timeweb-s3
Server Configuration
Describes the environment variables required to run the server.
| Name | Required | Description | Default |
|---|---|---|---|
| TIMEWEB_S3_POOL | No | S3 pool/region. The default pool is ru-1; the SigV4 region equals the selected pool. | ru-1 |
| TIMEWEB_S3_ALLOW | No | Comma-separated list of enabled permission levels, e.g. 'write,delete,admin'. By default only read is registered. Can also be enabled via flags --allow-write --allow-delete --allow-admin. | |
| TIMEWEB_S3_ENDPOINT | No | Custom S3 endpoint URL. | |
| TIMEWEB_S3_FILE_ROOT | No | Enables file-based MCP tools (s3_download_file, s3_upload_file). Only relative paths inside this root are allowed; '..', absolute paths, and symlinks pointing outside are rejected. | |
| TIMEWEB_S3_AUDIT_FILE | No | Path to an audit file where each call is additionally logged (written with 0600 permissions). | |
| TIMEWEB_S3_ACCESS_KEY_ID | Yes | Timeweb Cloud S3 access key ID. Can also be provided via flags or the credentials file (~/.config/timeweb-s3/credentials). Priority: flags > env > file. | |
| TIMEWEB_S3_ALLOW_INSECURE | No | Set to 1 to allow HTTP (non-TLS) connections. | |
| TIMEWEB_S3_ALLOWED_BUCKETS | No | Comma-separated list of allowed buckets, e.g. 'backups'. Partial scope forbids whole-bucket and wide list operations even if the bucket is listed. | |
| TIMEWEB_S3_ALLOWED_PREFIXES | No | Comma-separated list of allowed prefixes with segment boundary awareness, e.g. 'backups/daily/'. '..' segments are rejected. | |
| TIMEWEB_S3_SECRET_ACCESS_KEY | Yes | Timeweb Cloud S3 secret access key. Can also be provided via flags or the credentials file (~/.config/timeweb-s3/credentials). Priority: flags > env > file. | |
| TIMEWEB_S3_DESTRUCTIVE_POLICY | No | Policy for destructive operations: 'confirm' uses elicitation when supported, otherwise requires confirm:true after human consent; 'block' always forbids; 'allow' executes without a gate. |
Instructions
Guidance the server publishes about itself, which clients place ahead of the tool catalog so the model reads it before choosing anything.
This server publishes no instructions, or was last inspected before Glama recorded them.
Capabilities
Features and capabilities supported by this server
Protocol revision2025-11-25
| Capability | Details |
|---|---|
| tools | {
"listChanged": true
} |
| logging | {} |
| resources | {
"listChanged": true
} |
Tools
Functions exposed to the LLM to take actions
| Name | Description |
|---|---|
| s3_get_bucket_configB | Read location, versioning, CORS, policy and Object Lock; report absent/unsupported configuration. |
| s3_get_objectA | Read at most 262144 bytes inline as text/base64; use presign for larger objects. |
| s3_get_object_taggingC | Get object tags. |
| s3_head_objectC | Read object metadata. |
| s3_largest_objectsC | Bounded largest objects scan, default max_scan 10000; partial results carry continuation token. |
| s3_list_bucketsB | List visible buckets with pagination. |
| s3_list_multipart_uploadsC | List unfinished uploads; pass both returned markers. |
| s3_list_object_versionsC | List versions and delete markers with both pagination markers. |
| s3_list_objectsC | List a scoped prefix, at most 1000 objects per page. |
| s3_list_partsD | List multipart parts. |
| s3_prefix_usageC | Bounded usage by first-level prefixes; paginate aggregate rows with next_result_offset. |
| s3_presign_getC | Create signed GET URL; default 3600 seconds, provider maximum is unverified. |
| s3_preview_objectC | Preview first at most 65536 bytes, detected type and CSV header. |
| s3_unfinished_uploadsC | Find uploads older than N hours (default 24), bounded by max_scan. |
Prompts
Interactive templates invoked by user choice
| Name | Description |
|---|---|
No prompts | |
Resources
Contextual data attached and managed by the client
| Name | Description |
|---|---|
| capabilities | |
| config | |
| pools |
TDQS
Scored across 14 tools
Tools mostly target distinct S3 read operations, but two pairs overlap: s3_get_object vs s3_preview_object (both read object content) and s3_list_multipart_uploads vs s3_unfinished_uploads (both list unfinished uploads). The descriptions differentiate them clearly, so an agent can usually choose correctly despite the overlap.
All tools share a consistent s3_ snake_case prefix, but several names are noun/adjective phrases (s3_largest_objects, s3_prefix_usage, s3_unfinished_uploads) rather than the dominant verb_noun pattern (s3_get_object, s3_list_buckets). This is a minor deviation from an otherwise predictable convention.
14 tools is well-scoped for an S3 read/analysis server: buckets, objects, metadata, tags, versions, multipart uploads, presigning, and analytics each have dedicated tools. No tool feels redundant enough to remove.
The surface covers reading and analyzing S3 data thoroughly, but lacks any write/mutation operations (put, delete, copy, create bucket) and multipart abort/complete, creating dead ends after listing unfinished uploads or parts. For a general S3 server this is a notable gap, though it may be intentional if the server is read-only by design.