AWS S3 MCP Server

MCP Server for AWS S3 operations, providing secure access to S3 buckets through pre-signed URLs.

Tools

1. list_objects

   • List objects in an S3 bucket
   • Input:
     • prefix (string, optional): Prefix filter for object keys
   • Returns: Array of objects with keys, sizes, and last modified dates

2. get_object

   • Generate a pre-signed URL for accessing an object
   • Inputs:
     • key (string, required): Object key to retrieve
     • expiry (number, optional): URL expiration time in seconds (default: 3600)
   • Returns: object_url containing the pre-signed URL

3. put_object

   • Generate a pre-signed URL for uploading an object
   • Inputs:
     • key (string, required): Object key to upload
     • content_type (string, optional): Content type to sign into the upload URL
     • expiry (number, optional): URL expiration time in seconds (default: 3600)
   • Returns: upload_url containing the pre-signed URL

4. upload_file

   • Upload a local file to S3 through a generated pre-signed PUT URL
   • Inputs:
     • source_path (string, required): Local file path to upload from the MCP server host
     • key (string, required): S3 object key to upload to
     • content_type (string, optional): Content type to set on the uploaded object
     • expiry (number, optional): Pre-signed URL expiration time in seconds (default: 3600)
   • Returns: Upload status, uploaded byte count, object key, and generated upload_url

5. download_file

   • Download an S3 object to a local file through a generated pre-signed GET URL
   • Inputs:
     • key (string, required): S3 object key to download
     • destination_path (string, required): Local file path to write to on the MCP server host
     • expiry (number, optional): Pre-signed URL expiration time in seconds (default: 3600)
   • Returns: Download status, downloaded byte count, object key, destination path, and generated download_url

6. delete_object

   • Delete an object from the bucket
   • Input:
     • key (string, required): Object key to delete
   • Returns: success boolean indicating deletion status

Setup

Environment Variables

The server requires the following environment variables:

• BUCKET_NAME: The name of your S3 bucket (required)
• REGION: AWS region (default: "ap-southeast-1")

AWS credentials should be configured using standard AWS credential configuration methods (environment variables, IAM roles, or AWS credentials file).

Usage with Claude Desktop

Add the following to your claude_desktop_config.json:

{
  "mcpServers": {
    "aws-ow-s3-mcp": {
      "command": "docker",
      "args": [
        "run",
        "-i",
        "--rm",
        "-e",
        "BUCKET_NAME",
        "-e",
        "REGION",
        "-e",
        "AWS_ACCESS_KEY_ID",
        "-e",
        "AWS_SECRET_ACCESS_KEY",
        "mcp/aws-ow-s3-mcp"
      ],
      "env": {
        "BUCKET_NAME": "<YOUR_BUCKET_NAME>",
        "REGION": "<AWS_REGION>",
        "AWS_ACCESS_KEY_ID": "<YOUR_ACCESS_KEY>",
        "AWS_SECRET_ACCESS_KEY": "<YOUR_SECRET_KEY>"
      }
    }
  }
}

NPX Command

{
  "mcpServers": {
    "aws-ow-s3-mcp": {
      "command": "npx",
      "args": [
        "-y",
        "@uania/aws-ow-s3-mcp"
      ],
      "env": {
        "BUCKET_NAME": "<YOUR_BUCKET_NAME>",
        "REGION": "<AWS_REGION>",
        "AWS_ACCESS_KEY_ID": "<YOUR_ACCESS_KEY>",
        "AWS_SECRET_ACCESS_KEY": "<YOUR_SECRET_KEY>"
      }
    }
  }
}

Build

Docker build:

docker build -t mcp/aws-ow-s3-mcp-server .

Development

The server is built using:

• Node.js
• TypeScript
• @modelcontextprotocol/sdk
• @aws-sdk/client-s3
• @aws-sdk/s3-request-presigner

License

This MCP server is licensed under the MIT License. This means you are free to use, modify, and distribute the software, subject to the terms and conditions of the MIT License. For more details, please see the LICENSE file in the project repository.