{"ts":"2026-05-12T12:00:00Z","sessionId":"019...","tool":"read_file","user":"alice@example.com","latencyMs":42,"status":200} ``` Enable with `--request-logging`. ### DNS Rebinding Protection Automatically applied when binding to localhost addresses. Validates the `Host` header against allowed hostnames to prevent DNS rebinding attacks. ### Security Headers Opt-in HTTP response hardening via [nosecone](https://github.com/arcjet/arcjet-js/tree/main/nosecone) — a framework-agnostic security headers library. Works with both Bun-native and Node/Express transports. When enabled, every HTTP response includes standard security headers: - `Content-Security-Policy` - `Strict-Transport-Security` - `X-Content-Type-Options: nosniff` - `X-Frame-Options` - `Cross-Origin-Opener-Policy` - `Cross-Origin-Resource-Policy` - `Referrer-Policy` - And more (see [nosecone defaults](https://docs.arcjet.com/nosecone/quick-start)) ```bash # Enable with defaults cloud-fs-mcp s3 s3://my-bucket --transport http --security-headers # Custom configuration via inline JSON cloud-fs-mcp s3 s3://my-bucket --transport http \ --security-headers-config '{"contentSecurityPolicy":false}' # Custom configuration via file cloud-fs-mcp s3 s3://my-bucket --transport http \ --security-headers-config-file ./nosecone.json ``` > **Note:** Requires the `nosecone` peer dependency: `npm install nosecone` --- ## CLI Reference ``` cloud-fs-mcp

[root-uri...] [options] ``` ### Providers | Provider | URI format | Description | |---|---|---| | `s3` | `s3://bucket[/prefix]` | AWS S3, and any S3-compatible endpoint (MinIO, RustFS, Cloudflare R2, Backblaze B2, Wasabi, LocalStack, …) | | `azure` | `az://container[/prefix]` | Azure Blob Storage | | `gcs` | `gs://bucket[/prefix]` | Google Cloud Storage | | `memory` | `mem://name` | In-memory (ephemeral, for demos) | | `sqlite` | `sqlite://name` | SQLite (persistent local) | ### Options #### Transport & Network | Flag | Default | Description | |---|---|---| | `--transport ` | `stdio` | Transport protocol | | `--port ` | `3000` | Listen port (http/ws only) | | `--host

` | `127.0.0.1` | Bind address (http/ws only) | #### Authentication | Flag | Default | Description | |---|---|---| | `--auth ` | `none` | Auth mode (http/ws only) | | `--auth-issuer ` | — | OAuth issuer URL (builtin mode) | | `--auth-jwks-uri ` | — | JWKS URI (external mode) | | `--auth-audience ` | — | Expected token audience (external mode) | | `--auth-client-credentials` | `false` | Enable Client Credentials ext-auth flow | | `--auth-enterprise-idp ` | — | Enable Enterprise-Managed Authorization | #### Production | Flag | Default | Description | |---|---|---| | `--cors-origin ` | — | Allowed CORS origin (repeatable) | | `--rate-limit ` | `0` (off) | Rate limit per client | | `--rate-limit-burst ` | `10` | Burst allowance | | `--request-logging` | `false` | Enable structured JSON request logging | | `--audit-log` | `false` | Enable tool invocation audit logging to stderr | | `--audit-log-file ` | — | Write audit log to file (implies `--audit-log`) | | `--security-headers` | `false` | Enable security headers via nosecone | | `--security-headers-config ` | — | Inline JSON config for nosecone | | `--security-headers-config-file ` | — | Load nosecone config from a JSON file | #### Storage & Cache | Flag | Default | Description | |---|---|---| | `--region ` | — | Cloud region (S3, GCS) | | `--endpoint ` | — | Custom endpoint for S3-compatible backends | | `--cache-store ` | `memory` | Cache backend | | `--cache-ttl ` | `60` | Cache TTL in seconds | | `--sync-debounce ` | `2000` | Write flush delay in ms | | `--cache-dir ` | — | Directory for fs cache store | | `--no-cache` | — | Bypass cache entirely (pass-through mode) | | `--gcs-endpoint ` | — | Custom endpoint for GCS | | `--sqlite-db ` | — | SQLite database file path | | `--ca-file ` | — | PEM CA bundle for TLS (S3-compatible + Redis) | #### Tools | Flag | Default | Description | |---|---|---| | `--enable-delete` | `false` | Enable the `delete_file` tool | | `--enable-shell` | `false` | Enable the `shell` tool | | `--enable-dlp` | `false` | Enable DLP content sanitization (redacts PII/secrets from responses) | | `--grep-max-objects ` | `1000` | Max objects `grep_files` scans per call | | `--seed-demo` | `false` | Seed VFS with sample files for demo | Credentials are always sourced from SDK credential chains — never CLI flags. --- ## Provider Setup ### AWS S3 Credentials are read from the standard AWS credential chain: `AWS_ACCESS_KEY_ID` / `AWS_SECRET_ACCESS_KEY` env vars, `~/.aws/credentials`, EC2 instance profiles, and so on. ```bash cloud-fs-mcp s3 s3://my-bucket --region us-east-1 ``` ### S3-compatible storage Any S3-compatible backend works via `--endpoint`. All use the standard AWS credential chain (`AWS_ACCESS_KEY_ID` / `AWS_SECRET_ACCESS_KEY`). | Provider | `--endpoint` value | Notes | |---|---|---| | **MinIO** | `http://minio:9000` | Self-hosted; use `--ca-file` for TLS with a private CA | | **RustFS** | `http://rustfs:9000` | Rust-native S3-compatible store | | **LocalStack** | `http://localhost:4566` | Full AWS emulator for local dev and CI | | **Cloudflare R2** | `https://.r2.cloudflarestorage.com` | No egress fees; use an R2 API token as the secret key | | **Backblaze B2** | `https://s3..backblazeb2.com` | Use B2 application key ID / key | | **Wasabi** | `https://s3..wasabisys.com` | Compatible, no egress fees | | **DigitalOcean Spaces** | `https://.digitaloceanspaces.com` | Use a Spaces access key | | **Scaleway** | `https://s3..scw.cloud` | Use a Scaleway access key | | **Ceph RGW** | `http://:` | Enterprise self-hosted; supports all S3 APIs | | **SeaweedFS** | `http://:8333` | High-throughput distributed FS with S3 API | | **Garage** | `http://:3900` | Lightweight distributed S3 for homelabs | ```bash # MinIO export AWS_ACCESS_KEY_ID=minioadmin export AWS_SECRET_ACCESS_KEY=minioadmin cloud-fs-mcp s3 s3://my-bucket --endpoint http://minio:9000 # Cloudflare R2 export AWS_ACCESS_KEY_ID= export AWS_SECRET_ACCESS_KEY= cloud-fs-mcp s3 s3://my-bucket --endpoint https://.r2.cloudflarestorage.com --region auto # Backblaze B2 export AWS_ACCESS_KEY_ID= export AWS_SECRET_ACCESS_KEY= cloud-fs-mcp s3 s3://my-bucket --endpoint https://s3.us-west-004.backblazeb2.com --region us-west-004 # LocalStack export AWS_ACCESS_KEY_ID=test export AWS_SECRET_ACCESS_KEY=test cloud-fs-mcp s3 s3://my-bucket --endpoint http://localhost:4566 --region us-east-1 ``` > **TLS with private CA:** For MinIO, RustFS, or Ceph with a self-signed certificate, add `--ca-file /path/to/ca.pem`. ### Azure Blob Storage Uses `DefaultAzureCredential` — works with `AZURE_TENANT_ID` / `AZURE_CLIENT_ID` / `AZURE_CLIENT_SECRET` env vars, managed identity, `az login`, and so on. ```bash cloud-fs-mcp azure az://my-container ``` ### Google Cloud Storage Uses Application Default Credentials (ADC). Set `GOOGLE_APPLICATION_CREDENTIALS` or run `gcloud auth application-default login`. ```bash cloud-fs-mcp gcs gs://my-bucket ``` ### In-Memory (ephemeral) Zero-config, zero-dependency provider. All data lives in a `Map` and is lost when the process exits. ```bash cloud-fs-mcp memory mem://demo --enable-shell ``` ### SQLite (persistent local) Persistent local storage using WAL mode. Dual-runtime: uses `bun:sqlite` on Bun, `better-sqlite3` on Node.js (install as peer dep: `npm install better-sqlite3`). ```bash cloud-fs-mcp sqlite sqlite://my-bucket --sqlite-db /tmp/cloud-fs.db --enable-shell ``` --- ## MCP Client Config ### Claude Desktop `~/Library/Application Support/Claude/claude_desktop_config.json` (macOS) or `%APPDATA%\Claude\claude_desktop_config.json` (Windows): ```json { "mcpServers": { "cloud-fs": { "command": "npx", "args": ["-y", "@nogoo9/mcp-server-cloud-fs", "s3", "s3://my-bucket"] } } }

@nogoo9/mcp-server-cloud-fs

Installation