial ScaleMetorial for Enterprise
Tool calls per month500,0002,500,000Custom
Callbacks10,000100,000Custom
Workforce seats220Custom
Provider integrations10UnlimitedUnlimited
Log retention30 days90 daysCustom
Production accessNot includedIncludedIncluded

On every plan

  • Slack and email support
  • Auth Connections: Unlimited
  • Sessions: Unlimited
  • Concurrent Connections: Unlimited
  • Developer API Access
  • Custom Integrations
  • Remote MCP Servers
  • Managed MCP Servers

Barndoor limits

As published by the vendor.

  • Pro human identities: Up to 50source
  • MCP servers: Unlimited (both plans)source
  • Trial: 14 days, 100K LLM requests, no credit cardsource
  • Tool listing version history: 50 versionssource

Moving from Barndoor to Metorial

  • Remote MCP servers you use through Barndoor can be added to Metorial as they are.
  • OAuth apps registered under your company can be reused, so people sign in the way they do today.
  • Sign-in moves to your identity provider through SAML; groups decide who gets which tools.
  • Skills, policies and audit history in Barndoor don't transfer automatically. Talk to us about moving them.

Book a demo to plan the move with us.

Frequently asked questions

Common questions about Metorial and Barndoor.

  1. Is Barndoor open source?
    Barndoor's own pages don't state a source license.
  2. Yes, Barndoor documents a self-hosted option.
  3. Yes, Barndoor documents ChatGPT support.
  4. Metorial's Dev plan is free and Scale starts at $250 a month. Barndoor doesn't publish prices, so a direct comparison needs a quote.
  5. Yes. Metorial is SOC 2 Type 2 and GDPR compliant, with EU and US regions.
  6. Metorial's engine is published under FSL-1.1-ALv2 engine (Apache 2.0 after two years); Apache-2.0 integration catalog. You can self-host it or use the hosted platform.

Checked October 17, 2026. 36 Barndoor facts are sourced, each linked in its row. Spotted something wrong? Tell us and we will fix it. All product names are trademarks of their owners.

Try Metorial next to Barndoor

Start free, self-host from GitHub, or talk to us about your rollout.