---
title: "S3-compatible storage"
description: "Lists, downloads and uploads objects in Amazon S3, Cloudflare R2, Wasabi, Backblaze B2, DigitalOcean Spaces or a self-hosted MinIO, using that store's own endpoint."
---

> Documentation Index
> Fetch the complete documentation index at: https://help.tooluse.net/llms.txt
> Use this file to discover all available pages before exploring further.

# S3-compatible storage

<p>Lists, downloads and uploads objects in Amazon S3, Cloudflare R2, Wasabi, Backblaze B2, DigitalOcean Spaces or a self-hosted MinIO, using that store&#39;s own endpoint.</p>

<details data-command-index><summary>What you can do (3)</summary>
<h2>What you can do</h2>
<p>Available commands: 3 (2 read, 1 write). Enable only the commands your application needs.</p>
<div class="nb-table-scroll"><table>
<thead>
<tr>
<th>Command</th>
<th>Effect</th>
</tr>
</thead>
<tbody><tr>
<td><a href="https://help.tooluse.net/integrations/s3-compatible#command-s3-objects-list">List objects</a> — <code>s3.objects.list</code></td>
<td>Read</td>
</tr>
<tr>
<td><a href="https://help.tooluse.net/integrations/s3-compatible#command-s3-object-download">Download object</a> — <code>s3.object.download</code></td>
<td>Read</td>
</tr>
<tr>
<td><a href="https://help.tooluse.net/integrations/s3-compatible#command-s3-object-upload">Upload object</a> — <code>s3.object.upload</code></td>
<td>Write</td>
</tr>
</tbody></table>
</div>
</details>
<h2>Connect and use</h2>

<p><a href="https://www.tooluse.net/tools/integrations/s3-compatible">Connect and use</a></p>
<p>Open the integration&#39;s connection form to check the available credential source. The source has not been resolved for this documentation export. The instructions below apply when using your own provider account.</p>
<h2>Get your provider credentials</h2>
<p>Follow these steps for S3-compatible storage, then enter the issued values in the connection form below.</p>
<ol>
<li>In your storage provider&#39;s console, create access credentials restricted to the required bucket and operations. Copy the access key ID, secret access key, endpoint, region and bucket name into the connection form.</li>
</ol>
<p><a href="https://docs.aws.amazon.com/AmazonS3/latest/API/Welcome.html">Official credential setup</a></p>
<h2>Where to enter credentials</h2>
<p>In the integration page, sign in, choose your workspace and open Connect. If a <strong>Credentials</strong> choice is shown, select <strong>Use my credentials</strong>. Fill the following connection fields and save. Provider credentials belong in this form, never in an MCP configuration or tool input.</p>
<div class="nb-table-scroll"><table>
<thead>
<tr>
<th>Connection field</th>
<th>Requirement</th>
</tr>
</thead>
<tbody><tr>
<td>Endpoint</td>
<td>Required</td>
</tr>
<tr>
<td>Region</td>
<td>Required</td>
</tr>
<tr>
<td>Bucket</td>
<td>Required</td>
</tr>
<tr>
<td>Access key id</td>
<td>Required</td>
</tr>
<tr>
<td>Secret access key</td>
<td>Required</td>
</tr>
<tr>
<td>Address the bucket in the path</td>
<td>Optional</td>
</tr>
</tbody></table>
</div><p>Open API keys and create a Tooluse.net key for the enabled commands.</p>
<p>Set TOOLUSE_API_KEY in your client and use the shared MCP configuration.</p>
<p><a href="https://help.tooluse.net/clients">Configure Claude Code, Codex or Cursor once</a></p>

<h2>Permissions and results</h2>

<p>If you have more than one workspace, check the selected workspace in the connection or API-key dialog before saving. Roles, enabled commands, expiry and revocation use Tooluse.net&#39;s existing permissions. Disabling a connection or revoking a key immediately prevents new calls.</p>

<p>Send one Claude tool_use block per request. Keep the same Idempotency-Key when retrying the same request; use a new key for a new call. The response includes the shared Tooluse.net receipt and Claude tool_result. Check both HTTP status and the returned tool result before treating a call as successful.</p>

<p>Your connection&#39;s daily allowance and key permissions also apply. Adding a connection does not make a provider request.</p>

<p>Calls return the shared execution receipt and a Claude tool_result. Provider output varies by operation; consult the provider documentation for its response fields. Unconfirmed calls should be checked before retrying.</p>

<h2>Call from your client</h2>

<p>Use the shared MCP configuration. Refresh your client&#39;s tool list after saving the connection or changing key permissions, then call the returned tool name with the example input below.</p>

<p><a href="https://help.tooluse.net/clients">Configure Claude Code, Codex or Cursor once</a></p>

<h2>Discover your enabled tools</h2>

<p>List permitted tools in Claude format. Read every page using page and size (maximum 100) until all results have been received. Use the returned name, not a catalog capability identifier, in the tool_use block.</p>

<pre><code class="language-bash">curl 'https://api.tooluse.net/v1/tools' \
  -H "Authorization: Bearer $TOOLUSE_API_KEY"
</code></pre>

<p>Find this command in the tool list permitted by your key. Replace svc_FROM_YOUR_TOOL_LIST with its returned name. Use a new Idempotency-Key for each new call and retain it when retrying that same call.</p>

<h2>HTTP call</h2>

<pre><code class="language-bash">curl 'https://api.tooluse.net/v1/tool-calls' \
  -H "Authorization: Bearer $TOOLUSE_API_KEY" \
  -H 'Content-Type: application/json' \
  -H 'Idempotency-Key: replace-with-a-new-call-id' \
  --data '{
  "type": "tool_use",
  "id": "toolu_example",
  "name": "svc_FROM_YOUR_TOOL_LIST",
  "input": {
    "maxKeys": 100
  }
}'
</code></pre>

<p>Send one Claude tool_use block per request. Keep the same Idempotency-Key when retrying the same request; use a new key for a new call. The response includes the shared Tooluse.net receipt and Claude tool_result. Check both HTTP status and the returned tool result before treating a call as successful.</p>

<h2>Commands</h2>

<details id="command-s3-objects-list">
<summary><span>List objects — <code>s3.<wbr>objects.<wbr>list</code></span></summary>
<p>Run <strong>List objects</strong> with S3-compatible storage. This is a read command; it does not grant access beyond the connected account&#39;s permissions.</p>

<p>This is a read operation. Provider rate limits and data access rules still apply.</p>

<p><a href="https://www.tooluse.net/tools/integrations/s3-compatible?command=s3.objects.list">Connect and use</a></p>

<p><strong>Parameters</strong></p>

<p>Requiredness is local to the containing object. A required child is required only when its parent object or array item is provided. Alternative schemas are identified in the Constraints column; the linked full JSON Schema is authoritative.</p>

<div class="nb-table-scroll"><table>
<thead>
<tr>
<th>Parameter</th>
<th>Type</th>
<th>Required in parent</th>
<th>Description</th>
<th>Constraints</th>
</tr>
</thead>
<tbody><tr>
<td><code>prefix</code></td>
<td>string</td>
<td>Optional</td>
<td>Key prefix</td>
<td><code>minLength: 1; maxLength: 1024</code></td>
</tr>
<tr>
<td><code>continuationToken</code></td>
<td>string</td>
<td>Optional</td>
<td>Continuation token</td>
<td><code>minLength: 1; maxLength: 2048</code></td>
</tr>
<tr>
<td><code>maxKeys</code></td>
<td>integer</td>
<td>Optional</td>
<td>Keys per page</td>
<td><code>minimum: 1; maximum: 1000</code></td>
</tr>
</tbody></table>
</div>
<p><strong>Full JSON Schema</strong></p>

<p><a href="https://api.tooluse.net/v1/integrations/s3-compatible/commands/s3.objects.list">Full JSON Schema</a></p>

<p><strong>Example input</strong></p>

<pre><code class="language-json">{
  "maxKeys": 100
}
</code></pre>

<p>At most 1 provider requests per invocation; timeout: 30 seconds.</p>

</details>
<details id="command-s3-object-download">
<summary><span>Download object — <code>s3.<wbr>object.<wbr>download</code></span></summary>
<p>Run <strong>Download object</strong> with S3-compatible storage. This is a read command; it does not grant access beyond the connected account&#39;s permissions.</p>

<p>This is a read operation. Provider rate limits and data access rules still apply.</p>

<p><a href="https://www.tooluse.net/tools/integrations/s3-compatible?command=s3.object.download">Connect and use</a></p>

<p><strong>Parameters</strong></p>

<p>Requiredness is local to the containing object. A required child is required only when its parent object or array item is provided. Alternative schemas are identified in the Constraints column; the linked full JSON Schema is authoritative.</p>

<div class="nb-table-scroll"><table>
<thead>
<tr>
<th>Parameter</th>
<th>Type</th>
<th>Required in parent</th>
<th>Description</th>
<th>Constraints</th>
</tr>
</thead>
<tbody><tr>
<td><code>key</code></td>
<td>string</td>
<td>Required</td>
<td>Object key</td>
<td><code>minLength: 1; maxLength: 1024</code></td>
</tr>
<tr>
<td><code>etag</code></td>
<td>string</td>
<td>Optional</td>
<td>ETag</td>
<td><code>minLength: 1; maxLength: 200</code></td>
</tr>
</tbody></table>
</div>
<p><strong>Full JSON Schema</strong></p>

<p><a href="https://api.tooluse.net/v1/integrations/s3-compatible/commands/s3.object.download">Full JSON Schema</a></p>

<p><strong>Example input</strong></p>

<pre><code class="language-json">{
  "key": "daily/report.csv"
}
</code></pre>

<p>At most 1 provider requests per invocation; timeout: 60 seconds.</p>

</details>
<details id="command-s3-object-upload">
<summary><span>Upload object — <code>s3.<wbr>object.<wbr>upload</code></span></summary>
<p>Run <strong>Upload object</strong> with S3-compatible storage. This command can change provider data. Review the target and input before invoking it.</p>

<p>This operation can change provider data. Review the input before allowing an agent to call it.</p>

<p><a href="https://www.tooluse.net/tools/integrations/s3-compatible?command=s3.object.upload">Connect and use</a></p>

<p><strong>Parameters</strong></p>

<p>Requiredness is local to the containing object. A required child is required only when its parent object or array item is provided. Alternative schemas are identified in the Constraints column; the linked full JSON Schema is authoritative.</p>

<div class="nb-table-scroll"><table>
<thead>
<tr>
<th>Parameter</th>
<th>Type</th>
<th>Required in parent</th>
<th>Description</th>
<th>Constraints</th>
</tr>
</thead>
<tbody><tr>
<td><code>key</code></td>
<td>string</td>
<td>Required</td>
<td>Object key</td>
<td><code>minLength: 1; maxLength: 1024</code></td>
</tr>
<tr>
<td><code>content</code></td>
<td>string</td>
<td>Required</td>
<td>Object content</td>
<td><code>minLength: 0; maxLength: 1000000</code></td>
</tr>
<tr>
<td><code>contentType</code></td>
<td>string</td>
<td>Optional</td>
<td>Content type</td>
<td><code>minLength: 1; maxLength: 255</code></td>
</tr>
</tbody></table>
</div>
<p><strong>Full JSON Schema</strong></p>

<p><a href="https://api.tooluse.net/v1/integrations/s3-compatible/commands/s3.object.upload">Full JSON Schema</a></p>

<p><strong>Example input</strong></p>

<pre><code class="language-json">{
  "key": "daily/notes.txt",
  "content": "hello",
  "contentType": "text/plain"
}
</code></pre>

<p>At most 1 provider requests per invocation; timeout: 60 seconds.</p>

</details>
<h2>Errors</h2>

<p>Check the key&#39;s expiry, revocation, workspace and allowed operations.</p>

<p>Reuse the same idempotency key only for the same request.</p>

<p>The connection or provider limit has been reached. Check the receipt before retrying.</p>

<h2>Test the connection</h2>

<p>Open the integration&#39;s commands below to inspect parameters and examples. Start with a read command for an account or resource you can access. Refresh your client&#39;s tool list, use the returned tool name, and check the execution result and usage. Provider charges and permissions still apply. Never test a write against production data without reviewing it.</p>

<p><a href="https://docs.aws.amazon.com/AmazonS3/latest/API/Welcome.html">Official provider documentation</a></p>

Source: https://help.tooluse.net/integrations/s3-compatible/index.mdx