Skip to main content
Glama
backblaze-labs

Backblaze B2 MCP Server

Official

s3_get_presigned_url

DestructiveIdempotent

Generate a short-lived presigned URL to download or upload a single B2 object, with expiry control, so data flows directly between the client and B2 rather than through the MCP server.

Instructions

Generate a short-lived presigned URL bearer capability for one B2 object — GetObject (download) or PutObject (upload). Prefer this for single-object transfers; use s3_create_multipart_upload and s3_get_presigned_upload_part_url for multipart uploads. The response includes the URL, operation, expiresIn, and expiresAt; treat the URL as sensitive until it expires. This is the preferred path for moving real object data: bytes flow directly between the client/worker and B2 and never pass through the MCP server. Note: presigned POST (browser form uploads) is NOT supported by B2; use a PutObject URL instead.

Input Schema

TableJSON Schema
NameRequiredDescriptionDefault
keyYesThe object key.
bucketYesThe bucket name.
confirmNoFallback confirmation for minting a PutObject presigned URL bearer capability when the effective server destructive policy is 'confirm' and MCP elicitation cannot run.
expiresInNoURL expiry in seconds (default: 3600 = 1 hour, max: 604800 = 7 days).
operationYesThe operation the URL allows: GetObject to download or PutObject to upload.
versionIdNoFor GetObject: the specific version ID to target.
contentTypeNoFor PutObject: restrict the upload to this content type.

Schema Changelog

Changes observed during successful MCP inspections.

  1. Changed1 schema field changed
    • changedInput schema / properties / confirm / description
      Previous value: -"Confirm minting a PutObject presigned URL bearer capability that can create or overwrite object data. Required when operation is PutObject and the server destructive policy is 'confirm' (the default)."New value: +"Fallback confirmation for minting a PutObject presigned URL bearer capability when the effective server destructive policy is 'confirm' and MCP elicitation cannot run."
  2. First observedv0.2.0

TDQS

A4.6/5.0
Behavior5/5

Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?

Even though annotations already mark destructiveHint=true and readOnlyHint=false, the description adds substantial behavioral context: the URL is a sensitive 'bearer capability' to treat as secret until expiry, the response shape (URL, operation, expiresIn, expiresAt), and the crucial data-flow fact that bytes bypass the MCP server entirely. It also discloses the B2 platform limitation on presigned POST, which an agent could not infer from the schema or annotations.

Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.

Conciseness4/5

Is the description appropriately sized, front-loaded, and free of redundancy?

Five sentences with no filler; the core purpose is front-loaded in the first phrase, followed by usage routing, response/security details, and a constraint note. It is denser than the minimal two-sentence ideal, but each sentence earns its place given the security implications and missing output schema.

Shorter descriptions cost fewer tokens and are easier for agents to parse. Every sentence should earn its place.

Completeness5/5

Given the tool's complexity, does the description cover enough for an agent to succeed on first attempt?

Given no output schema, the description compensates by enumerating the response fields. With 7 parameters, the 100% schema coverage handles parameter semantics while the description addresses what an agent cannot infer elsewhere: security handling, expiry behavior, data-path architecture, multipart alternative routing, and a platform-specific limitation. Nothing critical is missing.

Complex tools with many parameters or behaviors need more documentation. Simple tools need less. This dimension scales expectations accordingly.

Parameters3/5

Does the description clarify parameter syntax, constraints, interactions, or defaults beyond what the schema provides?

Schema description coverage is 100%, so the baseline of 3 applies — every parameter already carries its own description. The tool description adds modest framing value by tying expiresIn to the 'short-lived' concept and clarifying that operation selects download vs upload capability, but it does not meaningfully elaborate on versionId, contentType, or confirm beyond the schema.

Input schemas describe structure but not intent. Descriptions should explain non-obvious parameter relationships and valid value ranges.

Purpose5/5

Does the description clearly state what the tool does and how it differs from similar tools?

The description opens with a specific verb and resource: 'Generate a short-lived presigned URL bearer capability for one B2 object', and immediately disambiguates the two modes (GetObject download vs PutObject upload). It differentiates from sibling tools by framing this as URL-based transfer rather than server-mediated access, which separates it from s3_get_object, s3_put_object, and the multipart family.

Agents choose between tools based on descriptions. A clear purpose with a specific verb and resource helps agents select the right tool.

Usage Guidelines5/5

Does the description explain when to use this tool, when not to, or what alternatives exist?

Explicit routing is provided: 'Prefer this for single-object transfers; use s3_create_multipart_upload and s3_get_presigned_upload_part_url for multipart uploads.' It also states this is 'the preferred path for moving real object data' and gives a hard exclusion (presigned POST unsupported by B2, use PutObject URL instead). An agent receives clear when-to-use and when-not-to-use guidance with named alternatives.

Agents often have multiple tools that could apply. Explicit usage guidance like "use X instead of Y when Z" prevents misuse.