MCP Endpoints for Object Store

Endpoints are used to query the S3 Object store related information from MCP server.

Access Control

Super users (such as mapr, and root) are considered as prohibhited session users.

A session user must be any user other than root and mapr user with least previliges (to view/list buckets or objects).

Authenticated users will have access to Objects and Buckets, based on the session user settings configured in the conf file. MCP server allows read-only access to files and objects.

Configuration

Set enabled to true for S3 service to enable in MCP Service. For Access control, add user with least privilege access using which only can view buckets and objects:
s3 {
## Enables the MCP interface for Data Fabric Object-store
## Refer to Data Fabric documentation for additional configuration steps
enabled = true

## S3 user with the least privileges to access buckets using MCP protocol
##
session-user = "<user with least privilege>"

## MCP server will regenerate temporary s3keys for this duration
key-expiry-mins = 60
}

Endpoint URL

For S3:
https://<FQDN>:5679/s3