# DigitalOcean Spaces MCP Server: Governed AI Access

DigitalOcean Spaces's MCP server includes 5 different actions available to any connected model or AI agent. When registered with Barndoor, you can ensure centralized governance, visibility, and control across every AI agent your team uses.

Tools **5**  
Capabilities **[Create](/content/integration-capability/create/index.html), [Delete](/content/integration-capability/delete/index.html), [Read](/content/integration-capability/read/index.html), [Update](/content/integration-capability/update/index.html)**  
Category **[DevOps & Infrastructure](/content/integration-category/devops-infrastructure/index.html)**  
Type **Barndoor Hosted**

## What can AI agents do with the DigitalOcean Spaces MCP server?

### Tools Available

| Action              | Capability | Description                                                                 |
|---------------------|------------|-----------------------------------------------------------------------------|
| spaces-key-create   | create     | Create a new DigitalOcean Spaces access key.                               |
| spaces-key-list     | read       | List DigitalOcean Spaces access keys with pagination.                       |
| spaces-key-get      | read       | Get information about a specific DigitalOcean Spaces access key.           |
| spaces-key-update    | update     | Update an existing DigitalOcean Spaces access key.                         |
| spaces-key-delete     | delete     | Delete an existing DigitalOcean Spaces access key.                          |

[See full list →](https://docs.barndoor.ai/mcp-servers/digitalocean-spaces)

## Use cases for DigitalOcean Spaces

- **Access Key Management**  
  "Create new Spaces access keys", "Retrieve access key details", "Delete outdated access keys"

- **Key Lifecycle Automation**  
  "List all Spaces access keys", "Update and rotate access keys", "Automate key provisioning workflows"

- **Credential Auditing**  
  "Audit active access keys", "Track key creation and updates", "Manage key permissions"

- **Key Provisioning**  
  "Provision new application keys", "Configure key metadata and permissions", "Integrate Spaces access with services"

## What are the risks of using the DigitalOcean Spaces MCP without an AI gateway?

- **Uncontrolled reads** — AI agents can pull data out of DigitalOcean Spaces with no visibility into what was accessed.
- **Ungoverned writes** — Agents can create or modify records in DigitalOcean Spaces with no approval step.
- **Destructive actions** — Agents can delete or overwrite DigitalOcean Spaces data with no approval gate or audit trail.

## Why connect DigitalOcean Spaces with the Barndoor AI gateway?

Barndoor MCP Governance is the gateway between your AI agents and the tools they use.

| At a glance                                                   | Available? |
|-------------------------------------------------------------|------------|
| Fine-grained access controls policies per agent, team, role, user, MCP server and tool call | Yes        |
| Approval required before write/destructive actions           | Yes (configurable per role) |
| Full audit log (reads and writes)                            | Yes        |
| Sensitive data detection before it reaches a model or agent | Yes        |
| Instant access revocation                                     | Yes        |
| SOC 2 Type II compliant                                      | Yes        |

- **Centralized MCP management** — One place to manage and control every MCP server across the organization.
- **Universal connection** — One universal URL works across every AI provider your team uses.
- **Fine-grained access controls** — Set access policies based on human identities, agent profiles, tool-access, context, and data fields.
- **Protect sensitive data** — Keeps sensitive data from reaching a model or AI agent with PII detection, masking, tokenization, redaction, and more.
- **Observability** — Real-time reporting and dashboards that give you visibility into what AI is doing with DigitalOcean Spaces.
- **Enterprise-grade security** — Stay compliant with audit trails and logging.

## Getting started with DigitalOcean Spaces in Barndoor

1. Connect the DigitalOcean Spaces MCP server once
2. Define your policies
3. Go live across every AI client

[See the full setup guide →](https://docs.barndoor.ai/mcp-servers/digitalocean-spaces#setup-instructions)

## Frequently asked questions

**What is MCP?**  
MCP (Model Context Protocol) is the standard that lets AI models and agents connect to external tools and data sources through a common interface. DigitalOcean Spaces is an MCP server that exposes a defined set of tools an AI agent can call.

**Is Barndoor secure?**  
Yes. Barndoor is SOC 2 Type II compliant, enforcing access control, requiring approvals, protecting data with loss prevention, and logging every action for audit.

**How are DigitalOcean Spaces schema changes handled?**  
Barndoor tracks tool and schema changes, inheriting deny-by-default access until approved.

**How can I get started with DigitalOcean Spaces and Barndoor?**  
Connect DigitalOcean Spaces once, define your access policies, and go live across AI clients.