@backblaze-labs/b2-mcp

MCPcon attestation
v0.2.1BackblazeMITActualizado hace 1 dnpmGitHub

MCP server for Backblaze B2 with frozen Phase 1 B2 and S3-compatible tool profiles

Funciona en
ClaudeCursorCopilotGemini

Inferido de los transportes que declara este listado (stdio). Que un cliente no aparezca aquí no significa que se haya descartado: simplemente Forge no puede confirmarlo.

Build con attestation
Una attestation de procedencia verificada vincula este artefacto al repositorio listado. Nadie ha reclamado todavía el listado: esto demuestra dónde se construyó el código, no quién lo respalda.
9Estrellas en GitHub
2Forks
hace 1 dÚltima actualización
Necesita 2 credenciales antes de poder ejecutarse
  • B2_APPLICATION_KEY_IDClave de APIobligatoria

    Backblaze B2 application key ID for native B2 and S3-compatible tools.

  • B2_APPLICATION_KEYClave de APIobligatoria

    Backblaze B2 application key secret.

  • B2_MASTER_KEY_IDClave de APIopcional

    Optional master key ID for Partner/Groups API tools.

  • B2_MASTER_KEYClave de APIopcional

    Optional master key secret for Partner/Groups API tools.

Declarado por el autor en el registro oficial de MCP. Forge does not store, broker, or ever see these values — the config below is scaffolded with placeholders you fill in locally.

Paquete
AutorBackblaze
LicenciaMIT
Versión0.2.1
Fuentenpm+mcp-registry
Estado de confianza
A
85/100Fiable
Listado en el índice de Forge+10/10
Identidad verificada · build con attestation+20/20
Firma de publicación Ed25519+0/5
Se incluye automáticamente cuando el publicador ejecuta `forge publish`
Verificación de dominio+0/5
Publicador: aloja /.well-known/forge.json en la página del paquete con { "publisher": "<github-login>" }
npm Trusted Publishing (Sigstore)+5/5
Coincidencia de maintainer en npm+0/5
Publicador: añade el login de GitHub verificado a los maintainers del paquete de npm (npm owner add <login>)
Análisis CVE · limpio+30/30
Análisis estático · limpio+20/20
Pégalo en Claude Code, Cursor o cualquier asistente de IA para corregir todas las carencias
EstadoIdentidad verificada
PublicadorSin verificar
FirmaSin firmar
Dominio
Procedencia✓ Verificado con Sigstore · d3f9e74
Dependencias✓ 49 resueltas+ · ninguna vulnerable
Superficie de herramientas40 herramientas · 9 privilegiadas
Análisis de seguridad✓ Limpiov0.2.1 · hoy¿Qué tan bien funciona este análisis?
EvaluacionesNinguna
Indexado2 sept 2026

La verificación confirma la identidad del publicador (la propiedad del repo), no la seguridad del código. El análisis de seguridad cubre los CVE conocidos y los scripts de instalación sospechosos.

Herramientas

40 herramientas · 9 privilegiadas
Extraído estáticamente del paquete publicadov0.2.1 · 2h ago

Leído del código que npm publica realmente, en el momento del análisis. El paquete nunca se ejecutó. Las herramientas registradas dinámicamente en tiempo de ejecución, o escondidas en código empaquetado o minificado, pueden pasarse por alto — así que esto es un mínimo de la superficie de herramientas, no un censo completo.

b2_list_bucketsList B2 buckets for the authorized account. Optionally filter by bucket ID, name, or type. When the key is bucket-scoped and no bucketId/bucketName filter is supplied, requests are automatically narrowed to the authorized bucket IDs. Returns bucket ID, name, type, CORS rules, and lifecycle rules fo…

List B2 buckets for the authorized account. Optionally filter by bucket ID, name, or type. When the key is bucket-scoped and no bucketId/bucketName filter is supplied, requests are automatically narrowed to the authorized bucket IDs. Returns bucket ID, name, type, CORS rules, and lifecycle rules fo…

No se publicó ningún esquema de entrada para esta herramienta.

b2_create_bucketSin descripción publicada

Esta herramienta no publicó ninguna descripción. Forge no se la inventa.

b2_delete_bucketprivilegiadaDelete a B2 bucket. The bucket must be empty — all files and file versions must be deleted first.

Delete a B2 bucket. The bucket must be empty — all files and file versions must be deleted first.

No se publicó ningún esquema de entrada para esta herramienta.

b2_update_bucketUpdate persistent settings on an existing B2 bucket: visibility, metadata, CORS, lifecycle, default encryption, replication, Object Lock, and default retention. Requires the writeBuckets capability. Use b2_list_buckets first to inspect the current bucketId/revision and use ifRevisionIs for safer re…

Update persistent settings on an existing B2 bucket: visibility, metadata, CORS, lifecycle, default encryption, replication, Object Lock, and default retention. Requires the writeBuckets capability. Use b2_list_buckets first to inspect the current bucketId/revision and use ifRevisionIs for safer re…

No se publicó ningún esquema de entrada para esta herramienta.

b2_get_bucket_notification_rulesRead the B2 event-notification webhook rules for a bucket. Use before b2_set_bucket_notification_rules to diff or preserve existing rules, because set replaces the complete rule set. Requires readBucketNotifications or writeBucketNotifications, has no side effects, and redacts webhook URL host/path…

Read the B2 event-notification webhook rules for a bucket. Use before b2_set_bucket_notification_rules to diff or preserve existing rules, because set replaces the complete rule set. Requires readBucketNotifications or writeBucketNotifications, has no side effects, and redacts webhook URL host/path…

No se publicó ningún esquema de entrada para esta herramienta.

b2_set_bucket_notification_rulesReplace the complete B2 event-notification webhook rule set for a bucket. Use b2_get_bucket_notification_rules first and submit the full desired rule set; this is not a patch or append API. Requires writeBucketNotifications and destructive confirmation by policy. Each webhook URL must be a public H…

Replace the complete B2 event-notification webhook rule set for a bucket. Use b2_get_bucket_notification_rules first and submit the full desired rule set; this is not a patch or append API. Requires writeBucketNotifications and destructive confirmation by policy. Each webhook URL must be a public H…

No se publicó ningún esquema de entrada para esta herramienta.

s3_head_bucketCheck whether a B2 bucket exists and is reachable on the S3-compatible endpoint with the current credentials. Use this to validate S3-surface reachability (the native b2_list_buckets confirms existence but not S3 reachability).

Check whether a B2 bucket exists and is reachable on the S3-compatible endpoint with the current credentials. Use this to validate S3-surface reachability (the native b2_list_buckets confirms existence but not S3 reachability).

No se publicó ningún esquema de entrada para esta herramienta.

s3_put_bucket_lifecycleSet S3 lifecycle rules on a B2 bucket; pass rules: [] to clear the S3 lifecycle configuration. Supports AbortIncompleteMultipartUpload, Expiration, and NoncurrentVersionExpiration. B2 does not support Transition/storage-class rules.

Set S3 lifecycle rules on a B2 bucket; pass rules: [] to clear the S3 lifecycle configuration. Supports AbortIncompleteMultipartUpload, Expiration, and NoncurrentVersionExpiration. B2 does not support Transition/storage-class rules.

No se publicó ningún esquema de entrada para esta herramienta.

s3_get_bucket_locationGet the region (location constraint) of a B2 bucket via the S3-compatible API. No native b2_* equivalent — used to verify region/endpoint pairing.

Get the region (location constraint) of a B2 bucket via the S3-compatible API. No native b2_* equivalent — used to verify region/endpoint pairing.

No se publicó ningún esquema de entrada para esta herramienta.

b2_report_usage_growthSin descripción publicada

Esta herramienta no publicó ninguna descripción. Forge no se la inventa.

b2_rank_egress_leadersRank top egress (downloaded bytes) by account or bucket over a period — default month-to-date. For 'who's downloading the most', 'where is egress concentrated'. Returns leaders with each one's share of total egress, from the daily usage reports. Scope follows the caller's key. Needs Usage Reports e…

Rank top egress (downloaded bytes) by account or bucket over a period — default month-to-date. For 'who's downloading the most', 'where is egress concentrated'. Returns leaders with each one's share of total egress, from the daily usage reports. Scope follows the caller's key. Needs Usage Reports e…

No se publicó ningún esquema de entrada para esta herramienta.

b2_list_largest_filesList a bucket's largest objects by size via a live listing. For 'largest files', 'what's taking up space in <bucket>'. Give the bucket by name or bucketId; optional path prefix. Sorting by size requires a full listing, so on very large buckets the scan is bounded by max_scan and a time budget — it…

List a bucket's largest objects by size via a live listing. For 'largest files', 'what's taking up space in <bucket>'. Give the bucket by name or bucketId; optional path prefix. Sorting by size requires a full listing, so on very large buckets the scan is bounded by max_scan and a time budget — it…

No se publicó ningún esquema de entrada para esta herramienta.

b2_unfinished_uploadsFind abandoned multipart uploads that silently consume storage in a bucket. For 'bucket bloat', 'stuck/incomplete uploads', 'wasted storage'. Returns count, oldest upload age, and wasted bytes. Give the bucket by name or bucketId. Live listing, bounded by max_uploads and an internal time budget — o…

Find abandoned multipart uploads that silently consume storage in a bucket. For 'bucket bloat', 'stuck/incomplete uploads', 'wasted storage'. Returns count, oldest upload age, and wasted bytes. Give the bucket by name or bucketId. Live listing, bounded by max_uploads and an internal time budget — o…

No se publicó ningún esquema de entrada para esta herramienta.

b2_create_keySin descripción publicada

Esta herramienta no publicó ninguna descripción. Forge no se la inventa.

b2_list_keysList the application keys associated with the B2 account. Does not return the actual key secrets — only key IDs, names, capabilities, and restrictions.

List the application keys associated with the B2 account. Does not return the actual key secrets — only key IDs, names, capabilities, and restrictions.

No se publicó ningún esquema de entrada para esta herramienta.

b2_delete_keyprivilegiadaPermanently delete a B2 application key. Use b2_list_keys first to verify applicationKeyId, keyName, capabilities, and dependent systems; use b2_create_key before deletion when rotating credentials. Requires deleteKeys and destructive confirmation by policy. The key secret cannot be recovered, and…

Permanently delete a B2 application key. Use b2_list_keys first to verify applicationKeyId, keyName, capabilities, and dependent systems; use b2_create_key before deletion when rotating credentials. Requires deleteKeys and destructive confirmation by policy. The key secret cannot be recovered, and…

No se publicó ningún esquema de entrada para esta herramienta.

b2_authorize_accountAuthorize with B2 and return account info including accountId, apiUrl, and downloadUrl. The server handles authorization automatically, but this tool is useful for verifying credentials and retrieving account details.

Authorize with B2 and return account info including accountId, apiUrl, and downloadUrl. The server handles authorization automatically, but this tool is useful for verifying credentials and retrieving account details.

No se publicó ningún esquema de entrada para esta herramienta.

s3_create_multipart_uploadprivilegiadaSin descripción publicada

Esta herramienta no publicó ninguna descripción. Forge no se la inventa.

s3_get_presigned_upload_part_urlprivilegiadaSin descripción publicada

Esta herramienta no publicó ninguna descripción. Forge no se la inventa.

s3_complete_multipart_uploadprivilegiadaFinalize an S3-compatible multipart upload in B2 by assembling uploaded parts. Use only after s3_create_multipart_upload and s3_get_presigned_upload_part_url (or s3_upload_part_copy) have produced every required part; use s3_list_parts to verify uploaded parts before retrying. Requires writeFiles.…

Finalize an S3-compatible multipart upload in B2 by assembling uploaded parts. Use only after s3_create_multipart_upload and s3_get_presigned_upload_part_url (or s3_upload_part_copy) have produced every required part; use s3_list_parts to verify uploaded parts before retrying. Requires writeFiles.…

No se publicó ningún esquema de entrada para esta herramienta.

s3_abort_multipart_uploadprivilegiadaAbort an in-progress S3-compatible multipart upload and release all associated storage.

Abort an in-progress S3-compatible multipart upload and release all associated storage.

No se publicó ningún esquema de entrada para esta herramienta.

s3_list_multipart_uploadsList in-progress S3-compatible multipart uploads for a B2 bucket. Use to resume or audit unfinished uploads before s3_get_presigned_upload_part_url, s3_complete_multipart_upload, or s3_abort_multipart_upload; use b2_unfinished_uploads when you need storage-cost analysis across bounded listings. Req…

List in-progress S3-compatible multipart uploads for a B2 bucket. Use to resume or audit unfinished uploads before s3_get_presigned_upload_part_url, s3_complete_multipart_upload, or s3_abort_multipart_upload; use b2_unfinished_uploads when you need storage-cost analysis across bounded listings. Req…

No se publicó ningún esquema de entrada para esta herramienta.

s3_list_partsList the parts that have been uploaded for an in-progress S3-compatible multipart upload.

List the parts that have been uploaded for an in-progress S3-compatible multipart upload.

No se publicó ningún esquema de entrada para esta herramienta.

s3_upload_part_copyprivilegiadaSin descripción publicada

Esta herramienta no publicó ninguna descripción. Forge no se la inventa.

b2_update_file_legal_holdSet or clear a legal hold on a specific file version in B2. When a legal hold is active, the file cannot be deleted regardless of retention settings. Requires the writeFileLegalHolds capability on the application key.

Set or clear a legal hold on a specific file version in B2. When a legal hold is active, the file cannot be deleted regardless of retention settings. Requires the writeFileLegalHolds capability on the application key.

No se publicó ningún esquema de entrada para esta herramienta.

b2_update_file_retentionSet or modify the retention policy on a specific file version in B2. Supports governance and compliance retention modes. In compliance mode, the retain-until date can only be extended. Requires the writeFileRetentions capability.

Set or modify the retention policy on a specific file version in B2. Supports governance and compliance retention modes. In compliance mode, the retain-until date can only be extended. Requires the writeFileRetentions capability.

No se publicó ningún esquema de entrada para esta herramienta.

s3_put_objectUpload a SMALL object inline (≤1 MiB) to a B2 bucket — for manifests, sidecars, and tiny configs. Provide base64-encoded content or a local file path. For real object data, generate a PutObject URL with s3_get_presigned_url and upload directly to B2 (bytes never pass through the server), or use the…

Upload a SMALL object inline (≤1 MiB) to a B2 bucket — for manifests, sidecars, and tiny configs. Provide base64-encoded content or a local file path. For real object data, generate a PutObject URL with s3_get_presigned_url and upload directly to B2 (bytes never pass through the server), or use the…

No se publicó ningún esquema de entrada para esta herramienta.

s3_get_objectRead a SMALL object inline (≤1 MiB, returned base64) — for manifests, sidecars, and configs the agent must inspect — or stream any size to a local path with saveToPath. saveToPath writes the fetched bytes to the local filesystem (creating parent directories), removes the partial file if the stream…

Read a SMALL object inline (≤1 MiB, returned base64) — for manifests, sidecars, and configs the agent must inspect — or stream any size to a local path with saveToPath. saveToPath writes the fetched bytes to the local filesystem (creating parent directories), removes the partial file if the stream…

No se publicó ningún esquema de entrada para esta herramienta.

s3_delete_objectprivilegiadaDelete one B2 object through the S3-compatible API. Use s3_list_object_versions first when you need to target a specific version or delete marker; use s3_delete_objects for batches up to 1000. Requires deleteFiles and destructive confirmation by policy; targeting a specific versionId additionally r…

Delete one B2 object through the S3-compatible API. Use s3_list_object_versions first when you need to target a specific version or delete marker; use s3_delete_objects for batches up to 1000. Requires deleteFiles and destructive confirmation by policy; targeting a specific versionId additionally r…

No se publicó ningún esquema de entrada para esta herramienta.

s3_delete_objectsprivilegiadaDelete multiple objects from a B2 bucket with bounded SDK concurrency (up to 1000 objects).

Delete multiple objects from a B2 bucket with bounded SDK concurrency (up to 1000 objects).

No se publicó ningún esquema de entrada para esta herramienta.

s3_head_objectGet metadata for a B2 object without downloading it. Returns content type, size, last modified, ETag, and custom metadata.

Get metadata for a B2 object without downloading it. Returns content type, size, last modified, ETag, and custom metadata.

No se publicó ningún esquema de entrada para esta herramienta.

s3_copy_objectCopy an object within B2 or between B2 buckets via B2's S3-compatible CopyObject API. The acl input is retained as a no-op S3 compatibility hint; B2 access follows the destination bucket policy.

Copy an object within B2 or between B2 buckets via B2's S3-compatible CopyObject API. The acl input is retained as a no-op S3 compatibility hint; B2 access follows the destination bucket policy.

No se publicó ningún esquema de entrada para esta herramienta.

s3_list_objects_v2Sin descripción publicada

Esta herramienta no publicó ninguna descripción. Forge no se la inventa.

s3_list_object_versionsSin descripción publicada

Esta herramienta no publicó ninguna descripción. Forge no se la inventa.

b2_list_groupsSin descripción publicada

Esta herramienta no publicó ninguna descripción. Forge no se la inventa.

b2_create_group_memberSin descripción publicada

Esta herramienta no publicó ninguna descripción. Forge no se la inventa.

b2_eject_group_memberSin descripción publicada

Esta herramienta no publicó ninguna descripción. Forge no se la inventa.

b2_list_group_membersSin descripción publicada

Esta herramienta no publicó ninguna descripción. Forge no se la inventa.

b2_reserve_trial_create_accountSin descripción publicada

Esta herramienta no publicó ninguna descripción. Forge no se la inventa.

s3_get_presigned_urlSin descripción publicada

Esta herramienta no publicó ninguna descripción. Forge no se la inventa.

26 de 40 herramientas publicaron una descripción.

Los nombres y descripciones de las herramientas los escribe el publicador y se muestran literalmente como texto inerte. Son las cadenas que un cliente MCP pasa al modelo, así que Forge las analiza en busca de patrones de inyección de prompts — cualquier hallazgo aparece junto al análisis de seguridad de arriba. «Privilegiada» es una coincidencia de palabra clave en el nombre de la herramienta, no una auditoría de lo que hace: un nombre inofensivo puede hacer cualquier cosa.

Acerca de

MCP server for Backblaze B2 with frozen Phase 1 B2 and S3-compatible tool profiles

Palabras clave
mcpbackblazeb2cloud-storages3ai
Alternativas
Comparando superficies de herramientas…

Árbol de dependencias

Lo que un análisis de Forge resolvió a partir de los metadatos de npm el 2026-09-05: resolución observada, no una declaración del publicador.

49 paquetes resueltos · 9 directos · ninguno con avisos de seguridad La resolución se detiene en la profundidad 4 y en 60 paquetes.

El rastreo se detuvo en el límite de profundidad 4. Nada por debajo de ese nivel llegó a resolverse.

Hay 25 paquetes resueltos más que no se dibujan aquí (límite de visualización: 24). Toda dependencia con avisos de seguridad se dibuja aunque se supere el límite. Inventario completo (SBOM CycloneDX)

Declaradas pero no resueltas

20 dependencias declaradas nunca llegaron al árbol. Faltan en la resolución de Forge, no en el paquete.

+8 más sin listar. Los recuentos por motivo de arriba las incluyen todas.

No se siguen: peerDependencies. Este árbol cubre solo dependencias en tiempo de ejecución, así que lo que estas arrastren nunca se resolvió.

Temas

Relacionados en cloud platforms