Botoi MCP Server
49 developer tools via MCP: DNS, WHOIS, IP lookup, JWT, hashing, QR, and more.
What is the Botoi MCP Server?
The Botoi MCP server gives AI agents structured, permission-aware access to Botoi through the Model Context Protocol. With 49 pre-built actions, agents can read, create, and update Botoi data on behalf of authorized users.
Willow ships the Botoi MCP server as part of an enterprise control plane. Every call runs behind SSO (Okta, Azure AD), enforces RBAC and least-privilege at runtime, writes to a full audit trail, and integrates with Splunk and Loki for SIEM visibility. Connect from Claude Desktop, Claude Code, Cursor, ChatGPT, VS Code, n8n, or any custom agent. Install once, distribute org-wide, and see exactly how Botoi is being used by every AI agent in your stack.
Tools
lookup_ip
Look up geolocation, ISP, and network details for an IP address. Use when you need to determine the physical location, internet provider, or AS number for a given IP.
lookup_dns
Query DNS records (A, AAAA, MX, TXT, CNAME, NS) for a domain. Use when you need to check DNS configuration or troubleshoot domain resolution.
lookup_whois
Get WHOIS registration data for a domain. Use when you need to find domain ownership, registrar, or expiration date.
lookup_ssl
Check SSL certificate details and expiry for a domain. Use when verifying HTTPS configuration or checking certificate validity.
lookup_email
Validate an email address (syntax, MX record, disposable check). Use when you need to verify if an email address is real and deliverable.
lookup_headers
Fetch HTTP response headers for a URL. Use when inspecting server configuration, security headers, or caching policies.
lookup_url_metadata
Extract title, description, OG tags, and favicon from a URL. Use when you need to preview or summarize a webpage.
lookup_domain_availability
Check if a domain name is available for registration. Use when brainstorming project names or validating domain ideas. Returns availability status and WHOIS data if registered.
lookup_tech_detect
Detect technologies used by a website (frameworks, CMS, analytics). Use when analyzing a competitor's tech stack.
lookup_vpn_detect
Check if an IP address is a VPN, proxy, or Tor exit node. Use when assessing connection trustworthiness or flagging suspicious traffic. Returns detection type and provider details.
lookup_phone
Parse and validate a phone number, returning country, carrier, line type, and E.164 format. Use when normalizing user-submitted phone numbers or verifying contact data.
lookup_company
Look up company information by domain name. Returns name, industry, employee count, location, and social profiles. Use when enriching leads or researching organizations.
text_base64_encode
Encode a UTF-8 string to Base64. Use for embedding data in URLs or APIs that require Base64.
text_base64_decode
Decode a Base64 string back to UTF-8 text. Use when extracting data from Base64-encoded API responses, tokens, or email headers. Returns the original plaintext string.
text_json_format
Format and pretty-print a JSON string with configurable indentation. Use when making minified or compact JSON readable for debugging or documentation.
text_json_validate
Validate whether a string is valid JSON and report parsing errors.
text_markdown_to_html
Convert Markdown text to HTML. Use when rendering Markdown content for web display or email templates. Returns sanitized HTML.
text_html_to_markdown
Convert HTML to clean Markdown. Use when extracting readable content from web pages or migrating HTML docs to Markdown format.
text_csv_to_json
Parse CSV text into a JSON array of objects. Use when converting spreadsheet or tabular data into structured JSON for processing or storage.
text_yaml_to_json
Convert YAML configuration or data to JSON. Use when parsing YAML config files for programmatic access or API consumption. Returns a JSON object.
text_json_to_yaml
Convert JSON data to YAML format. Use when generating human-readable config files from JSON data structures.
text_xml_to_json
Convert XML documents to JSON. Use when parsing XML API responses, feeds, or config files into a structured JSON format for easier processing.
dev_hash
Generate a hash (MD5, SHA-1, SHA-256, SHA-512) of input text. Use for checksums, data integrity, or fingerprinting.
dev_uuid
Generate one or more UUIDs (v4 or v7). Use when you need unique identifiers for database records, request tracing, or idempotency keys.
dev_jwt_sign
Create and sign a JWT with a given payload and secret.
dev_jwt_verify
Verify and decode a JWT. Use when debugging authentication tokens.
dev_cron_describe
Convert a cron expression to a human-readable description.
dev_password_generate
Generate a random password with configurable length and complexity.
dev_url_encode
URL-encode a string by escaping special characters. Use when building query parameters, form data, or safe URLs that contain reserved characters.
dev_url_decode
URL-decode a percent-encoded string back to readable text. Use when parsing query parameters, redirect URIs, or encoded form values.
dev_regex_test
Test a regex pattern against a string and return matches.
dev_diff
Compute a unified diff between two text strings. Use when comparing file versions, config changes, or code revisions. Returns added, removed, and unchanged lines.
dev_semver_parse
Parse and validate a semver string into major, minor, patch, pre-release, and build components. Use when checking version compatibility or sorting releases.
dev_timestamp_convert
Convert between Unix timestamps and ISO 8601 dates. Use when normalizing date formats across APIs, logs, or databases. Returns both Unix and ISO representations.
security_encrypt
Encrypt text using AES-256-GCM with a passphrase.
security_decrypt
Decrypt AES-256-GCM encrypted text with a passphrase.
security_totp_generate
Generate a TOTP secret and provisioning URI for 2FA setup.
security_validate_credit_card
Validate a credit card number (Luhn check, network detection).
security_pii_detect
Detect personally identifiable information (emails, phones, SSNs) in text.
transform_minify_js
Minify JavaScript code by removing whitespace, comments, and shortening variable names. Use when optimizing bundle size for production deployment.
transform_minify_css
Minify CSS stylesheets by removing whitespace, comments, and redundant rules. Use when reducing stylesheet size for faster page loads.
transform_sql_format
Format and beautify SQL queries with proper indentation and keyword casing. Use when cleaning up inline SQL for code reviews, documentation, or debugging.
transform_code_format
Format source code with language-aware indentation and style rules. Supports JS, TS, Python, Go, Rust, and more. Use when standardizing code style or preparing snippets for documentation.
transform_json_to_typescript
Generate TypeScript interfaces from a JSON sample. Use when building type-safe API clients or converting API responses into TypeScript types.
lookup_address_validate
Validate a freeform address and return structured components (street, city, state, postal code, country), GPS coordinates, and confidence score. Use when you need to verify or parse an address.
lookup_breach_check
Check if a password has appeared in known data breaches using k-Anonymity. Returns breach count. Use when you need to verify password safety.
lookup_ssl_cert_expiry
Check SSL certificate expiry for a domain. Returns issuer, valid dates, days remaining, and expired/expiring-soon flags. Use when monitoring certificate health.
lookup_dns_monitor
Check DNS records for a domain and compare against the previous snapshot. Detects record changes over time. Use when monitoring DNS configuration.
lookup_accessibility
Run 10 basic accessibility checks on a webpage URL. Returns a score, issues list, and summary. Use when you need a quick accessibility audit.
Customize Tools
Edit descriptions, modify arguments, select tools, or add new ones
Set Up Your Botoi MCP Server in Minutes
Add the following configuration to your MCP client. Authentication is handled via OAuth. Compatible with Claude Desktop, Claude Code, Cursor, ChatGPT, VS Code, n8n, and any MCP-compatible agent.
Claude Desktop
{
"mcpServers": {
"willow-botoi": {
"type": "http",
"url": "https://<org>.mcp-s.com/mcp/mcp/botoi"
}
}
}Cursor
{
"mcpServers": {
"willow-botoi": {
"type": "http",
"url": "https://<org>.mcp-s.com/mcp/mcp/botoi"
}
}
}Claude Code
claude mcp add willow-botoi --transport http https://<org>.mcp-s.com/mcp/mcp/botoin8n
{
"url": "https://<org>.mcp-s.com/mcp/mcp/botoi",
"method": "POST"
}Or click "Install with Willow" above to set up automatically with SSO and RBAC preconfigured.
Enterprise Governance for Botoi
Willow adds the layer Botoi and every other SaaS doesn't ship out of the box: every call runs behind SSO (Okta, Azure AD), enforces RBAC and least-privilege at runtime, writes to full audit logs, and detects shadow AI usage across your stack. One MCP gateway. Any agent. Every tool.
Botoi MCP Server FAQ
What is the Botoi MCP server?
The Botoi MCP server is a Model Context Protocol implementation that lets AI agents like Claude, Cursor, and ChatGPT read and write Botoi data through a standardized interface. Willow hosts and governs this server so enterprises can roll it out without a security review backlog.
How is Willow's Botoi MCP server different from the official one?
The official Botoi MCP server is scoped to a single user's account and does not include enterprise governance. Willow's version adds SSO, RBAC, audit logging, shadow AI detection, and centralized control over which actions agents can take across the entire org.
Which AI clients work with the Botoi MCP server?
Claude Desktop, Claude Code, Cursor, ChatGPT, VS Code with MCP support, n8n, and any custom agent built with OpenAI Agents SDK, LangChain, Vercel AI SDK, or Anthropic SDK.
Is the Botoi MCP server secure? How does Willow handle authentication?
Every call runs behind your existing SSO (Okta, Azure AD). Per-user OAuth scopes the agent to exactly what that user can do in Botoi, nothing more. No credentials reach the LLM. Every action writes to an audit trail.
Can I limit which Botoi actions agents can take?
Yes. Willow lets you scope agents to specific actions, specific projects, or specific environments. Toggle actions on or off in the dashboard, or enforce policy via infrastructure-as-code through GitHub.
How do I detect shadow Botoi MCP servers in my org?
Willow's browser extension and discovery service surface unmanaged MCP servers, skills, and AI agents across the org. If a developer installed an unapproved Botoi MCP locally, you'll see it.
What does the Botoi MCP server cost?
Pricing depends on org size and deployment model (SaaS, dedicated cloud, self-host). See withwillow.ai/pricing or contact sales for a quote.
How do I install the Botoi MCP server with Willow?
Install via the Willow Connect Panel in one click, or paste the JSON snippet above into your Claude Desktop, Cursor, or Claude Code config. SSO and RBAC inherit from your existing Willow setup.
Compare Willow MCP Gateway
See how Willow stacks up against other MCP platforms on governance, security, and enterprise readiness.
Your agents are already in the wild.
Give them a Basecamp. Go from AI chaos to AI work, in minutes.