Stream Vessel

npx add-mcp 'https://mcp.streamvessel.com'

What is Stream Vessel MCP?

An MCP server for S3, hosted by Stream Vessel. The Model Context Protocol lets AI clients call tools; this server's tools list, search, read, write, copy, move and delete objects in the storage you connected to Stream Vessel Cloud. The AI authenticates with a Stream Vessel token, so your storage keys never leave Stream Vessel.

Why this matters, and how it compares with putting keys in an MCP config: secure S3 access for AI agents.

Which MCP clients can use it?

• Claude Code. One claude mcp add command gives Claude S3 access through your token.
• Cursor. Cursor S3 access through a deep link or mcp.json.
• VS Code. A deep link or mcp.json.
• Other MCP clients. Any client that connects to a remote HTTP server with an Authorization header.

Coming soon OAuth remote connectors, for hosted AI clients that do not accept a bearer token.

Token, connect kit, work.

1

Create a token

Choose READ, WRITE or FULL, and an expiry: 30 days, 90 days, a year, or a date you pick.

2

Copy the connect kit

A Claude Code command, an mcp.json block, or a Cursor or VS Code deep link.

3

Let the agent work

It lists, searches, reads, writes, copies, moves and deletes, within its tier. You watch the audit log.

One page: tokens, connect kit, audit.

# Claude Code
claude mcp add stream-vessel \
  --transport http https://app.streamvessel.com/mcp \
  --header "Authorization: Bearer svmt_…"

// mcp.json · Cursor, VS Code, any client
{
  "mcpServers": {
    "stream-vessel": {
      "url": "https://app.streamvessel.com/mcp",
      "headers": { "Authorization": "Bearer svmt_…" }
    }
  }
}

Everything the explorer can do, as tools.

Discover

list_connections list_buckets list_objects find_objects stat_prefix

Read

read_object get_object_metadata create_download_link

Write

write_object set_object_metadata create_upload_link copy_object move_object

Delete

delete_object delete_objects delete_prefix

Built to be revoked.

• Tokens expire on the schedule you set. 30 or 90 days, a year, or a date you pick. Expired tokens stop working on their own.
• Revoke any time from the token list. The key underneath never moves.
• Audit log of every tool call, and rate limits.
• Your keys bound the token. The agent reaches what your connections' keys reach. A key limited to one bucket, such as a bucket-scoped R2 token or a bucket-restricted B2 application key, keeps the agent in that bucket.
• Shared connections included. A token works on a connection shared with you, at the lower of the token's tier and the share's level.

Tighter scopes, more clients.

• Restrict a token to chosen connections, buckets and prefixes
• Scoped connections, s3://bucket/prefix/, on Stream Vessel Cloud
• Remote connectors with OAuth for hosted AI clients
• MCP on self-hosted

Which storage can AI access?

Every provider Stream Vessel Cloud connects to. The endpoint must be reachable from the internet, because tool calls run on Stream Vessel's servers.

MCP questions

What is Stream Vessel MCP?

A hosted MCP server at https://app.streamvessel.com/mcp that gives AI clients tools to work with the S3 and S3-compatible storage you connected to Stream Vessel Cloud. The client authenticates with a Stream Vessel token, never with your storage keys.

Which MCP clients can use it?

Claude Code, Cursor and VS Code have ready-made setup in the connect kit. Any other MCP client that can connect to a remote HTTP server and send an Authorization header works with the same mcp.json settings. Clients that only support OAuth remote connectors are not supported yet; OAuth is coming soon.

How are my storage credentials protected?

They stay encrypted with AES-256 on Stream Vessel servers. The AI client gets only a token, which you can revoke or let expire without touching the key.

Can I restrict what the AI can reach?

Each token has a tier, READ, WRITE or FULL, and an expiry. What it can reach is bounded by your connections' keys, so a key limited to one bucket keeps the agent in that bucket. Restricting a token to chosen connections, buckets and prefixes is coming soon.

Are AI operations auditable?

Yes. Every tool call is recorded in a server-side audit log, and tokens are rate-limited.

Which storage providers can the AI access?

Any connection in Stream Vessel Cloud: AWS S3, Cloudflare R2, Backblaze B2, Wasabi, DigitalOcean Spaces, MinIO, IDrive e2 and other S3-compatible endpoints reachable from the internet, plus connections shared with you.