Connect
Optimize
Secure
Live 89 Actions
Amazon S3 MCP Server
for AI Agents
StackOne's Amazon S3 MCP server gives AI agents 89 ready-to-use actions for Amazon S3 — with built-in authentication, security, governance, token efficiency, and high tool-calling accuracy.
Amazon S3 MCP Server
Built by 
StackOne
StackOne 
Coverage
89 Agent Actions
Create, read, update, and delete across Amazon S3 — and extend your agent's capabilities with custom actions.
Authentication
Agent Tool Authentication
Per-user OAuth in one call. Your Amazon S3 MCP server gets session-scoped tokens with zero credentials stored on your infra.
Agent Auth →
Security
Agent Protection
Every Amazon S3 tool response scanned for prompt injection in milliseconds — 88.7% accuracy, all running on CPU.
Prompt Injection Defense →
Performance
Max Agent Context. Min Cost.
Free up to 96% of your agent's context window to enhance reasoning and reduce cost, on every Amazon S3 call.
Tools Discovery →What is the Amazon S3 MCP Server?
A Amazon S3 MCP server lets AI agents read and write Amazon S3 data through the Model Context Protocol — Anthropic's open standard for connecting LLMs to external tools. StackOne's Amazon S3 MCP server ships with 89 pre-built actions, fully extensible via the Connector Builder — plus managed authentication, prompt injection defense, and optimized agent context. Connect it from MCP clients like Claude Desktop, Claude Code, Cursor, Goose, and VS Code, or from agent frameworks like OpenAI Agents SDK, LangChain, and Vercel AI SDK.
All Amazon S3 MCP Tools and Actions
Every action from Amazon S3's API, ready for your agent. Create, read, update, and delete — scoped to exactly what you need.
Bucket Intelligent-Tiering Configurations
- List Bucket Intelligent-Tiering Configurations
List all S3 Intelligent-Tiering configurations attached to a bucket
- Get Bucket Intelligent-Tiering Configuration
Retrieve a specific S3 Intelligent-Tiering configuration by ID
- Delete Bucket Intelligent-Tiering Configuration
Remove an S3 Intelligent-Tiering configuration from a bucket
Bucket Inventory Configurations
- List Bucket Inventory Configurations
List all S3 Inventory configurations defined on a bucket
- Get Bucket Inventory Configuration
Retrieve a specific S3 Inventory configuration by ID
- Delete Bucket Inventory Configuration
Remove an S3 Inventory configuration from a bucket
Bucket Analytics Configurations
- List Bucket Analytics Configurations
List all S3 Analytics Storage Class Analysis configurations on a bucket
- Get Bucket Analytics Configuration
Retrieve a specific S3 Analytics configuration by ID
- Delete Bucket Analytics Configuration
Remove an S3 Analytics configuration from a bucket
Bucket Metrics Configurations
- List Bucket Metrics Configurations
List all CloudWatch request metrics configurations on a bucket
- Get Bucket Metrics Configuration
Retrieve a specific CloudWatch request metrics configuration by ID
- Delete Bucket Metrics Configuration
Remove a CloudWatch request metrics configuration from a bucket
Bucket CORSs
- Get Bucket CORS
Retrieve the cross-origin resource sharing (CORS) configuration for an S3 bucket
- Delete Bucket CORS
Remove the cross-origin resource sharing (CORS) configuration from an S3 bucket
Bucket Encryptions
- Get Bucket Encryption
Retrieve the default server-side encryption configuration for an S3 bucket
- Delete Bucket Encryption
Remove the default server-side encryption configuration from an S3 bucket
Bucket Websites
- Get Bucket Website
Retrieve the static website hosting configuration for an S3 bucket
- Delete Bucket Website
Disable static website hosting on an S3 bucket
Bucket Replications
- Get Bucket Replication
Retrieve the replication configuration for an S3 bucket
- Delete Bucket Replication
Remove the replication configuration from an S3 bucket
Bucket Ownership Controls
- Get Bucket Ownership Controls
Retrieve the object ownership controls for an S3 bucket
- Delete Bucket Ownership Controls
Remove the object ownership controls from an S3 bucket
Public Access Blocks
- Get Public Access Block
Retrieve the Public Access Block settings for an S3 bucket
- Delete Public Access Block
Remove the Public Access Block settings from an S3 bucket
Buckets
- Create Bucket
Create a new S3 bucket in the specified AWS region
- List Buckets
List all S3 buckets owned by the authenticated AWS account
- Delete Bucket
Permanently delete an empty S3 bucket
Bucket Taggings
- Get Bucket Tagging
Retrieve the tag set associated with an S3 bucket
- Delete Bucket Tagging
Remove all tags from an S3 bucket
Bucket Policys
- Get Bucket Policy
Retrieve the resource-based policy attached to an S3 bucket
- Delete Bucket Policy
Remove the resource-based policy from an S3 bucket
Multipart Uploads
- Create Multipart Upload
Initiate a multipart upload and obtain an upload ID for subsequent part uploads
- List Multipart Uploads
List all in-progress multipart uploads in an S3 bucket
Parts
- Upload Part
Upload a single part of an in-progress multipart upload
- List Parts
List the parts already uploaded for a specific multipart upload
Objects
- Copy Object
Copy an S3 object to a new destination within the same or a different bucket
- List Objects
List objects in an S3 bucket with optional prefix filtering and continuation-based pagination
- Get Object
Download the content and metadata of an S3 object
- Delete Object
Delete a single object from an S3 bucket
Object Taggings
- Get Object Tagging
Retrieve the tag set associated with an S3 object
- Delete Object Tagging
Remove all tags from an S3 object
Other (48)
- Upload Part Copy
Upload a part by copying a byte range from an existing object
- Get Bucket Lifecycle Configuration
Retrieve the lifecycle configuration rules for an S3 bucket
- Get Bucket Logging
Retrieve the server access logging configuration for an S3 bucket
- Get Bucket Notification Configuration
Retrieve the event notification configuration for an S3 bucket
- Get Bucket Accelerate Configuration
Retrieve the Transfer Acceleration configuration for an S3 bucket
- Get Bucket Request Payment
Retrieve the request payment configuration for an S3 bucket
- Get Object Lock Configuration
Retrieve the bucket-level Object Lock configuration
- Get Bucket Policy Status
Determine whether an S3 bucket's policy makes the bucket public
- Get Bucket Location
Retrieve the AWS region where an S3 bucket is located
- Get Bucket Versioning
Retrieve the versioning state of an S3 bucket
- Get Bucket ACL
Retrieve the access control list (ACL) for an S3 bucket
- List Object Versions
List all versions and delete markers for objects in an S3 bucket
- Get Object ACL
Retrieve the access control list (ACL) for an S3 object
- Get Object Attributes
Retrieve specific attributes of an S3 object without downloading its content
- Get Object Retention
Retrieve the Object Lock retention configuration for an S3 object
- Get Object Legal Hold
Retrieve the legal hold status of an S3 object
- Delete Bucket Lifecycle
Remove all lifecycle configuration rules from an S3 bucket
- Delete Objects (Bulk)
Delete multiple objects from a bucket in a single request (up to 1000 objects)
- Put Bucket Intelligent-Tiering Configuration
Create or update an S3 Intelligent-Tiering configuration on a bucket
- Put Bucket Inventory Configuration
Create or update an S3 Inventory configuration on a bucket
- Put Bucket Analytics Configuration
Create or update an S3 Analytics Storage Class Analysis configuration
- Put Bucket Metrics Configuration
Create or update a CloudWatch request metrics configuration on a bucket
- Put Bucket CORS
Set or replace the cross-origin resource sharing (CORS) configuration for an S3 bucket
- Put Bucket Encryption
Set or update the default server-side encryption configuration for an S3 bucket
- Put Bucket Lifecycle Configuration
Set or replace the lifecycle configuration rules on an S3 bucket
- Put Bucket Website
Configure static website hosting on an S3 bucket
- Put Bucket Logging
Enable, disable, or update the server access logging configuration on an S3 bucket
- Put Bucket Notification Configuration
Set or replace the event notification configuration on an S3 bucket
- Put Bucket Replication
Set or replace the replication configuration for an S3 bucket
- Put Bucket Accelerate Configuration
Enable or suspend Transfer Acceleration on an S3 bucket
- Put Bucket Request Payment
Set the request payment configuration on an S3 bucket
- Put Bucket Ownership Controls
Set or update the object ownership controls on an S3 bucket
- Put Public Access Block
Set or update the Public Access Block settings for an S3 bucket
- Put Object Lock Configuration
Set or update the bucket-level Object Lock configuration
- Head Bucket
Check whether an S3 bucket exists and verify access permissions
- Put Bucket Versioning
Enable or suspend versioning on an S3 bucket
- Put Bucket ACL
Set the access control list (ACL) for an S3 bucket
- Put Bucket Tagging
Replace the entire tag set on an S3 bucket
- Put Bucket Policy
Attach or replace the resource-based policy on an S3 bucket
- Complete Multipart Upload
Finalize a multipart upload by assembling all uploaded parts into a single object
- Abort Multipart Upload
Cancel an in-progress multipart upload and discard any uploaded parts
- Head Object
Retrieve metadata for an object without downloading its content
- Put Object
Upload an object to a specified S3 bucket and key
- Put Object ACL
Set the access control list (ACL) for an S3 object
- Put Object Tagging
Replace the entire tag set on an S3 object
- Restore Object
Initiate a restore request for an archived S3 object (GLACIER or DEEP_ARCHIVE)
- Put Object Retention
Set or update the Object Lock retention configuration for an S3 object
- Put Object Legal Hold
Set or remove a legal hold on an S3 object
Set Up Your Amazon S3 MCP Server in Minutes
One endpoint. Any framework. Your agent is talking to Amazon S3 in under 10 lines of code.
MCP Clients
Agent Frameworks
JSON{
"mcpServers": {
"stackone": {
"command": "npx",
"args": [
"-y",
"mcp-remote@latest",
"https://api.stackone.com/mcp?x-account-id=<account_id>",
"--header",
"Authorization: Basic <YOUR_BASE64_TOKEN>"
]
}
}
}More Cloud Storage MCP Servers
Box
92+ actions
Dropbox
90+ actions
Google Drive
53+ actions
Microsoft OneDrive
46+ actions
Google Cloud Storage
30+ actions
Azure Blob Storage
26+ actions
SharePoint
19+ actions
Amazon S3 MCP Server Resources
MCP Code Mode: Keeping Tool Responses Out of Agent Context
Anthropic's code_execution processes data already in context. Custom MCP code mode keeps raw tool responses in a sandbox. 14K tokens vs 500.
11 min
Comparing BM25, TF-IDF, and Hybrid Search for MCP Tool Discovery
Benchmarking BM25, TF-IDF, and hybrid search for MCP tool discovery across 916 tools. The 80/20 TF-IDF/BM25 hybrid hits 21% Top-1 accuracy in under 1ms.
10 min
Indirect Prompt Injection Defense for MCP Tools: A Technical Guide
MCP tools that read emails, CRM records, and tickets are indirect prompt injection vectors. Here's how we built a two-tier defense that scans tool results in ~11ms.
12 min
Amazon S3 MCP Server FAQ
Amazon S3 MCP server vs direct API integration — what's the difference?
A Amazon S3 MCP server and direct API integration serve different use cases. Direct API integration is for software-to-software — backend code calling Amazon S3. A Amazon S3 MCP server is for AI agents — MCP clients like Claude and Cursor, plus framework agents built with OpenAI, LangChain, or Vercel AI — discovering and calling Amazon S3 at runtime. StackOne provides both.
How does Amazon S3 authentication work for AI agents?
Amazon S3 authentication for AI agents works through a StackOne Connect Session. Create one via the dashboard or the SDK — you get an auth link and ready-to-paste config for Claude Desktop, Cursor, and other MCP clients. Your user authenticates their own Amazon S3 account; StackOne handles token exchange, storage, and refresh. Credentials never reach the LLM, and each user is isolated via
origin_owner_id.Are Amazon S3 MCP tools vulnerable to prompt injection?
Yes — Amazon S3 MCP tools can be vulnerable to indirect prompt injection. Any tool that reads user-written content — documents, messages, tickets, records, or free-text fields — is a potential vector. StackOne Defender scans every tool response before it enters the agent's context — regex patterns in ~1ms, then a MiniLM classifier in ~4ms. 88.7% accuracy, CPU-only.
What is the context bloat of a Amazon S3 agent and how do I avoid it?
Context bloat happens when Amazon S3 tool schemas and API responses eat your Amazon S3 agent's memory, preventing it from reasoning effectively. A single Amazon S3 query can return a massive JSON response, and connecting multiple tools compounds the problem. Tools Discovery and Code Mode reduce context bloat — loading only relevant tools per query and keeping raw responses out of the agent's context.
Can I limit which actions my Amazon S3 agent can access?
Yes — you can limit which actions your Amazon S3 agent can access directly from the StackOne dashboard. Toggle actions on or off, or restrict them to specific accounts, with no code changes to your agent. Session tokens can be scoped to exact actions so if one leaks, exposure stays contained.
Can I create custom agent actions for my Amazon S3 MCP server?
Yes — you can create custom agent actions for your Amazon S3 MCP server using Connector Builder. It's an integration agent your coding assistant (Claude Code, Cursor, or Copilot) can invoke to research Amazon S3's API, generate production-ready connector YAML, test against the live API, and validate before you ship.
When should I NOT use a Amazon S3 MCP server?
Skip a Amazon S3 MCP server if your integration is purely software-to-software — direct Amazon S3 API integration is simpler when no AI agent is involved. For deterministic, compliance-critical operations (financial transactions, regulatory reporting), direct API gives you predictable behavior without agent-driven decision-making. MCP shines when AI agents need to dynamically discover and call Amazon S3 actions at runtime.
What AI frameworks and AI clients does the StackOne Amazon S3 MCP server support?
The StackOne Amazon S3 MCP server supports both. MCP clients (paste-and-go apps): Claude Desktop, Claude Code, Cursor, VS Code, Goose. Agent frameworks (code SDKs you build with): OpenAI Agents SDK, Anthropic, Vercel AI, Google ADK, CrewAI, Pydantic AI, LangChain, LangGraph, Azure AI Foundry.
Put your AI agents to work
All the tools you need to build and scale AI agent integrations, with best-in-class connectivity, execution, and security.