AI accessAvailable on Stream Vessel Cloud

Give your AI a door, not a key.

A hosted MCP server for your buckets. Scoped, expiring tokens. Every call logged. No access keys in any config file.

Create a token Works with Claude Code, Cursor, VS Code and any MCP client.

The problem

A generic S3 MCP server wants your access key and secret in mcp.json. Full access to every bucket, no expiry, no log, and revoking it means rotating the key for everyone.

How it works

Token, connect kit, work.

Create a token

Choose READ, WRITE or FULL, and an expiry: 30 days, 90 days, a year, or a date you pick.

Copy the connect kit

A Claude Code command, an mcp.json block, or a Cursor or VS Code deep link.

Let the agent work

It lists, searches, reads, writes, copies, moves and deletes, within its tier. You watch the audit log.

In Stream Vessel Cloud

One page: tokens, connect kit, audit.

A newly created MCP token with the connect kit: server URL, Claude Code command, Add to Cursor and Add to VS Code

# Claude Code
claude mcp add stream-vessel \
  --transport http https://app.streamvessel.com/mcp \
  --header "Authorization: Bearer svmt_…"

// mcp.json · Cursor, VS Code, any client
{
  "mcpServers": {
    "stream-vessel": {
      "url": "https://app.streamvessel.com/mcp",
      "headers": { "Authorization": "Bearer svmt_…" }
    }
  }
}

16 tools

Everything the explorer can do, as tools.

Discover

list_connections
list_buckets
list_objects
find_objects
stat_prefix

Read

read_object
get_object_metadata
create_download_link

Write

write_object
set_object_metadata
create_upload_link
copy_object
move_object

Delete

delete_object
delete_objects
delete_prefix

Safety

Built to be revoked.

Tokens expire on the schedule you set. 30 or 90 days, a year, or a date you pick. Expired tokens stop working on their own.
Revoke any time from the token list. The key underneath never moves.
Audit log of every tool call, and rate limits.
A scoped connection bounds the token. Expose one s3://bucket/prefix/ and that is all the agent can reach.
Shared connections included. A token works on a connection shared with you, at the lower of the token's tier and the share's level.

Coming soon

Tighter scopes, more clients.

Restrict a token to chosen connections, buckets and prefixes
Remote connectors with OAuth for hosted AI clients
MCP on self-hosted

Your buckets, your AI, your rules.

Create a token About Stream Vessel Cloud