MCP server for Backblaze B2 with frozen Phase 1 B2 and S3-compatible tool profiles
Inferred from the transports this listing declares (stdio). A client not listed here hasn’t been ruled out — it just isn’t something Forge can confirm.
B2_APPLICATION_KEY_IDAPI keyrequiredBackblaze B2 application key ID for native B2 and S3-compatible tools.
B2_APPLICATION_KEYAPI keyrequiredBackblaze B2 application key secret.
B2_MASTER_KEY_IDAPI keyoptionalOptional master key ID for Partner/Groups API tools.
B2_MASTER_KEYAPI keyoptionalOptional master key secret for Partner/Groups API tools.
Declared by the author in the official MCP registry. Forge does not store, broker, or ever see these values — the config below is scaffolded with placeholders you fill in locally.
Verification confirms publisher identity (repo ownership), not code safety. The security scan covers known CVEs and suspicious install scripts.
Read out of the source npm actually ships, at scan time. The package was never executed. Tools registered dynamically at runtime, or hidden inside bundled or minified code, can be missed — so this is a floor on the tool surface, not a complete census of it.
b2_list_bucketsList B2 buckets for the authorized account. Optionally filter by bucket ID, name, or type. When the key is bucket-scoped and no bucketId/bucketName filter is supplied, requests are automatically narrowed to the authorized bucket IDs. Returns bucket ID, name, type, CORS rules, and lifecycle rules fo…List B2 buckets for the authorized account. Optionally filter by bucket ID, name, or type. When the key is bucket-scoped and no bucketId/bucketName filter is supplied, requests are automatically narrowed to the authorized bucket IDs. Returns bucket ID, name, type, CORS rules, and lifecycle rules fo…
No input schema was published for this tool.
b2_create_bucketNo description publishedThis tool published no description. Forge does not invent one.
b2_delete_bucketprivilegedDelete a B2 bucket. The bucket must be empty — all files and file versions must be deleted first.Delete a B2 bucket. The bucket must be empty — all files and file versions must be deleted first.
No input schema was published for this tool.
b2_update_bucketUpdate persistent settings on an existing B2 bucket: visibility, metadata, CORS, lifecycle, default encryption, replication, Object Lock, and default retention. Requires the writeBuckets capability. Use b2_list_buckets first to inspect the current bucketId/revision and use ifRevisionIs for safer re…Update persistent settings on an existing B2 bucket: visibility, metadata, CORS, lifecycle, default encryption, replication, Object Lock, and default retention. Requires the writeBuckets capability. Use b2_list_buckets first to inspect the current bucketId/revision and use ifRevisionIs for safer re…
No input schema was published for this tool.
b2_get_bucket_notification_rulesRead the B2 event-notification webhook rules for a bucket. Use before b2_set_bucket_notification_rules to diff or preserve existing rules, because set replaces the complete rule set. Requires readBucketNotifications or writeBucketNotifications, has no side effects, and redacts webhook URL host/path…Read the B2 event-notification webhook rules for a bucket. Use before b2_set_bucket_notification_rules to diff or preserve existing rules, because set replaces the complete rule set. Requires readBucketNotifications or writeBucketNotifications, has no side effects, and redacts webhook URL host/path…
No input schema was published for this tool.
b2_set_bucket_notification_rulesReplace the complete B2 event-notification webhook rule set for a bucket. Use b2_get_bucket_notification_rules first and submit the full desired rule set; this is not a patch or append API. Requires writeBucketNotifications and destructive confirmation by policy. Each webhook URL must be a public H…Replace the complete B2 event-notification webhook rule set for a bucket. Use b2_get_bucket_notification_rules first and submit the full desired rule set; this is not a patch or append API. Requires writeBucketNotifications and destructive confirmation by policy. Each webhook URL must be a public H…
No input schema was published for this tool.
s3_head_bucketCheck whether a B2 bucket exists and is reachable on the S3-compatible endpoint with the current credentials. Use this to validate S3-surface reachability (the native b2_list_buckets confirms existence but not S3 reachability).Check whether a B2 bucket exists and is reachable on the S3-compatible endpoint with the current credentials. Use this to validate S3-surface reachability (the native b2_list_buckets confirms existence but not S3 reachability).
No input schema was published for this tool.
s3_put_bucket_lifecycleSet S3 lifecycle rules on a B2 bucket; pass rules: [] to clear the S3 lifecycle configuration. Supports AbortIncompleteMultipartUpload, Expiration, and NoncurrentVersionExpiration. B2 does not support Transition/storage-class rules.Set S3 lifecycle rules on a B2 bucket; pass rules: [] to clear the S3 lifecycle configuration. Supports AbortIncompleteMultipartUpload, Expiration, and NoncurrentVersionExpiration. B2 does not support Transition/storage-class rules.
No input schema was published for this tool.
s3_get_bucket_locationGet the region (location constraint) of a B2 bucket via the S3-compatible API. No native b2_* equivalent — used to verify region/endpoint pairing.Get the region (location constraint) of a B2 bucket via the S3-compatible API. No native b2_* equivalent — used to verify region/endpoint pairing.
No input schema was published for this tool.
b2_report_usage_growthNo description publishedThis tool published no description. Forge does not invent one.
b2_rank_egress_leadersRank top egress (downloaded bytes) by account or bucket over a period — default month-to-date. For 'who's downloading the most', 'where is egress concentrated'. Returns leaders with each one's share of total egress, from the daily usage reports. Scope follows the caller's key. Needs Usage Reports e…Rank top egress (downloaded bytes) by account or bucket over a period — default month-to-date. For 'who's downloading the most', 'where is egress concentrated'. Returns leaders with each one's share of total egress, from the daily usage reports. Scope follows the caller's key. Needs Usage Reports e…
No input schema was published for this tool.
b2_list_largest_filesList a bucket's largest objects by size via a live listing. For 'largest files', 'what's taking up space in <bucket>'. Give the bucket by name or bucketId; optional path prefix. Sorting by size requires a full listing, so on very large buckets the scan is bounded by max_scan and a time budget — it…List a bucket's largest objects by size via a live listing. For 'largest files', 'what's taking up space in <bucket>'. Give the bucket by name or bucketId; optional path prefix. Sorting by size requires a full listing, so on very large buckets the scan is bounded by max_scan and a time budget — it…
No input schema was published for this tool.
b2_unfinished_uploadsFind abandoned multipart uploads that silently consume storage in a bucket. For 'bucket bloat', 'stuck/incomplete uploads', 'wasted storage'. Returns count, oldest upload age, and wasted bytes. Give the bucket by name or bucketId. Live listing, bounded by max_uploads and an internal time budget — o…Find abandoned multipart uploads that silently consume storage in a bucket. For 'bucket bloat', 'stuck/incomplete uploads', 'wasted storage'. Returns count, oldest upload age, and wasted bytes. Give the bucket by name or bucketId. Live listing, bounded by max_uploads and an internal time budget — o…
No input schema was published for this tool.
b2_create_keyNo description publishedThis tool published no description. Forge does not invent one.
b2_list_keysList the application keys associated with the B2 account. Does not return the actual key secrets — only key IDs, names, capabilities, and restrictions.List the application keys associated with the B2 account. Does not return the actual key secrets — only key IDs, names, capabilities, and restrictions.
No input schema was published for this tool.
b2_delete_keyprivilegedPermanently delete a B2 application key. Use b2_list_keys first to verify applicationKeyId, keyName, capabilities, and dependent systems; use b2_create_key before deletion when rotating credentials. Requires deleteKeys and destructive confirmation by policy. The key secret cannot be recovered, and…Permanently delete a B2 application key. Use b2_list_keys first to verify applicationKeyId, keyName, capabilities, and dependent systems; use b2_create_key before deletion when rotating credentials. Requires deleteKeys and destructive confirmation by policy. The key secret cannot be recovered, and…
No input schema was published for this tool.
b2_authorize_accountAuthorize with B2 and return account info including accountId, apiUrl, and downloadUrl. The server handles authorization automatically, but this tool is useful for verifying credentials and retrieving account details.Authorize with B2 and return account info including accountId, apiUrl, and downloadUrl. The server handles authorization automatically, but this tool is useful for verifying credentials and retrieving account details.
No input schema was published for this tool.
s3_create_multipart_uploadprivilegedNo description publishedThis tool published no description. Forge does not invent one.
s3_get_presigned_upload_part_urlprivilegedNo description publishedThis tool published no description. Forge does not invent one.
s3_complete_multipart_uploadprivilegedFinalize an S3-compatible multipart upload in B2 by assembling uploaded parts. Use only after s3_create_multipart_upload and s3_get_presigned_upload_part_url (or s3_upload_part_copy) have produced every required part; use s3_list_parts to verify uploaded parts before retrying. Requires writeFiles.…Finalize an S3-compatible multipart upload in B2 by assembling uploaded parts. Use only after s3_create_multipart_upload and s3_get_presigned_upload_part_url (or s3_upload_part_copy) have produced every required part; use s3_list_parts to verify uploaded parts before retrying. Requires writeFiles.…
No input schema was published for this tool.
s3_abort_multipart_uploadprivilegedAbort an in-progress S3-compatible multipart upload and release all associated storage.Abort an in-progress S3-compatible multipart upload and release all associated storage.
No input schema was published for this tool.
s3_list_multipart_uploadsList in-progress S3-compatible multipart uploads for a B2 bucket. Use to resume or audit unfinished uploads before s3_get_presigned_upload_part_url, s3_complete_multipart_upload, or s3_abort_multipart_upload; use b2_unfinished_uploads when you need storage-cost analysis across bounded listings. Req…List in-progress S3-compatible multipart uploads for a B2 bucket. Use to resume or audit unfinished uploads before s3_get_presigned_upload_part_url, s3_complete_multipart_upload, or s3_abort_multipart_upload; use b2_unfinished_uploads when you need storage-cost analysis across bounded listings. Req…
No input schema was published for this tool.
s3_list_partsList the parts that have been uploaded for an in-progress S3-compatible multipart upload.List the parts that have been uploaded for an in-progress S3-compatible multipart upload.
No input schema was published for this tool.
s3_upload_part_copyprivilegedNo description publishedThis tool published no description. Forge does not invent one.
b2_update_file_legal_holdSet or clear a legal hold on a specific file version in B2. When a legal hold is active, the file cannot be deleted regardless of retention settings. Requires the writeFileLegalHolds capability on the application key.Set or clear a legal hold on a specific file version in B2. When a legal hold is active, the file cannot be deleted regardless of retention settings. Requires the writeFileLegalHolds capability on the application key.
No input schema was published for this tool.
b2_update_file_retentionSet or modify the retention policy on a specific file version in B2. Supports governance and compliance retention modes. In compliance mode, the retain-until date can only be extended. Requires the writeFileRetentions capability.Set or modify the retention policy on a specific file version in B2. Supports governance and compliance retention modes. In compliance mode, the retain-until date can only be extended. Requires the writeFileRetentions capability.
No input schema was published for this tool.
s3_put_objectUpload a SMALL object inline (≤1 MiB) to a B2 bucket — for manifests, sidecars, and tiny configs. Provide base64-encoded content or a local file path. For real object data, generate a PutObject URL with s3_get_presigned_url and upload directly to B2 (bytes never pass through the server), or use the…Upload a SMALL object inline (≤1 MiB) to a B2 bucket — for manifests, sidecars, and tiny configs. Provide base64-encoded content or a local file path. For real object data, generate a PutObject URL with s3_get_presigned_url and upload directly to B2 (bytes never pass through the server), or use the…
No input schema was published for this tool.
s3_get_objectRead a SMALL object inline (≤1 MiB, returned base64) — for manifests, sidecars, and configs the agent must inspect — or stream any size to a local path with saveToPath. saveToPath writes the fetched bytes to the local filesystem (creating parent directories), removes the partial file if the stream…Read a SMALL object inline (≤1 MiB, returned base64) — for manifests, sidecars, and configs the agent must inspect — or stream any size to a local path with saveToPath. saveToPath writes the fetched bytes to the local filesystem (creating parent directories), removes the partial file if the stream…
No input schema was published for this tool.
s3_delete_objectprivilegedDelete one B2 object through the S3-compatible API. Use s3_list_object_versions first when you need to target a specific version or delete marker; use s3_delete_objects for batches up to 1000. Requires deleteFiles and destructive confirmation by policy; targeting a specific versionId additionally r…Delete one B2 object through the S3-compatible API. Use s3_list_object_versions first when you need to target a specific version or delete marker; use s3_delete_objects for batches up to 1000. Requires deleteFiles and destructive confirmation by policy; targeting a specific versionId additionally r…
No input schema was published for this tool.
s3_delete_objectsprivilegedDelete multiple objects from a B2 bucket with bounded SDK concurrency (up to 1000 objects).Delete multiple objects from a B2 bucket with bounded SDK concurrency (up to 1000 objects).
No input schema was published for this tool.
s3_head_objectGet metadata for a B2 object without downloading it. Returns content type, size, last modified, ETag, and custom metadata.Get metadata for a B2 object without downloading it. Returns content type, size, last modified, ETag, and custom metadata.
No input schema was published for this tool.
s3_copy_objectCopy an object within B2 or between B2 buckets via B2's S3-compatible CopyObject API. The acl input is retained as a no-op S3 compatibility hint; B2 access follows the destination bucket policy.Copy an object within B2 or between B2 buckets via B2's S3-compatible CopyObject API. The acl input is retained as a no-op S3 compatibility hint; B2 access follows the destination bucket policy.
No input schema was published for this tool.
s3_list_objects_v2No description publishedThis tool published no description. Forge does not invent one.
s3_list_object_versionsNo description publishedThis tool published no description. Forge does not invent one.
b2_list_groupsNo description publishedThis tool published no description. Forge does not invent one.
b2_create_group_memberNo description publishedThis tool published no description. Forge does not invent one.
b2_eject_group_memberNo description publishedThis tool published no description. Forge does not invent one.
b2_list_group_membersNo description publishedThis tool published no description. Forge does not invent one.
b2_reserve_trial_create_accountNo description publishedThis tool published no description. Forge does not invent one.
s3_get_presigned_urlNo description publishedThis tool published no description. Forge does not invent one.
26 of 40 tools published a description.
Tool names and descriptions are written by the publisher and shown verbatim as inert text. They are the strings an MCP client passes to a model, so Forge scans them for prompt-injection patterns — any finding appears with the security scan above. “Privileged” is a keyword match on the tool name, not an audit of what the tool does: a benign-sounding name can still do anything.
MCP server for Backblaze B2 with frozen Phase 1 B2 and S3-compatible tool profiles
Linked names open Forge’s index of every entry observed exposing that tool. Browse all indexed tools.
The crawl stopped at the depth-4 limit. Anything below that level was never resolved.
25 more resolved packages are not drawn here (display cap: 24). Every dependency carrying an advisory is drawn regardless of the cap. Full inventory (CycloneDX SBOM)
20 declared dependencies never landed in the tree. They are missing from Forge's resolution, not from the package.
+8 more not listed. The counts by reason above cover all of them.
Not followed: peerDependencies. This tree covers runtime dependencies only, so anything those pull in was never resolved.