Metorial vs Barndoor
Barndoor and Metorial both put a governed layer between AI clients and the tools your company uses.
Where Barndoor wins: Built-in Data Control Center detects, blocks or redacts PII, secrets and prompt injection in MCP traffic, with field-level and conditional rules.
Metorial is the stronger fit if you want Git-synced skills, skills teams write together and an EU data region.
Every Barndoor fact below links to Barndoor's own page. Anything they don't publish is marked "Not published", not "No".
Where Barndoor wins
- Built-in Data Control Center detects, blocks or redacts PII, secrets and prompt injection in MCP traffic, with field-level and conditional rules.source
- Per-call human approval for any governed tool, and MCP tool-inventory change history with alerts.source
- Enterprise plan includes air-gapped and on-prem deployment plus an LLM gateway with token/cost budgets, routing and failover.source
Key differences
Each cell links to the page it comes from.
| Feature | Metorial | Barndoor |
|---|---|---|
| Source license | FSL-1.1-ALv2 engine (Apache 2.0 after two years); Apache-2.0 integration catalogsourceThe engine (metorial-platform) is source-available under FSL and converts to Apache 2.0 two years after each release. The integration catalog (metorial/metorial) is Apache-2.0. | Not publishedAcquired Diaphora's open-source Frags engine; the gateway itself has no published source. |
| Self-host | Yessource | YessourceEnterprise plan. |
| Integration catalog | 1,000+source | 100+source |
| One URL for all tools | Yessource | Yessource |
| Per-user OAuth | Yessource | Yessource |
| SSO (SAML or OIDC) | Yessource | Yessource |
| SCIM provisioning | Yessource | PartialsourceSCIM documented for Okta and Entra ID; other IdPs sync roles on login. |
| Role or group-based tool access | Yessource | Yessource |
| Audit log per person | Yessource | Yessource |
| Create and edit skills | Yessource | Not publishedDiaphora acquisition (Sep 16, 2026) adds workflow 'blueprints', not skills. |
| Git sync for skills | Yessource | Not published |
| Own chat app required | Nosource | Nosource |
| Prompt-injection detection | Yessource | Yessource |
| EU data region | Yessource | Not published |
| SOC 2 Type II | Yessource | Yessource |
| LLM gateway or model routing | No | YessourceEnterprise plan per pricing page. |
| Starting price | $0 (Dev); Scale from $250/monthsource | Contact Salessource |
Which AI clients each works in
| Feature | Metorial | Barndoor |
|---|---|---|
| Claude (web and desktop) | Yessource | Yessource |
| Claude Code | Yessource | PartialsourceDocumented for the LLM gateway; no Claude Code MCP setup guide found. |
| ChatGPT | Yessource | Yessource |
| Cursor | Yessource | Yessource |
| Codex | Yessource | PartialsourceLLM gateway only; no Codex MCP setup documented. |
| GitHub Copilot | Yessource | PartialsourceVS Code MCP setup documented; GitHub Copilot not named. |
| Custom agents (SDK or API) | Yessource | YessourcePython and TypeScript SDKs; CrewAI example. |
Full checklist
Every row we track, with what it means. "Not published" means the vendor's own pages don't say.
Connect
| Feature | Metorial | Barndoor |
|---|---|---|
| Integration catalogHow many ready-made integrations or MCP servers the vendor publishes. | 1,000+source | 100+source |
| Verified or official serversThe catalog includes servers the vendor tests or maintains, not only community listings. | Yessource | Yessource |
| Bring your own MCP serverYou can add an MCP server you built or host yourself. | Yessource | Yessource |
| Remote (HTTP) MCP serversConnects to MCP servers hosted elsewhere over HTTP. | Yessource | Yessource |
| Local, stdio or Docker serversRuns MCP servers that ship as local processes or containers. | Yessource | Not published |
| One URL for all toolsA user adds one endpoint to their AI client and reaches every approved tool through it. | Yessource | Yessource |
| Version pinningYou can lock an integration to a known version. | Yessource | Not published |
| Schema change monitoringChanges to tool definitions are detected and flagged. | Yessource | Yessource |
AI clients
| Feature | Metorial | Barndoor |
|---|---|---|
| Claude (web and desktop)Documented to work in the Claude apps. | Yessource | Yessource |
| Claude CodeDocumented to work in Claude Code. | Yessource | PartialsourceDocumented for the LLM gateway; no Claude Code MCP setup guide found. |
| ChatGPTDocumented to work in ChatGPT. | Yessource | Yessource |
| CursorDocumented to work in Cursor. | Yessource | Yessource |
| CodexDocumented to work in Codex. | Yessource | PartialsourceLLM gateway only; no Codex MCP setup documented. |
| GitHub CopilotDocumented to work in GitHub Copilot. | Yessource | PartialsourceVS Code MCP setup documented; GitHub Copilot not named. |
| Custom agents (SDK or API)Your own agents can use the tools through an SDK or API. | Yessource | YessourcePython and TypeScript SDKs; CrewAI example. |
| Own chat app requiredYes means people must work inside the vendor’s own app rather than the AI client they already use. | Nosource | Nosource |
Identity and access
| Feature | Metorial | Barndoor |
|---|---|---|
| Per-user OAuthTool calls run with each person’s own account, not a shared key. | Yessource | Yessource |
| Managed OAuth appsThe vendor provides OAuth apps so you don’t register your own. | Yessource | Not published |
| Bring your own OAuth appYou can use OAuth apps registered under your own company. | Yessource | Yessource |
| SSO (SAML or OIDC)People sign in through your identity provider. | Yessource | Yessource |
| SCIM provisioningUsers and groups sync automatically from your identity provider. | Yessource | PartialsourceSCIM documented for Okta and Entra ID; other IdPs sync roles on login. |
| Role or group-based tool accessAccess to tools follows roles or groups. | Yessource | Yessource |
| Tool-level allow and denyIndividual tools can be allowed or blocked, not only whole servers. | Yessource | Yessource |
| Read-only modesAn integration can be limited to read-only tools. | Yessource | PartialsourceNo dedicated read-only mode; achieved by per-tool policy rules. |
Visibility and security
| Feature | Metorial | Barndoor |
|---|---|---|
| Audit log per personEvery call is recorded and tied to the person or agent who made it. | Yessource | Yessource |
| Call tracingTool arguments and results are recorded for debugging and review. | Yessource | Yessource |
| Log export or SIEMLogs can be exported or streamed to your security tools. | Yessource | YessourceDocs describe export to S3-compatible or Azure Blob storage; 'Log export & streaming' is Enterprise plan. |
| Data redaction or DLPSensitive data in tool traffic can be detected, masked or blocked. | Yessource | Yessource |
| Prompt-injection detectionTool traffic is inspected for prompt-injection attacks. | Yessource | Yessource |
| Tool-poisoning protectionMalicious or changed tool descriptions are detected. | YesThrough Protoguard. | Not publishedTool-listing change alerts exist but are not framed as tool-poisoning protection. |
Skills
| Feature | Metorial | Barndoor |
|---|---|---|
| Create and edit skillsTeams can write and edit shared skills in the product. | Yessource | Not publishedDiaphora acquisition (Sep 16, 2026) adds workflow 'blueprints', not skills. |
| Git sync for skillsSkills sync to or from a Git repository. | Yessource | Not published |
| Skills delivered by roleSkills reach people based on their role or group. | Yessource | Not published |
| Skills over MCPSkills are served to AI clients through MCP. | Not published | Not published |
Deployment
| Feature | Metorial | Barndoor |
|---|---|---|
| Source licenseThe license the product’s code is published under, if any. | FSL-1.1-ALv2 engine (Apache 2.0 after two years); Apache-2.0 integration catalogsourceThe engine (metorial-platform) is source-available under FSL and converts to Apache 2.0 two years after each release. The integration catalog (metorial/metorial) is Apache-2.0. | Not publishedAcquired Diaphora's open-source Frags engine; the gateway itself has no published source. |
| Self-hostYou can run it on your own infrastructure. | Yessource | YessourceEnterprise plan. |
| VPC or on-premCan be deployed in your own cloud account or data center. | Yessource | YessourcePrivate cloud and on-prem, Enterprise plan. |
| Air-gappedCan run with no internet connection. | Yes | YessourceEnterprise plan. |
| EU data regionData can be hosted in the EU. | Yessource | Not published |
Compliance
| Feature | Metorial | Barndoor |
|---|---|---|
| SOC 2 Type IIHolds a SOC 2 Type II report. | Yessource | Yessource |
| ISO 27001Holds ISO/IEC 27001 certification. | Not published | Not published |
| HIPAASupports HIPAA workloads, usually with a BAA. | YesSigns BAAs. | Not published |
| GDPR and DPAStates GDPR compliance and offers a data processing agreement. | YessourceA data processing agreement is published at /legal/data-processing-agreement. | Not published |
Pricing
| Feature | Metorial | Barndoor |
|---|---|---|
| Public pricingPrices are published on the vendor’s site. | Yessource | Nosource |
| Free tierA free plan or free edition exists. | Yessource | NosourceTime-limited trial only (100K LLM requests, no credit card); no permanent free plan listed. |
| Starting priceThe lowest published paid price, as listed. | $0 (Dev); Scale from $250/monthsource | Contact Salessource |
| Pricing modelHow the vendor charges: per seat, usage, platform fee, or a mix. | Flat monthly plans with paid add-ons (extra seats, tool calls)source | Two tiers (Pro up to 50 identities, Enterprise unlimited), sales-quotedsource |
Which should you pick?
| Situation | Pick | Why |
|---|---|---|
| Rolling AI out to every employee in the clients they already use | Either | Both connect to existing AI clients. Compare the client list below. |
| You must self-host | Either | Both document a self-hosted option. |
| You need an LLM gateway or model routing today | Barndoor | Barndoor documents an LLM gateway. Metorial doesn't ship one yet. |
| Teams should share skills, not only tools | Metorial | Metorial lets teams write skills together and deliver them by role. |
| You are building integrations into your own product | Either | Both offer an SDK or API for your own agents. |
What each Metorial plan includes
From the Metorial pricing page.
| Included | Metorial Dev | Metorial Scale | Metorial for Enterprise |
|---|---|---|---|
| Tool calls per month | 500,000 | 2,500,000 | Custom |
| Callbacks | 10,000 | 100,000 | Custom |
| Workforce seats | 2 | 20 | Custom |
| Provider integrations | 10 | Unlimited | Unlimited |
| Log retention | 30 days | 90 days | Custom |
| Production access | Not included | Included | Included |
On every plan
- Slack and email support
- Auth Connections: Unlimited
- Sessions: Unlimited
- Concurrent Connections: Unlimited
- Developer API Access
- Custom Integrations
- Remote MCP Servers
- Managed MCP Servers
Moving from Barndoor to Metorial
- Remote MCP servers you use through Barndoor can be added to Metorial as they are.
- OAuth apps registered under your company can be reused, so people sign in the way they do today.
- Sign-in moves to your identity provider through SAML; groups decide who gets which tools.
- Skills, policies and audit history in Barndoor don't transfer automatically. Talk to us about moving them.
Book a demo to plan the move with us.
Frequently asked questions
Common questions about Metorial and Barndoor.
Is Barndoor open source?
Barndoor's own pages don't state a source license.Can I self-host Barndoor?
Yes, Barndoor documents a self-hosted option.Does Barndoor work with ChatGPT?
Yes, Barndoor documents ChatGPT support.Is Metorial cheaper than Barndoor?
Metorial's Dev plan is free and Scale starts at $250 a month. Barndoor doesn't publish prices, so a direct comparison needs a quote.Is Metorial SOC 2 compliant?
Yes. Metorial is SOC 2 Type 2 and GDPR compliant, with EU and US regions.Is Metorial open source?
Metorial's engine is published under FSL-1.1-ALv2 engine (Apache 2.0 after two years); Apache-2.0 integration catalog. You can self-host it or use the hosted platform.
More comparisons
Checked October 17, 2026. 36 Barndoor facts are sourced, each linked in its row. Spotted something wrong? Tell us and we will fix it. All product names are trademarks of their owners.