mcp-s3

claude mcp add mcp-s3 -- node /opt/mcp/mcp-s3/build/index.js
# env: AWS_ACCESS_KEY_ID, AWS_SECRET_ACCESS_KEY, AWS_REGION

Built on @aws-sdk/client-s3, it covers buckets and objects plus the parts people forget: static website hosting config and CORS rules. Uploads get the right Content-Type from a hand-rolled MIME table, because an HTML file served as application/octet-stream is a download, not a page.

Guards that match the blast radius

Destructive operations are tiered by how much they can ruin. delete-object asks for a literal "yes" confirmation. delete-prefix, which can wipe a whole tree, demands the more deliberate "yes-delete-all". The friction scales with the damage, so the cheap mistake stays cheap and the expensive one needs you to mean it.