use any cloud. keep control of your data.

get started in five steps

from a new account to a known object read through OneBucket™, with nothing copied first.

use it as s3. or talk to it over mcp.

OneBucket™ speaks the s3 api with aws sigv4 auth, so any client or sdk works with one endpoint change. the same keys work with the aws cli, boto3 and the aws sdks in any language, s3cmd, rclone and most s3-compatible tools. s3.onebucket.io is global and routes each request to your nearest region.

aws configure set aws_access_key_id <ACCESS_KEY>
aws configure set aws_secret_access_key <SECRET_KEY>
export OB=https://s3.onebucket.io

aws --endpoint-url $OB s3 ls s3://my-first-bucket/
aws --endpoint-url $OB s3 cp s3://my-first-bucket/hello.txt -

import boto3

s3 = boto3.client(
    "s3",
    endpoint_url="https://s3.onebucket.io",
    aws_access_key_id="<ACCESS_KEY>",
    aws_secret_access_key="<SECRET_KEY>",
    region_name="us-east-1",
)

obj = s3.get_object(Bucket="my-first-bucket", Key="hello.txt")
print(obj["Body"].read().decode())

no company data needed to start

your security team will ask why data should flow through a new service. start with a bucket of public data, or ask us for a starter backend across clouds, and give them these answers while you try it.

• it holds no data itself. objects live in your buckets. a cache is a peer bucket you configure, holding copies you chose to allow.
• your bucket credentials stay with the endpoint. applications and agents authenticate with a core key, inside the limits its policy sets. the backend's keys are never exposed to clients.
• every call is audited. list, fetch and tail every operation over the events mcp server, or in the console.
• standard auth. aws sigv4 for s3. oauth 2.1 with pkce for mcp, and you can revoke a client from the console at any time.
• you choose the region. use the global endpoint, or pin requests to us-ashburn-1, us-sanjose-1 or ap-singapore-1. live clusters and status.
• the paperwork. terms of service, privacy policy, and status.onebucket.io.

open source

an open-source sdk that transforms data in the data path, launched with Datum, our development compute partner. all of it is on github. early development partners get early access with Datum, first come, first served.

development partners early access to run the sdk on Datum is open to a limited number of development partners, first come, first served. apply for early access