Borneo MCP server

Connect Borneo to Claude, ChatGPT, Cursor, Claude Code, Codex, Gemini, GitHub Copilot and any other MCP client, for your whole team. Metorial adds security, governance, and tracing, and gives everyone one Magic MCP URL to connect.

Deploy BorneoBook a demo

What you can do with the Borneo MCP server

Ask your agent in plain language. Each of these maps to a real tool on the server.

  • Use the manage data breach tool in Borneo
  • Use the manage domain tool in Borneo
  • Use the list inspection results tool in Borneo
  • Use the manage dashboard user tool in Borneo
  • Use the manage department tool in Borneo
  • Use the manage scan tool in Borneo

Supported Tools

manage_data_breach

Manage Data Breach

Create, retrieve, update, list, or delete data breach evaluation records. Also supports evaluating breach impact for compliance and risk management. Use this for all data breach lifecycle operations.

manage_domain

Manage Domain

Create, retrieve, list, update, or delete domains with configurable polling frequencies. Domains represent connected systems or applications with automatic polling capabilities.

list_inspection_results

List Inspection Results

Retrieve paginated inspection findings from data scans. Filter and sort results to identify discovered sensitive data such as PII, PFI, PHI, API tokens, and credentials.

manage_dashboard_user

Manage Dashboard User

Create, list, enable, disable, or remove dashboard users. Provision user accounts with role-based access control and organizational permissions.

manage_department

Manage Department

Create, retrieve, list, update, or delete departments. Supports multilingual translations for department names.

manage_scan

Manage Scan

Retrieve scan details, list scans, or control scan execution (pause, resume, stop). Use this to monitor and manage ongoing or completed data discovery scans.

create_and_schedule_scan

Create & Schedule Scan

Create and schedule a sensitive data scan across cloud resources. Supports one-time and recurring scans with configurable scan types (full or sample), resource selection, and inspection policies.

manage_processing_activity

Manage Processing Activity

Create, retrieve, update, list, delete, or export processing activities. Processing activities define data processing workflows with compliance attributes for GDPR and other regulations.

get_cloud_account

Get Cloud Account

Retrieve configuration and status details for a connected cloud account. Provides visibility into the cloud account's integration status and settings.

get_scan_iteration

Get Scan Iteration

Retrieve detailed information about a specific scan iteration, including its status, results, and metadata. Useful for tracking individual scan executions within a scheduled scan.

get_resource_statistics

Get Resource Statistics

Retrieve data-resource size, entity count, and measurement units for the connected Borneo organisation.

manage_legal_document

Manage Legal Document

Create, retrieve, list, or delete legal documents such as privacy policies and data processing agreements. Legal documents are tracked with associated metadata for compliance purposes.

manage_infotype_category

Manage Infotype Category

Create, retrieve, list, or delete infotype categories for organizing and grouping sensitive data types. Categories help classify discovered data (PII, PFI, PHI, etc.) into meaningful hierarchies.

manage_employee

Manage Employee

Create, retrieve, update, list, or delete employee records. Supports personal information, job details, department assignment, and organizational structure for HR integration.

manage_asset

Manage Asset

Create, retrieve, update, list, or delete assets. Assets can be hardware, software, or documentation items tracked within the platform for inventory management.

download_report

Download Dashboard Report

Download or list dashboard reports. Supports privacy operations, data discovery, and data flow report types. Retrieve specific reports by ID or generate new downloadable reports.

export_inventory

Export Inventory Resources

Export filtered and sorted lists of inventory resources. Supports field selection, sorting, and filtering by account, region, resource type, and tags. Optionally include violation metrics and framework exception counts.

manage_headquarter

Manage Headquarter

Create, retrieve, list, or delete headquarter/office location entries. Register organizational office locations with address details for compliance and organizational management.

manage_recipient

Manage Recipient

Create, retrieve, update, list, or delete data recipients. Also supports confirming discovered recipients and archiving them. Manage data sharing relationships with compliance tracking.

manage_dpia

Manage DPIA

Create, retrieve, update, or delete Data Protection Impact Assessments (DPIAs) for processing activities. Includes comprehensive risk assessments for confidentiality, integrity, and availability compliance.

list_connectors

List Connectors

Discover Borneo connectors and their IDs, resource types, and connection states before creating a scan.

get_current_user

Get Current User

Identify the authenticated Borneo user and discover their roles and authorised organisations.

list_scan_iterations

List Scan Iterations

List scan executions and their iteration IDs. Pass an iteration ID to get_scan_iteration for its detailed resource results.

list_accounts

List Accounts

Discover Borneo accounts and cloud-account identifiers, connection names, types, and status. Use the returned cloudAccountId with get_cloud_account.

Connect Borneo to your AI client

Every client uses the same Magic MCP URL, and so does any other MCP client. Add it once and sign in with SSO.

  1. Enable Borneo in Metorial. In your Metorial portal, enable the Borneo MCP server and sign in with the account that owns the data. Access stays governed by your team policies.
  2. Add a custom connector. Open Customize, then Connectors. Select Add, then Custom, then Web.
  3. Paste your Metorial MCP URL. Name it Metorial, paste your Magic MCP URL (<your-magic-mcp-url>) and continue.
  4. Sign in. Select Add and sign in to load Borneo tools.

Run Borneo through the Metorial gateway

One governed layer for every app your agents reach, not a separate connector per tool.

  • Give Borneo and every other app to your whole team through one MCP gateway, behind your SSO.
  • Scope which teams and agents can use Borneo tools with role-based access control, and trace every call.
  • Prefer to run it yourself? Metorial is open source and self-hostable.

More integrations teams use with Borneo

Google Sheets

Create, read, and update spreadsheets and their cell data. Read and write values to individual cells, ranges, or multiple ranges using A1 notation or named ranges. Apply cell formatting including text styles, backgrounds, borders, number formats, and conditional formatting. Manage sheets (tabs) within a spreadsheet—add, delete, copy, rename, and reorder them. Create and manage embedded charts, pivot tables, filter views, data validation rules, protected ranges, named ranges, and merged cells. Perform batch operations to apply multiple updates atomically.

GitHub

Manage repositories, issues, and pull requests. Create and configure branches, star repositories, review code, and merge changes. Automate CI/CD workflows with GitHub Actions, manage workflow runs, secrets, and artifacts. Track issues with labels, milestones, and assignees. Search across code, repositories, issues, and users. Manage organizations, teams, and memberships. Create and manage projects, gists, packages, deployments, and environments. Access security alerts including code scanning, secret scanning, and Dependabot alerts. Read and write file contents in repositories. Manage webhooks, notifications, and codespaces.

Salesforce

Manage CRM data including Accounts, Contacts, Leads, Opportunities, Cases, and custom objects. Create, read, update, and delete records. Query data using SOQL and search across objects using SOSL. Perform bulk data operations for large-scale imports, exports, and migrations. Execute composite requests to batch multiple operations in a single API call. Access analytics, reports, and dashboards. Manage files and attachments associated with records. Interact with Chatter feeds, posts, and groups for social collaboration. Manage org metadata including custom objects, fields, layouts, and workflows. Query data using GraphQL for precise data retrieval across related objects.

Sharepoint

Manage SharePoint sites, document libraries, lists, and files. Create, read, update, and delete lists and list items with custom columns. Resolve site users to numeric Person/Group LookupId values. Upload, download, move, copy, and version files in document libraries. Search across sites, files, folders, lists, and list items using Microsoft Search. Manage permissions at site, list, and item levels with granular access control. Define and manage content types and site columns. Retrieve site properties and search for sites across Microsoft 365.

Airtable

Create, read, update, and delete records in Airtable bases and tables. Manage base schemas including creating tables and fields. Filter records using formulas, sort by fields, and scope queries to specific views. Upsert records to find, create, or update in a single call. Upload attachments to records, read and write record comments, list accessible bases, and receive real-time base change events through webhooks.

Google Drive

Upload, download, create, copy, move, rename, trash, and permanently delete files and folders in Google Drive. Search for files using complex queries filtering by name, MIME type, owner, modification date, labels, and other metadata. Share files and folders with specific users, groups, or domains with role-based permissions (owner, writer, commenter, reader). Manage shared drives and their members. Export Google Workspace files (Docs, Sheets, Slides) to standard formats like PDF, DOCX, and XLSX. Track file revision history and restore earlier versions. Create, read, update, and delete threaded comments and replies on files. Read label definitions and search files by label. Browse the Drive apps installed for your account. Store app-specific data in a hidden per-user folder.

Technical notes for Borneo

Manage Borneo sensitive-data scans, inspect scan findings, discover connected accounts and connectors, and maintain privacy operations records. Create and update breach records, processing activities, DPIAs, recipients, assets, and organisation records. Download inventory exports and dashboard reports.

Frequently asked questions

Common questions about connecting Borneo to AI agents with Metorial.

  1. How many tools does the Borneo MCP server have?
    The Borneo MCP server exposes 24 tools, including Manage Data Breach, Manage Domain, List Inspection Results. Each one is governed and traced through Metorial.
  2. Borneo exposes tools your agents call on demand; it does not publish event triggers yet. Everything still runs through one governed MCP URL.
  3. Any MCP client, including VS Code, Windsurf, Zed, OpenCode and Grok. Each one reaches the Borneo MCP server through the same Metorial URL.
  4. Use role-based access control to decide which teams, users, and agents can use Borneo and which of its tools they can call.
  5. Yes. Metorial is open source, so you can run the Borneo MCP server yourself or use the hosted gateway.

Connect Borneo to production AI agents

See how Metorial gives your team governed access to Borneo, with tracing and security controls built in.

Book a demoDeploy Borneo