How Wix scaled AI-native work to 5,000 employees with Willow
Read More
Enterprise Connectors
Botoi logo. Botoi MCP server connector.

Botoi MCP Server

49 developer tools via MCP: DNS, WHOIS, IP lookup, JWT, hashing, QR, and more.

ToolsTools
49
Last updatedLast Updated
CategoryCategory
All
✓Enterprise-grade security
✓SSO & authentication ready
✓Full governance & audit logs

What is the Botoi MCP Server?

The Botoi MCP server gives AI agents structured, permission-aware access to Botoi through the Model Context Protocol. With 49 pre-built actions, agents can read, create, and update Botoi data on behalf of authorized users.

Willow ships the Botoi MCP server as part of an enterprise control plane. Every call runs behind SSO (Okta, Azure AD), enforces RBAC and least-privilege at runtime, writes to a full audit trail, and integrates with Splunk and Loki for SIEM visibility. Connect from Claude Desktop, Claude Code, Cursor, ChatGPT, VS Code, n8n, or any custom agent. Install once, distribute org-wide, and see exactly how Botoi is being used by every AI agent in your stack.

Tools

lookup_ip

Look up geolocation, ISP, and network details for an IP address. Use when you need to determine the physical location, internet provider, or AS number for a given IP.

lookup_dns

Query DNS records (A, AAAA, MX, TXT, CNAME, NS) for a domain. Use when you need to check DNS configuration or troubleshoot domain resolution.

lookup_whois

Get WHOIS registration data for a domain. Use when you need to find domain ownership, registrar, or expiration date.

lookup_ssl

Check SSL certificate details and expiry for a domain. Use when verifying HTTPS configuration or checking certificate validity.

lookup_email

Validate an email address (syntax, MX record, disposable check). Use when you need to verify if an email address is real and deliverable.

lookup_headers

Fetch HTTP response headers for a URL. Use when inspecting server configuration, security headers, or caching policies.

lookup_url_metadata

Extract title, description, OG tags, and favicon from a URL. Use when you need to preview or summarize a webpage.

lookup_domain_availability

Check if a domain name is available for registration. Use when brainstorming project names or validating domain ideas. Returns availability status and WHOIS data if registered.

lookup_tech_detect

Detect technologies used by a website (frameworks, CMS, analytics). Use when analyzing a competitor's tech stack.

lookup_vpn_detect

Check if an IP address is a VPN, proxy, or Tor exit node. Use when assessing connection trustworthiness or flagging suspicious traffic. Returns detection type and provider details.

lookup_phone

Parse and validate a phone number, returning country, carrier, line type, and E.164 format. Use when normalizing user-submitted phone numbers or verifying contact data.

lookup_company

Look up company information by domain name. Returns name, industry, employee count, location, and social profiles. Use when enriching leads or researching organizations.

text_base64_encode

Encode a UTF-8 string to Base64. Use for embedding data in URLs or APIs that require Base64.

text_base64_decode

Decode a Base64 string back to UTF-8 text. Use when extracting data from Base64-encoded API responses, tokens, or email headers. Returns the original plaintext string.

text_json_format

Format and pretty-print a JSON string with configurable indentation. Use when making minified or compact JSON readable for debugging or documentation.

text_json_validate

Validate whether a string is valid JSON and report parsing errors.

text_markdown_to_html

Convert Markdown text to HTML. Use when rendering Markdown content for web display or email templates. Returns sanitized HTML.

text_html_to_markdown

Convert HTML to clean Markdown. Use when extracting readable content from web pages or migrating HTML docs to Markdown format.

text_csv_to_json

Parse CSV text into a JSON array of objects. Use when converting spreadsheet or tabular data into structured JSON for processing or storage.

text_yaml_to_json

Convert YAML configuration or data to JSON. Use when parsing YAML config files for programmatic access or API consumption. Returns a JSON object.

text_json_to_yaml

Convert JSON data to YAML format. Use when generating human-readable config files from JSON data structures.

text_xml_to_json

Convert XML documents to JSON. Use when parsing XML API responses, feeds, or config files into a structured JSON format for easier processing.

dev_hash

Generate a hash (MD5, SHA-1, SHA-256, SHA-512) of input text. Use for checksums, data integrity, or fingerprinting.

dev_uuid

Generate one or more UUIDs (v4 or v7). Use when you need unique identifiers for database records, request tracing, or idempotency keys.

dev_jwt_sign

Create and sign a JWT with a given payload and secret.

dev_jwt_verify

Verify and decode a JWT. Use when debugging authentication tokens.

dev_cron_describe

Convert a cron expression to a human-readable description.

dev_password_generate

Generate a random password with configurable length and complexity.

dev_url_encode

URL-encode a string by escaping special characters. Use when building query parameters, form data, or safe URLs that contain reserved characters.

dev_url_decode

URL-decode a percent-encoded string back to readable text. Use when parsing query parameters, redirect URIs, or encoded form values.

dev_regex_test

Test a regex pattern against a string and return matches.

dev_diff

Compute a unified diff between two text strings. Use when comparing file versions, config changes, or code revisions. Returns added, removed, and unchanged lines.

dev_semver_parse

Parse and validate a semver string into major, minor, patch, pre-release, and build components. Use when checking version compatibility or sorting releases.

dev_timestamp_convert

Convert between Unix timestamps and ISO 8601 dates. Use when normalizing date formats across APIs, logs, or databases. Returns both Unix and ISO representations.

security_encrypt

Encrypt text using AES-256-GCM with a passphrase.

security_decrypt

Decrypt AES-256-GCM encrypted text with a passphrase.

security_totp_generate

Generate a TOTP secret and provisioning URI for 2FA setup.

security_validate_credit_card

Validate a credit card number (Luhn check, network detection).

security_pii_detect

Detect personally identifiable information (emails, phones, SSNs) in text.

transform_minify_js

Minify JavaScript code by removing whitespace, comments, and shortening variable names. Use when optimizing bundle size for production deployment.

transform_minify_css

Minify CSS stylesheets by removing whitespace, comments, and redundant rules. Use when reducing stylesheet size for faster page loads.

transform_sql_format

Format and beautify SQL queries with proper indentation and keyword casing. Use when cleaning up inline SQL for code reviews, documentation, or debugging.

transform_code_format

Format source code with language-aware indentation and style rules. Supports JS, TS, Python, Go, Rust, and more. Use when standardizing code style or preparing snippets for documentation.

transform_json_to_typescript

Generate TypeScript interfaces from a JSON sample. Use when building type-safe API clients or converting API responses into TypeScript types.

lookup_address_validate

Validate a freeform address and return structured components (street, city, state, postal code, country), GPS coordinates, and confidence score. Use when you need to verify or parse an address.

lookup_breach_check

Check if a password has appeared in known data breaches using k-Anonymity. Returns breach count. Use when you need to verify password safety.

lookup_ssl_cert_expiry

Check SSL certificate expiry for a domain. Returns issuer, valid dates, days remaining, and expired/expiring-soon flags. Use when monitoring certificate health.

lookup_dns_monitor

Check DNS records for a domain and compare against the previous snapshot. Detects record changes over time. Use when monitoring DNS configuration.

lookup_accessibility

Run 10 basic accessibility checks on a webpage URL. Returns a score, issues list, and summary. Use when you need a quick accessibility audit.

Customize tools

Customize Tools

Edit descriptions, modify arguments, select tools, or add new ones

ReviewEdit descriptions
ConfigureChange arguments
ApproveSelect tools
Create NewAdd tool

Set Up Your Botoi MCP Server in Minutes

Add the following configuration to your MCP client. Authentication is handled via OAuth. Compatible with Claude Desktop, Claude Code, Cursor, ChatGPT, VS Code, n8n, and any MCP-compatible agent.

Claude Desktop

claude_desktop_config.json
{
  "mcpServers": {
    "willow-botoi": {
      "type": "http",
      "url": "https://<org>.mcp-s.com/mcp/mcp/botoi"
    }
  }
}

Cursor

.cursor/mcp.json
{
  "mcpServers": {
    "willow-botoi": {
      "type": "http",
      "url": "https://<org>.mcp-s.com/mcp/mcp/botoi"
    }
  }
}

Claude Code

CLI
claude mcp add willow-botoi --transport http https://<org>.mcp-s.com/mcp/mcp/botoi

n8n

HTTP Request Node
{
  "url": "https://<org>.mcp-s.com/mcp/mcp/botoi",
  "method": "POST"
}

Or click "Install with Willow" above to set up automatically with SSO and RBAC preconfigured.

Enterprise Governance for Botoi

Willow adds the layer Botoi and every other SaaS doesn't ship out of the box: every call runs behind SSO (Okta, Azure AD), enforces RBAC and least-privilege at runtime, writes to full audit logs, and detects shadow AI usage across your stack. One MCP gateway. Any agent. Every tool.

Botoi MCP Server FAQ

What is the Botoi MCP server?

The Botoi MCP server is a Model Context Protocol implementation that lets AI agents like Claude, Cursor, and ChatGPT read and write Botoi data through a standardized interface. Willow hosts and governs this server so enterprises can roll it out without a security review backlog.

How is Willow's Botoi MCP server different from the official one?

The official Botoi MCP server is scoped to a single user's account and does not include enterprise governance. Willow's version adds SSO, RBAC, audit logging, shadow AI detection, and centralized control over which actions agents can take across the entire org.

Which AI clients work with the Botoi MCP server?

Claude Desktop, Claude Code, Cursor, ChatGPT, VS Code with MCP support, n8n, and any custom agent built with OpenAI Agents SDK, LangChain, Vercel AI SDK, or Anthropic SDK.

Is the Botoi MCP server secure? How does Willow handle authentication?

Every call runs behind your existing SSO (Okta, Azure AD). Per-user OAuth scopes the agent to exactly what that user can do in Botoi, nothing more. No credentials reach the LLM. Every action writes to an audit trail.

Can I limit which Botoi actions agents can take?

Yes. Willow lets you scope agents to specific actions, specific projects, or specific environments. Toggle actions on or off in the dashboard, or enforce policy via infrastructure-as-code through GitHub.

How do I detect shadow Botoi MCP servers in my org?

Willow's browser extension and discovery service surface unmanaged MCP servers, skills, and AI agents across the org. If a developer installed an unapproved Botoi MCP locally, you'll see it.

What does the Botoi MCP server cost?

Pricing depends on org size and deployment model (SaaS, dedicated cloud, self-host). See withwillow.ai/pricing or contact sales for a quote.

How do I install the Botoi MCP server with Willow?

Install via the Willow Connect Panel in one click, or paste the JSON snippet above into your Claude Desktop, Cursor, or Claude Code config. SSO and RBAC inherit from your existing Willow setup.

Compare Willow MCP Gateway

See how Willow stacks up against other MCP platforms on governance, security, and enterprise readiness.

Your agents are already in the wild.

Give them a Basecamp. Go from AI chaos to AI work, in minutes.