@backblaze-labs/b2-mcp

MCPattested
v0.2.1BackblazeMITUpdated 1d agonpmGitHub

MCP server for Backblaze B2 with frozen Phase 1 B2 and S3-compatible tool profiles

Works in
ClaudeCursorCopilotGemini

Inferred from the transports this listing declares (stdio). A client not listed here hasn’t been ruled out — it just isn’t something Forge can confirm.

Attested build
A verified provenance attestation binds this artifact to the listed repository. Nobody has claimed the listing yet — this proves where the code was built, not who stands behind it.
9GitHub stars
2Forks
1d agoLast update
Needs 2 credentials before it runs
  • B2_APPLICATION_KEY_IDAPI keyrequired

    Backblaze B2 application key ID for native B2 and S3-compatible tools.

  • B2_APPLICATION_KEYAPI keyrequired

    Backblaze B2 application key secret.

  • B2_MASTER_KEY_IDAPI keyoptional

    Optional master key ID for Partner/Groups API tools.

  • B2_MASTER_KEYAPI keyoptional

    Optional master key secret for Partner/Groups API tools.

Declared by the author in the official MCP registry. Forge does not store, broker, or ever see these values — the config below is scaffolded with placeholders you fill in locally.

Package
AuthorBackblaze
LicenseMIT
Version0.2.1
Sourcenpm+mcp-registry
Trust Status
A
85/100Trusted
Listed in Forge index+10/10
Identity verified · attested build+20/20
Ed25519 publish signature+0/5
Included automatically when the publisher runs `forge publish`
Domain verification+0/5
Publisher: host /.well-known/forge.json on the package homepage with { "publisher": "<github-login>" }
npm Trusted Publishing (Sigstore)+5/5
npm maintainer match+0/5
Publisher: add the verified GitHub login to the npm package's maintainers (npm owner add <login>)
CVE scan · clean+30/30
Static analysis · clean+20/20
Paste into Claude Code, Cursor, or any AI assistant to fix all gaps
StatusIdentity verified
PublisherUnverified
SignatureUnsigned
Domain
Provenance✓ Sigstore-verified · d3f9e74
Dependencies✓ 49 resolved+ · none vulnerable
Tool surface40 tools · 9 privileged
Security scan✓ Cleanv0.2.1 · todayHow well does this scan work?
EvalsNone
IndexedSep 2, 2026

Verification confirms publisher identity (repo ownership), not code safety. The security scan covers known CVEs and suspicious install scripts.

Tools

40 tools · 9 privileged
Statically extracted from the published packagev0.2.1 · 1h ago

Read out of the source npm actually ships, at scan time. The package was never executed. Tools registered dynamically at runtime, or hidden inside bundled or minified code, can be missed — so this is a floor on the tool surface, not a complete census of it.

b2_list_bucketsList B2 buckets for the authorized account. Optionally filter by bucket ID, name, or type. When the key is bucket-scoped and no bucketId/bucketName filter is supplied, requests are automatically narrowed to the authorized bucket IDs. Returns bucket ID, name, type, CORS rules, and lifecycle rules fo…

List B2 buckets for the authorized account. Optionally filter by bucket ID, name, or type. When the key is bucket-scoped and no bucketId/bucketName filter is supplied, requests are automatically narrowed to the authorized bucket IDs. Returns bucket ID, name, type, CORS rules, and lifecycle rules fo…

No input schema was published for this tool.

b2_create_bucketNo description published

This tool published no description. Forge does not invent one.

b2_delete_bucketprivilegedDelete a B2 bucket. The bucket must be empty — all files and file versions must be deleted first.

Delete a B2 bucket. The bucket must be empty — all files and file versions must be deleted first.

No input schema was published for this tool.

b2_update_bucketUpdate persistent settings on an existing B2 bucket: visibility, metadata, CORS, lifecycle, default encryption, replication, Object Lock, and default retention. Requires the writeBuckets capability. Use b2_list_buckets first to inspect the current bucketId/revision and use ifRevisionIs for safer re…

Update persistent settings on an existing B2 bucket: visibility, metadata, CORS, lifecycle, default encryption, replication, Object Lock, and default retention. Requires the writeBuckets capability. Use b2_list_buckets first to inspect the current bucketId/revision and use ifRevisionIs for safer re…

No input schema was published for this tool.

b2_get_bucket_notification_rulesRead the B2 event-notification webhook rules for a bucket. Use before b2_set_bucket_notification_rules to diff or preserve existing rules, because set replaces the complete rule set. Requires readBucketNotifications or writeBucketNotifications, has no side effects, and redacts webhook URL host/path…

Read the B2 event-notification webhook rules for a bucket. Use before b2_set_bucket_notification_rules to diff or preserve existing rules, because set replaces the complete rule set. Requires readBucketNotifications or writeBucketNotifications, has no side effects, and redacts webhook URL host/path…

No input schema was published for this tool.

b2_set_bucket_notification_rulesReplace the complete B2 event-notification webhook rule set for a bucket. Use b2_get_bucket_notification_rules first and submit the full desired rule set; this is not a patch or append API. Requires writeBucketNotifications and destructive confirmation by policy. Each webhook URL must be a public H…

Replace the complete B2 event-notification webhook rule set for a bucket. Use b2_get_bucket_notification_rules first and submit the full desired rule set; this is not a patch or append API. Requires writeBucketNotifications and destructive confirmation by policy. Each webhook URL must be a public H…

No input schema was published for this tool.

s3_head_bucketCheck whether a B2 bucket exists and is reachable on the S3-compatible endpoint with the current credentials. Use this to validate S3-surface reachability (the native b2_list_buckets confirms existence but not S3 reachability).

Check whether a B2 bucket exists and is reachable on the S3-compatible endpoint with the current credentials. Use this to validate S3-surface reachability (the native b2_list_buckets confirms existence but not S3 reachability).

No input schema was published for this tool.

s3_put_bucket_lifecycleSet S3 lifecycle rules on a B2 bucket; pass rules: [] to clear the S3 lifecycle configuration. Supports AbortIncompleteMultipartUpload, Expiration, and NoncurrentVersionExpiration. B2 does not support Transition/storage-class rules.

Set S3 lifecycle rules on a B2 bucket; pass rules: [] to clear the S3 lifecycle configuration. Supports AbortIncompleteMultipartUpload, Expiration, and NoncurrentVersionExpiration. B2 does not support Transition/storage-class rules.

No input schema was published for this tool.

s3_get_bucket_locationGet the region (location constraint) of a B2 bucket via the S3-compatible API. No native b2_* equivalent — used to verify region/endpoint pairing.

Get the region (location constraint) of a B2 bucket via the S3-compatible API. No native b2_* equivalent — used to verify region/endpoint pairing.

No input schema was published for this tool.

b2_report_usage_growthNo description published

This tool published no description. Forge does not invent one.

b2_rank_egress_leadersRank top egress (downloaded bytes) by account or bucket over a period — default month-to-date. For 'who's downloading the most', 'where is egress concentrated'. Returns leaders with each one's share of total egress, from the daily usage reports. Scope follows the caller's key. Needs Usage Reports e…

Rank top egress (downloaded bytes) by account or bucket over a period — default month-to-date. For 'who's downloading the most', 'where is egress concentrated'. Returns leaders with each one's share of total egress, from the daily usage reports. Scope follows the caller's key. Needs Usage Reports e…

No input schema was published for this tool.

b2_list_largest_filesList a bucket's largest objects by size via a live listing. For 'largest files', 'what's taking up space in <bucket>'. Give the bucket by name or bucketId; optional path prefix. Sorting by size requires a full listing, so on very large buckets the scan is bounded by max_scan and a time budget — it…

List a bucket's largest objects by size via a live listing. For 'largest files', 'what's taking up space in <bucket>'. Give the bucket by name or bucketId; optional path prefix. Sorting by size requires a full listing, so on very large buckets the scan is bounded by max_scan and a time budget — it…

No input schema was published for this tool.

b2_unfinished_uploadsFind abandoned multipart uploads that silently consume storage in a bucket. For 'bucket bloat', 'stuck/incomplete uploads', 'wasted storage'. Returns count, oldest upload age, and wasted bytes. Give the bucket by name or bucketId. Live listing, bounded by max_uploads and an internal time budget — o…

Find abandoned multipart uploads that silently consume storage in a bucket. For 'bucket bloat', 'stuck/incomplete uploads', 'wasted storage'. Returns count, oldest upload age, and wasted bytes. Give the bucket by name or bucketId. Live listing, bounded by max_uploads and an internal time budget — o…

No input schema was published for this tool.

b2_create_keyNo description published

This tool published no description. Forge does not invent one.

b2_list_keysList the application keys associated with the B2 account. Does not return the actual key secrets — only key IDs, names, capabilities, and restrictions.

List the application keys associated with the B2 account. Does not return the actual key secrets — only key IDs, names, capabilities, and restrictions.

No input schema was published for this tool.

b2_delete_keyprivilegedPermanently delete a B2 application key. Use b2_list_keys first to verify applicationKeyId, keyName, capabilities, and dependent systems; use b2_create_key before deletion when rotating credentials. Requires deleteKeys and destructive confirmation by policy. The key secret cannot be recovered, and…

Permanently delete a B2 application key. Use b2_list_keys first to verify applicationKeyId, keyName, capabilities, and dependent systems; use b2_create_key before deletion when rotating credentials. Requires deleteKeys and destructive confirmation by policy. The key secret cannot be recovered, and…

No input schema was published for this tool.

b2_authorize_accountAuthorize with B2 and return account info including accountId, apiUrl, and downloadUrl. The server handles authorization automatically, but this tool is useful for verifying credentials and retrieving account details.

Authorize with B2 and return account info including accountId, apiUrl, and downloadUrl. The server handles authorization automatically, but this tool is useful for verifying credentials and retrieving account details.

No input schema was published for this tool.

s3_create_multipart_uploadprivilegedNo description published

This tool published no description. Forge does not invent one.

s3_get_presigned_upload_part_urlprivilegedNo description published

This tool published no description. Forge does not invent one.

s3_complete_multipart_uploadprivilegedFinalize an S3-compatible multipart upload in B2 by assembling uploaded parts. Use only after s3_create_multipart_upload and s3_get_presigned_upload_part_url (or s3_upload_part_copy) have produced every required part; use s3_list_parts to verify uploaded parts before retrying. Requires writeFiles.…

Finalize an S3-compatible multipart upload in B2 by assembling uploaded parts. Use only after s3_create_multipart_upload and s3_get_presigned_upload_part_url (or s3_upload_part_copy) have produced every required part; use s3_list_parts to verify uploaded parts before retrying. Requires writeFiles.…

No input schema was published for this tool.

s3_abort_multipart_uploadprivilegedAbort an in-progress S3-compatible multipart upload and release all associated storage.

Abort an in-progress S3-compatible multipart upload and release all associated storage.

No input schema was published for this tool.

s3_list_multipart_uploadsList in-progress S3-compatible multipart uploads for a B2 bucket. Use to resume or audit unfinished uploads before s3_get_presigned_upload_part_url, s3_complete_multipart_upload, or s3_abort_multipart_upload; use b2_unfinished_uploads when you need storage-cost analysis across bounded listings. Req…

List in-progress S3-compatible multipart uploads for a B2 bucket. Use to resume or audit unfinished uploads before s3_get_presigned_upload_part_url, s3_complete_multipart_upload, or s3_abort_multipart_upload; use b2_unfinished_uploads when you need storage-cost analysis across bounded listings. Req…

No input schema was published for this tool.

s3_list_partsList the parts that have been uploaded for an in-progress S3-compatible multipart upload.

List the parts that have been uploaded for an in-progress S3-compatible multipart upload.

No input schema was published for this tool.

s3_upload_part_copyprivilegedNo description published

This tool published no description. Forge does not invent one.

b2_update_file_legal_holdSet or clear a legal hold on a specific file version in B2. When a legal hold is active, the file cannot be deleted regardless of retention settings. Requires the writeFileLegalHolds capability on the application key.

Set or clear a legal hold on a specific file version in B2. When a legal hold is active, the file cannot be deleted regardless of retention settings. Requires the writeFileLegalHolds capability on the application key.

No input schema was published for this tool.

b2_update_file_retentionSet or modify the retention policy on a specific file version in B2. Supports governance and compliance retention modes. In compliance mode, the retain-until date can only be extended. Requires the writeFileRetentions capability.

Set or modify the retention policy on a specific file version in B2. Supports governance and compliance retention modes. In compliance mode, the retain-until date can only be extended. Requires the writeFileRetentions capability.

No input schema was published for this tool.

s3_put_objectUpload a SMALL object inline (≤1 MiB) to a B2 bucket — for manifests, sidecars, and tiny configs. Provide base64-encoded content or a local file path. For real object data, generate a PutObject URL with s3_get_presigned_url and upload directly to B2 (bytes never pass through the server), or use the…

Upload a SMALL object inline (≤1 MiB) to a B2 bucket — for manifests, sidecars, and tiny configs. Provide base64-encoded content or a local file path. For real object data, generate a PutObject URL with s3_get_presigned_url and upload directly to B2 (bytes never pass through the server), or use the…

No input schema was published for this tool.

s3_get_objectRead a SMALL object inline (≤1 MiB, returned base64) — for manifests, sidecars, and configs the agent must inspect — or stream any size to a local path with saveToPath. saveToPath writes the fetched bytes to the local filesystem (creating parent directories), removes the partial file if the stream…

Read a SMALL object inline (≤1 MiB, returned base64) — for manifests, sidecars, and configs the agent must inspect — or stream any size to a local path with saveToPath. saveToPath writes the fetched bytes to the local filesystem (creating parent directories), removes the partial file if the stream…

No input schema was published for this tool.

s3_delete_objectprivilegedDelete one B2 object through the S3-compatible API. Use s3_list_object_versions first when you need to target a specific version or delete marker; use s3_delete_objects for batches up to 1000. Requires deleteFiles and destructive confirmation by policy; targeting a specific versionId additionally r…

Delete one B2 object through the S3-compatible API. Use s3_list_object_versions first when you need to target a specific version or delete marker; use s3_delete_objects for batches up to 1000. Requires deleteFiles and destructive confirmation by policy; targeting a specific versionId additionally r…

No input schema was published for this tool.

s3_delete_objectsprivilegedDelete multiple objects from a B2 bucket with bounded SDK concurrency (up to 1000 objects).

Delete multiple objects from a B2 bucket with bounded SDK concurrency (up to 1000 objects).

No input schema was published for this tool.

s3_head_objectGet metadata for a B2 object without downloading it. Returns content type, size, last modified, ETag, and custom metadata.

Get metadata for a B2 object without downloading it. Returns content type, size, last modified, ETag, and custom metadata.

No input schema was published for this tool.

s3_copy_objectCopy an object within B2 or between B2 buckets via B2's S3-compatible CopyObject API. The acl input is retained as a no-op S3 compatibility hint; B2 access follows the destination bucket policy.

Copy an object within B2 or between B2 buckets via B2's S3-compatible CopyObject API. The acl input is retained as a no-op S3 compatibility hint; B2 access follows the destination bucket policy.

No input schema was published for this tool.

s3_list_objects_v2No description published

This tool published no description. Forge does not invent one.

s3_list_object_versionsNo description published

This tool published no description. Forge does not invent one.

b2_list_groupsNo description published

This tool published no description. Forge does not invent one.

b2_create_group_memberNo description published

This tool published no description. Forge does not invent one.

b2_eject_group_memberNo description published

This tool published no description. Forge does not invent one.

b2_list_group_membersNo description published

This tool published no description. Forge does not invent one.

b2_reserve_trial_create_accountNo description published

This tool published no description. Forge does not invent one.

s3_get_presigned_urlNo description published

This tool published no description. Forge does not invent one.

26 of 40 tools published a description.

Tool names and descriptions are written by the publisher and shown verbatim as inert text. They are the strings an MCP client passes to a model, so Forge scans them for prompt-injection patterns — any finding appears with the security scan above. “Privileged” is a keyword match on the tool name, not an audit of what the tool does: a benign-sounding name can still do anything.

About

MCP server for Backblaze B2 with frozen Phase 1 B2 and S3-compatible tool profiles

Keywords
mcpbackblazeb2cloud-storages3ai
Alternatives
Comparing tool surfaces…

Dependency tree

What one Forge scan resolved from npm metadata on 2026-09-05 — observed resolution, not a publisher declaration.

49 packages resolved · 9 direct · none carrying advisories Resolution stops at depth 4 and 60 packages.

The crawl stopped at the depth-4 limit. Anything below that level was never resolved.

25 more resolved packages are not drawn here (display cap: 24). Every dependency carrying an advisory is drawn regardless of the cap. Full inventory (CycloneDX SBOM)

Declared but not resolved

20 declared dependencies never landed in the tree. They are missing from Forge's resolution, not from the package.

+8 more not listed. The counts by reason above cover all of them.

Not followed: peerDependencies. This tree covers runtime dependencies only, so anything those pull in was never resolved.

Topics

Related in cloud platforms