Skip to main content
Glama
backblaze-labs

b2-mcp

Official
by backblaze-labs
OverviewSchemaRelated ServersScoreDiscussions
Hybrid

Server Configuration

Describes the environment variables required to run the server.

NameRequiredDescriptionDefault
PORTNoHTTP listen port (default: PORT or 3000) used when no --port argument is provided3000
B2_REGIONNoFallback/default S3-compatible endpoint region; authorized B2 responses override this for S3/report toolsus-west-004
B2_APP_KEYNoLegacy alias for B2_APPLICATION_KEY retained for compatibility
B2_LOG_FILENoOptional path for redacted structured JSON logs. When set, the file replaces stderr; stdout is never used for logsstderr
B2_HTTP_HOSTNoStandalone Node HTTP listen host; set to 127.0.0.1 when binding behind a same-host reverse proxy
B2_APP_KEY_IDNoLegacy alias for B2_APPLICATION_KEY_ID retained for compatibility
B2_MASTER_KEYNoMaster credential secret for SDK-backed Partner/Groups tools; required with Partner API entitlement for those operations
B2_SECRET_SINKNoDurable-secret output mode: file, inline, or off. File mode supports b2_create_key and b2_create_group_member; b2_reserve_trial_create_account requires explicit inline modefile
B2_MAX_SESSIONSNoHTTP transport: global concurrent in-flight request cap1000
B2_ALLOWED_HOSTSNoHTTP transport Host allowlist (DNS-rebinding protection) — set for any internet-facing HTTP deployment
B2_MASTER_KEY_IDNoMaster credential ID for SDK-backed Partner/Groups tools; required with Partner API entitlement for those operations
B2_MCP_TRANSPORTNoCLI default transport when no stdio/http argument or --transport flag is passed; Docker images set this to httpstdio
B2_MCP_UA_SUFFIXNoOptional operator token appended after the built-in b2-mcp/<version> product token on the outbound User-Agent
B2_ALLOWED_ORIGINSNoHTTP transport Origin allowlist (DNS-rebinding protection) — set for any internet-facing HTTP deployment
B2_APPLICATION_KEYYesApplication key secret
B2_SECRET_SINK_FILENoAppend-only plaintext JSONL credential ledger for file sink mode~/.b2-mcp/secrets.jsonl
B2_MCP_OUTPUT_FORMATNoLLM-facing TextContent.text format for structured successes: compact json or opt-in toonjson
B2_APPLICATION_KEY_IDYesApplication key ID (non-master) — the workhorse for native B2 and S3-compatible tools
B2_DESTRUCTIVE_POLICYNoGate on destructive tools: confirm, elicit, block, or allowconfirm
B2_MCP_RATE_LIMIT_RPSNoHTTP transport: per-credential request throttling (requests per second)60
B2_ALLOW_UNSCOPED_KEYSNoExplicitly allow b2_create_key to mint unscoped keys with write/delete capabilitiesfalse
B2_TRUST_PROXY_HEADERSNoHTTP transport: trust X-Forwarded-For / X-Real-IP for unauthenticated admission keys only behind a trusted proxyfalse
B2_ALLOW_INLINE_SECRETSNoDedicated HTTP/serverless opt-in required before B2_SECRET_SINK=inline can return durable secrets in MCP responsesfalse
B2_HTTP_CREDENTIAL_MODENoheaders, server, or principal; unset preserves existing header-based clientsheaders
B2_MAX_SESSIONS_PER_KEYNoHTTP transport: per-credential concurrent in-flight request cap20
B2_MCP_RATE_LIMIT_BURSTNoHTTP transport: per-credential request throttling burst size120
B2_ALLOW_KEY_MGMT_GRANTSNoExplicitly allow b2_create_key to mint keys with listKeys, writeKeys, or deleteKeysfalse
B2_CAPABILITY_CACHE_TTL_MSNoBounded capability-discovery cache TTL300000
B2_DESTRUCTIVE_ELICITATIONNoSet to off, false, or 0 to disable MCP form elicitationon
B2_HTTP_HEADERS_TIMEOUT_MSNoStandalone Node HTTP transport headers timeout10000
B2_HTTP_REQUEST_TIMEOUT_MSNoStandalone Node HTTP transport request timeout30000
B2_MAX_KEY_DURATION_SECONDSNoOptional maximum for b2_create_key; when set, non-expiring keys and longer durations are refused before any B2 create call
B2_PRINCIPAL_CREDENTIAL_MAPNoJSON map from verified MCP principal to a customer-managed credential reference
B2_STDIO_CAPABILITY_TIMEOUT_MSNoStdio bootstrap capability-discovery deadline; local expiry starts with a fail-closed tool surface10000
B2_CAPABILITY_CACHE_MAX_ENTRIESNoBounded capability-discovery cache maximum entries10000
B2_S3_SAVE_TO_PATH_IDLE_TIMEOUT_MSNoIdle timeout while streaming s3_get_object results to saveToPath60000

Instructions

Guidance the server publishes about itself, which clients place ahead of the tool catalog so the model reads it before choosing anything.

This server publishes no instructions, or was last inspected before Glama recorded them.

Capabilities

Server capabilities have not been inspected yet.

Tools

Functions exposed to the LLM to take actions

NameDescription

No tools

Prompts

Interactive templates invoked by user choice

NameDescription

No prompts

Resources

Contextual data attached and managed by the client

NameDescription

No resources

Latest Blog Posts

MCP directory API

We provide all the information about MCP servers via our MCP API.

curl -X GET 'https://glama.ai/api/mcp/v1/servers/backblaze-labs/b2-mcp'

If you have feedback or need assistance with the MCP directory API, please join our Discord server