SkillFoxx

Selectel S3 MCP and CLI: Selectel buckets and backups

selectel-s3-mcp-ai-cli

The selectel-s3 Go binary gives an agent an MCP server and a CLI for Selectel object storage with read, write, delete and admin levels

  • 0 ★ on the repository
  • Last commit
  • MIT
MCP server

Extended access

Why this level

  • S3 keys open reading and downloading objects, and the write and delete flags add changes to bucket data
  • Temporary links expose object content to anyone holding the address
All reasons and checks
Russian stack

stufently/selectel-s3-mcp-ai-cliAuthor:stufently

Install

Services

Manual install

selectel-s3 mcp install --client cursor

After installing the binary from releases and `selectel-s3 auth set`; the same call with `--client codex`, `--client claude-desktop` or `--client claude-code --scope user`.

Access and checks

How we review

Extended accessThe tool runs code or makes network calls and only reads external data.

  • S3 keys open reading and downloading objects, and the write and delete flags add changes to bucket data
  • Temporary links expose object content to anyone holding the address

This is third-party code. Review the repository files before installing.

What it does

The `selectel-s3` binary combines an MCP server, a streaming CLI and a built-in skill for Selectel Object Storage. Through it the agent lists buckets and objects, reads metadata and versions, copies and moves objects, prepares temporary read and write links, runs multipart uploads and views CORS, policy and Object Lock. For backup recovery there are bounded scans: the largest objects, usage by prefix and abandoned uploads. The capability profile describes six Selectel pools and disables tags, which Selectel lacks. The `selectel-s3 mcp install` command writes the configuration for Cursor, Claude Desktop, Codex and Claude Code, while writing, deletion and admin operations open with the `--allow-write`, `--allow-delete`, `--allow-admin` flags or the `SELECTEL_S3_ALLOW` variable.

Who it is for. Administrators and developers with backups in Selectel who need an agent to check buckets and restore archives.

Good fit when

  • After a failure you must find the last archive in a bucket and download it
  • You want to see which prefixes take the most space
  • Abandoned multipart uploads hang in a bucket
  • A colleague needs a short link to a ready archive

Not a fit when

  • The storage belongs to another provider: the author keeps separate projects for Yandex, VK Cloud and Timeweb
  • You need object tags: Selectel has none
  • You need server and DNS management: the binary works only with S3

Example request

Find the freshest database archive in the backups bucket, show its size and give a download link valid for an hour

MCP

Transport
stdio
Authentication
API key

Environment variables

SELECTEL_S3_ACCESS_KEY_ID required
Selectel S3 key id
SELECTEL_S3_SECRET_ACCESS_KEY required, secret
S3 secret key
SELECTEL_S3_POOL
Pool, `ru-1` by default
SELECTEL_S3_ALLOW
Rights levels: `write`, `delete`, `admin`

Limitations

The project is in development, release v0.1.0 is published and is in the MCP Registry and Smithery. The binary is downloaded from releases, built with Go 1.27.2 or run as a Docker image. Selectel S3 keys are required; the secret is not passed in arguments, and `auth set` reads it without echo. Without flags only reading is available. Inline `get` and `put` are limited to 262,144 bytes, preview to 65,536, and large files go by temporary link or through `FILE_ROOT`. Lists return up to 1000 items.

How to disable. Remove the `selectel-s3` block from the client configuration, delete `~/.config/selectel-s3/credentials` and revoke the S3 keys in the Selectel panel.

FAQ

How do I connect Selectel S3 to Cursor?

With `selectel-s3 mcp install --client cursor`; the `--dry-run` flag gives a trial run with no writing. Keys are not written to the configuration, Cursor takes them from the environment.

How do I enable writing and deletion?

With the `--allow-write`, `--allow-delete`, `--allow-admin` flags or `SELECTEL_S3_ALLOW=write,delete,admin`; the levels turn on independently.

Which pool is the default?

The `ru-1` pool; another is set with the `SELECTEL_S3_POOL` variable or the `--pool` flag.

What does the `selectel-s3 auth set` command do?

It asks for the key id and secret without echo and saves them in `~/.config/selectel-s3/credentials` with 0600 rights; wider rights are rejected.

Which tools help review backups?

`s3_largest_objects` finds the largest objects, `s3_prefix_usage` counts usage by prefix and `s3_unfinished_uploads` finds abandoned uploads.

Discussion

No questions or reviews yet.

All Selectel tools
Russian stack

An unofficial Selectel cloud MCP server: OpenStack servers, S3 storage, billing and one-call Docker app deploys

MCP serverBroad access1

Selectel balance MCP server

Selectel MCP Server

Russian stack

A Selectel billing MCP server: balance and spend predictions via a service user, with automatic token refresh and an audit log

MCP serverExtended access
Russian stack

A FastMCP Selectel Cloud Platform server for projects, resources and quotas, planned as the first of six service-specific MCPs

MCP serverExtended access

selvpc (Selectel VPC)

python-selvpcclient

Official

Python client and selvpc CLI for the Selectel cloud platform API

CLIBroad access8

README in short

The README covers a quick start with the binary and the Docker image, connecting Claude Code, Cursor and Codex, a table of tools by rights level and size limits. There is an English version and a link to the same author catalog of S3 MCP servers.

README badge

Report a problem