# OneNote MCP Server: Governed AI Access

OneNote's MCP server includes 8 different actions available to any connected model or AI agent. When registered with Barndoor, you can ensure centralized governance, visibility, and control across every AI agent your team uses.

**Tools** **8**  
**Capabilities** **[Create](/content/integration-capability/create/index.html), [Read](/content/integration-capability/read/index.html), [Update](/content/integration-capability/update/index.html)**  
**Category** **[Microsoft 365](/content/integration-category/microsoft-365/index.html)**  
**Type** **Barndoor Hosted**

## What can AI agents do with the OneNote MCP server?

### Tools Available

- **me_onenote_CreateNotebooks**  
   *create*  
   Creates a new OneNote notebook using a display name.
- **me_onenote_ListNotebooks**  
   *read*  
   Lists OneNote notebooks. Notebooks are top-level containers for sections and pages.
- **me_onenote_ListPages**  
   *read*  
   Lists OneNote pages. Pages store notes and content within sections.
- **me_onenote_GetPagesContent**  
   *read*  
   Retrieves HTML content for a OneNote page by ID.
- **me_onenote_UpdatePagesContent**  
   *update*  
   Updates HTML content for a OneNote page by ID.
- **me_onenote_CreatePages**  
   *create*  
   Creates a OneNote page in a specified section using HTML multipart content.

[See full list →](https://docs.barndoor.ai/mcp-servers/onenote)

## Use cases for OneNote

- **Notebook Management**
   - "Create and list notebooks"
   - "Create and organize sections"
   - "Browse notebook structure"

- **Page Authoring**
   - "Create new note pages"
   - "Update page HTML content"
   - "Write formatted notes"

- **Content Reading**
   - "List pages in sections"
   - "Retrieve page HTML content"
   - "View full note details"

- **Content Organization**
   - "Organize notes by notebook"
   - "Structure sections and pages"
   - "Navigate note hierarchy"

## What are the risks of using the OneNote MCP without an AI gateway?

- **Uncontrolled reads** — AI agents can pull data out of OneNote with no visibility into what was accessed.
- **Ungoverned writes** — agents can create or modify records in OneNote with no approval step.
- **Destructive actions** — agents can delete or overwrite OneNote data with no approval gate or audit trail.

## Why connect OneNote with the Barndoor AI gateway?

Barndoor MCP Governance is the gateway between your AI agents and the tools they use.

| At a glance | Available? |
| --- | --- |
| Fine-grained access control policies per agent, team, role, user, MCP server and tool call | Yes |
| Approval required before write/destructive actions | Yes (configurable per role) |
| Full audit log (reads and writes) | Yes |
| Sensitive data detection before it reaches a model or agent | Yes |
| Instant access revocation | Yes |
| SOC 2 Type II compliant | Yes |

- **Centralized MCP management** — One place to manage and control every MCP server across the organization so your team has an approved catalog of MCP servers that employees and AI agents connect through.
- **Universal connection** — One universal URL works across every AI provider your team uses.
- **Fine-grained access controls** — Set access policies for how AI is connecting with OneNote based on human identities, agent profiles, tool-access, context, and data fields.
- **Protect sensitive data** — Keeps sensitive data from reaching a model or AI agent with PII detection, masking, tokenization, redaction, and more.
- **Observability** — Real-time reporting and dashboards that give you visibility into what AI is doing with OneNote, how policies are being enforced, and who (human or agent) is doing what.
- **Enterprise-grade security** — Stay compliant with audit trails and logging.

## Getting started with OneNote in Barndoor

1. Connect the OneNote MCP server once  
2. Define your policies  
3. Go live across every AI client

[See the full setup guide →](https://docs.barndoor.ai/mcp-servers/onenote#setup-instructions)

## Frequently asked questions

- **What is MCP?**  
   MCP (Model Context Protocol) is the open standard that lets AI models and agents connect to external tools and data sources through a common interface, instead of a custom integration for every tool. OneNote is an MCP server that exposes a defined set of tools an AI agent can call. Barndoor sits at that connection point, applying access policies and audit logging to every tool call regardless of which AI client is making it.

- **Is Barndoor secure?**  
   Yes. Barndoor is SOC 2 Type II compliant. Barndoor enforces fine-grained access control, requires approval before destructive actions, protects sensitive data with data loss prevention, and logs every action for audit.

- **How can I get started with OneNote and Barndoor?**  
   Connect OneNote once, define your access policies, and go live across every AI client your team uses. Setup takes three steps: connect the server, define policies by role or agent, and roll out to compatible clients.