VK Cloud S3 MCP and CLI: Hotbox and Icebox for an agent
vkcloud-s3-mcp-ai-cli
The vkcloud-s3 binary opens Hotbox and Icebox in VK Cloud to an agent: ru-msk and kz-ast pools, object browsing and backup downloads
- 0 ★ on the repository
- Last commit
Extended access
Why this level
- S3 keys open objects for reading, and `--allow-write`, `--allow-delete` and `--allow-admin` add edits and deletion
- Short links to archives work for anyone who receives them
Install
- Works in
- Services
Manual install
vkcloud-s3 mcp install --client cursorAfter the binary from releases and `vkcloud-s3 auth set`; other clients take another `--client` value.
Access and checks
How we reviewExtended accessThe tool runs code or makes network calls and only reads external data.
- S3 keys open objects for reading, and `--allow-write`, `--allow-delete` and `--allow-admin` add edits and deletion
- Short links to archives work for anyone who receives them
This is third-party code. Review the repository files before installing.
What it does
The `vkcloud-s3` binary in Go was written for VK Cloud object storage: an MCP server, a CLI and a skill in one file. The capability profile knows the Hotbox and Icebox classes and two pools, Moscow `ru-msk` and Kazakhstan `kz-ast`. The agent looks at buckets and object metadata, counts prefix size and makes short links to ready archives. The same operations exist in the terminal: `vkcloud-s3 --pool ru-msk stat backups/daily/archive.tar`, `du ... --max-scan 10000 --json` and `presign ... --expires 3600`. Writing and deletion are closed by default and open with `--allow-write` and `--allow-delete` in the start command or `VKCLOUD_S3_ALLOW`. The profile disables bucket tags. `vkcloud-s3 mcp install` connects the clients.
Who it is for. Teams with backups and archives in VK Cloud who need to check storage and fetch files from a chat with an agent.
Good fit when
- You must see whether a bucket lies in Hotbox or Icebox and in which region
- You need the size of the `backups/daily/` directory with a limit on scanned objects
- An archive must be handed to a colleague by a link valid for an hour
- Both the agent and a terminal script need the same set of commands
Not a fit when
- You need bucket tags: the profile disables them
- The storage is outside VK Cloud: Selectel, Timeweb, Yandex and other clouds are covered by separate projects of the author
- You need virtual machine management: the binary works only with S3
Example request
Check in the ru-msk pool which class the backups bucket is and give a link to the freshest archive for an hourMCP
- Transport
- stdio
- Authentication
- API key
Environment variables
VKCLOUD_S3_ACCESS_KEY_IDrequired- VK Cloud S3 key id
VKCLOUD_S3_SECRET_ACCESS_KEYrequired, secret- S3 secret key
VKCLOUD_S3_POOL- Pool: `ru-msk` by default or `kz-ast`
VKCLOUD_S3_ALLOW- Rights levels: `write`, `delete`, `admin`
Limitations
Version 0.1.0 is still fresh and the project status is development. VK Cloud S3 keys are required; the default pool is `ru-msk`, the second available is `kz-ast`. The binary is downloaded from releases, built with Go 1.27.2 or taken as a Docker image. The secret does not go into arguments: `vkcloud-s3 auth set` takes it without echo. Until writing, deletion and admin rights are enabled, the server only reads. An address without HTTPS needs `VKCLOUD_S3_ALLOW_INSECURE=1`.
How to disable. Remove `vkcloud-s3` from the client settings and the credentials file, and revoke the S3 keys in the VK Cloud panel.
FAQ
Which pools does vkcloud-s3 support?
Two: Moscow `ru-msk` by default and Kazakhstan `kz-ast`; they are chosen with the `--pool` flag or the `VKCLOUD_S3_POOL` variable.
How do I count the size of a directory in a bucket?
With `vkcloud-s3 --pool ru-msk du backups/daily/ --max-scan 10000 --json`; the `--max-scan` flag limits the number of scanned objects.
How do I connect the server to Cursor?
With `vkcloud-s3 mcp install --client cursor`; with the `--dry-run` flag it first shows what will be written.
What does `vkcloud-s3 mcp install` do?
It writes the MCP configuration to the chosen client: Cursor, Claude Desktop, Codex or Claude Code; `--dry-run` first shows the edits without writing.
How do I create a link to an archive?
With `vkcloud-s3 --pool ru-msk presign backups/daily/archive.tar --expires 3600`: the link lives for an hour.
Discussion
No questions or reviews yet.
Related
All VK Cloud toolsVK Cloud MCP server
VK Cloud MCP Server
An unofficial VK Cloud MCP server: virtual machines, networks, disks and SSH keys via the OpenStack-compatible API
The remote CloudBridge MCP server: an agent moves and syncs files between 19 clouds, including Yandex Disk and VK Cloud, with an API key
Yandex Object Storage: MCP, CLI and skill for Yandex Cloud S3
yandex-s3-mcp-ai-cli
One Go binary: an MCP server, CLI and skill for Yandex Cloud S3, read-only by default, with write and delete enabled by flags
Yandex Cloud MCP: VMs and Object Storage
yandex-cloud-mcp
MCP server for basic Yandex Cloud operations: virtual machines, Object Storage buckets and serverless functions from an agent chat
An MCP server and CLI that lets an agent query and provision cloud, SaaS and API resources with plain SQL
An agent works with Huawei Cloud through guidance for two dozen services, and cloud writes go through checks and approval
README in short
The two-language documentation is built around a quick start, the Docker image, an install button for Cursor and client connection commands. A separate scenario shows checking Hotbox and Icebox and choosing a region.