Boreon MCP Layer · LLM Portal
Where it lives: inside your firewall.
One MCP server, inside your own Azure or AWS cloud, next to your data and your warehouses. Your people reach it over HTTPS through your own sign-in, and the AI calls go out on your own OpenAI keys.
Outside your cloud
Your Azure VNet or AWS VPC · private subnet
Boreon MCP ServerYour central LLM portal
Your platforms
Hover or tap any part to trace what it talks to.
Every piece stays on your side.
-
WAF edge
Caddy with OWASP Coraza rules in front of everything.
-
MCP server
Chat, migrations and fidelity checks in one set of containers.
-
Postgres + pgvector
Knowledge, the audit trail and secrets, behind your firewall.
-
Your OpenAI keys
Azure OpenAI or OpenAI, on your own keys and your own account.
-
Your storage
Backups land in your own S3 or Blob storage.
-
Your SSO
Entra ID, Okta or any OIDC provider. Roles carry through to both warehouses.
When Tableau is retired, it keeps serving.
The same server keeps serving both warehouses as your LLM portal, and you can upgrade it whenever you like.
Which Tableau dashboard would you move first?
Start there. It becomes the first thing we move, checked number by number against Tableau, and the portal it lands in stays yours.