Selectel S3 MCP server and AI CLI with scoped access and human approval for destructive actions.
Connect Runs on your machine
claude mcp add selectel-s3-mcp-ai-cli -e SELECTEL_S3_ACCESS_KEY_ID=<SELECTEL_S3_ACCESS_KEY_ID> -e SELECTEL_S3_SECRET_ACCESS_KEY=<SELECTEL_S3_SECRET_ACCESS_KEY> -e SELECTEL_S3_POOL=<SELECTEL_S3_POOL> -e SELECTEL_S3_ENDPOINT=<SELECTEL_S3_ENDPOINT> -e SELECTEL_S3_ALLOW_INSECURE=<SELECTEL_S3_ALLOW_INSECURE> -e SELECTEL_S3_ALLOW=<SELECTEL_S3_ALLOW> -e SELECTEL_S3_DESTRUCTIVE_POLICY=<SELECTEL_S3_DESTRUCTIVE_POLICY> -e SELECTEL_S3_ALLOWED_BUCKETS=<SELECTEL_S3_ALLOWED_BUCKETS> -e SELECTEL_S3_ALLOWED_PREFIXES=<SELECTEL_S3_ALLOWED_PREFIXES> -e SELECTEL_S3_FILE_ROOT=<SELECTEL_S3_FILE_ROOT> -e SELECTEL_S3_AUDIT_FILE=<SELECTEL_S3_AUDIT_FILE> -- docker run -i --rm ghcr.io/stufently/selectel-s3-mcp-ai-cli:0.1.1
{
"mcpServers": {
"selectel-s3-mcp-ai-cli": {
"command": "docker",
"args": [
"run",
"-i",
"--rm",
"ghcr.io/stufently/selectel-s3-mcp-ai-cli:0.1.1"
],
"env": {
"SELECTEL_S3_ACCESS_KEY_ID": "<SELECTEL_S3_ACCESS_KEY_ID>",
"SELECTEL_S3_SECRET_ACCESS_KEY": "<SELECTEL_S3_SECRET_ACCESS_KEY>",
"SELECTEL_S3_POOL": "<SELECTEL_S3_POOL>",
"SELECTEL_S3_ENDPOINT": "<SELECTEL_S3_ENDPOINT>",
"SELECTEL_S3_ALLOW_INSECURE": "<SELECTEL_S3_ALLOW_INSECURE>",
"SELECTEL_S3_ALLOW": "<SELECTEL_S3_ALLOW>",
"SELECTEL_S3_DESTRUCTIVE_POLICY": "<SELECTEL_S3_DESTRUCTIVE_POLICY>",
"SELECTEL_S3_ALLOWED_BUCKETS": "<SELECTEL_S3_ALLOWED_BUCKETS>",
"SELECTEL_S3_ALLOWED_PREFIXES": "<SELECTEL_S3_ALLOWED_PREFIXES>",
"SELECTEL_S3_FILE_ROOT": "<SELECTEL_S3_FILE_ROOT>",
"SELECTEL_S3_AUDIT_FILE": "<SELECTEL_S3_AUDIT_FILE>"
}
}
}
}
{
"mcpServers": {
"selectel-s3-mcp-ai-cli": {
"command": "docker",
"args": [
"run",
"-i",
"--rm",
"ghcr.io/stufently/selectel-s3-mcp-ai-cli:0.1.1"
],
"env": {
"SELECTEL_S3_ACCESS_KEY_ID": "<SELECTEL_S3_ACCESS_KEY_ID>",
"SELECTEL_S3_SECRET_ACCESS_KEY": "<SELECTEL_S3_SECRET_ACCESS_KEY>",
"SELECTEL_S3_POOL": "<SELECTEL_S3_POOL>",
"SELECTEL_S3_ENDPOINT": "<SELECTEL_S3_ENDPOINT>",
"SELECTEL_S3_ALLOW_INSECURE": "<SELECTEL_S3_ALLOW_INSECURE>",
"SELECTEL_S3_ALLOW": "<SELECTEL_S3_ALLOW>",
"SELECTEL_S3_DESTRUCTIVE_POLICY": "<SELECTEL_S3_DESTRUCTIVE_POLICY>",
"SELECTEL_S3_ALLOWED_BUCKETS": "<SELECTEL_S3_ALLOWED_BUCKETS>",
"SELECTEL_S3_ALLOWED_PREFIXES": "<SELECTEL_S3_ALLOWED_PREFIXES>",
"SELECTEL_S3_FILE_ROOT": "<SELECTEL_S3_FILE_ROOT>",
"SELECTEL_S3_AUDIT_FILE": "<SELECTEL_S3_AUDIT_FILE>"
}
}
}
}
{
"servers": {
"selectel-s3-mcp-ai-cli": {
"type": "stdio",
"command": "docker",
"args": [
"run",
"-i",
"--rm",
"ghcr.io/stufently/selectel-s3-mcp-ai-cli:0.1.1"
],
"env": {
"SELECTEL_S3_ACCESS_KEY_ID": "<SELECTEL_S3_ACCESS_KEY_ID>",
"SELECTEL_S3_SECRET_ACCESS_KEY": "<SELECTEL_S3_SECRET_ACCESS_KEY>",
"SELECTEL_S3_POOL": "<SELECTEL_S3_POOL>",
"SELECTEL_S3_ENDPOINT": "<SELECTEL_S3_ENDPOINT>",
"SELECTEL_S3_ALLOW_INSECURE": "<SELECTEL_S3_ALLOW_INSECURE>",
"SELECTEL_S3_ALLOW": "<SELECTEL_S3_ALLOW>",
"SELECTEL_S3_DESTRUCTIVE_POLICY": "<SELECTEL_S3_DESTRUCTIVE_POLICY>",
"SELECTEL_S3_ALLOWED_BUCKETS": "<SELECTEL_S3_ALLOWED_BUCKETS>",
"SELECTEL_S3_ALLOWED_PREFIXES": "<SELECTEL_S3_ALLOWED_PREFIXES>",
"SELECTEL_S3_FILE_ROOT": "<SELECTEL_S3_FILE_ROOT>",
"SELECTEL_S3_AUDIT_FILE": "<SELECTEL_S3_AUDIT_FILE>"
}
}
}
}
Replace the values in angle brackets with your own. Keys stay on your machine; we never see them.
Tools
This server runs locally, so its tools are listed by your MCP client once it starts.
Environment variables
| Name | Description |
|---|---|
SELECTEL_S3_ACCESS_KEY_IDOptional, secret | S3 access key ID |
SELECTEL_S3_SECRET_ACCESS_KEYOptional, secret | S3 secret access key |
SELECTEL_S3_POOLOptional | Signing pool |
SELECTEL_S3_ENDPOINTOptional | Optional endpoint override |
SELECTEL_S3_ALLOW_INSECUREOptional | Set 1 only for explicit HTTP test endpoints |
SELECTEL_S3_ALLOWOptional | Independent write,delete,admin levels; read only by default |
SELECTEL_S3_DESTRUCTIVE_POLICYOptional | |
SELECTEL_S3_ALLOWED_BUCKETSOptional | Comma-separated bucket scope |
SELECTEL_S3_ALLOWED_PREFIXESOptional | Comma-separated bucket/prefix/ scope |
SELECTEL_S3_FILE_ROOTOptional | Optional confined local file root |
SELECTEL_S3_AUDIT_FILEOptional | Optional private append-only audit output |
Details
| Package | ghcr.io/stufently/selectel-s3-mcp-ai-cli:0.1.1 (OCI, stdio) |
| First published | 10 Nov 2026 |
| Last updated | 10 Nov 2026 |
| Registry name | io.github.stufently/selectel-s3-mcp-ai-cli |
More files and documents servers See all
Listing data from the official MCP registry. Status and tools from NestDaddy's daily check. Browse all MCP servers.
