• ACCESS
  • SAFETY
  • ACTION
  • HUMAN

How to audit bucket permissions with your AI

Connect Wasabi to your AI client to scan for loose permissions and fix versioning gaps.

Ask AI about this page

Short answer

Can my AI check my Wasabi bucket permissions?

Yes. Your AI can pull access control lists for specific objects and check if versioning is active on your buckets. You'll get a clear view of who can touch your files and how to protect them.

Audit outcomes

Security visibility

What you get after the AI scans your storage.

ACCESS

Permission visibility

The AI pulls specific access control data for your objects. You'll see exactly which users or groups can read or write files.

SAFETY

Versioning status

Your agent checks if versioning is enabled on your buckets. This tells you if you have a safety net against accidental deletions.

ACTION

Versioning enforcement

If a bucket is unprotected, the AI can turn versioning on. This ensures your data history is preserved.

HUMAN

Manual policy review

The AI identifies risky settings, but you decide which permission changes to implement. It flags the issues so you can make the final call.

The workflow

What your AI does when the request arrives.

The AI uses direct Wasabi commands to inspect your storage setup.

  1. Inspect object access

    The AI looks at the specific permissions assigned to a file to see who can access it.

    get_object_access_control

  2. Check versioning status

    The agent scans your bucket to see if versioning is currently active.

    get_bucket_versioning_status

  3. Enable versioning

    If versioning is off, the AI can turn it on to prevent data loss from overwrites.

    enable_bucket_versioning

  4. Report findings

    The AI summarizes the permission gaps and versioning status into a readable report.

    get_bucket_versioning_status

Try it

Copy these to start.

Use these prompts to kick off an audit.

Starting points

Replace the bucket and object names with your actual Wasabi identifiers.

Wasabi Connector

You're all set. Choose your MCP client and follow the setup instructions.

Connector linkhttps://edge.vinkius.com/vk_preview_V1Hjef8Ai0tGUVU2o51pGeh56RG2FMQyrBPdlT7Z/mcp

Claude Desktop

Follow the steps below to connect in seconds.

  1. 1In Claude Desktop, open Settings → Connectors.
  2. 2Click “Add custom connector” and paste the connector link above as the remote MCP server URL.
  3. 3Click Add and start a new chat — Wasabi capabilities are ready to use.
Configuration · claude_desktop_config.jsonCopy
{
  "mcpServers": {
    "wasabi-mcp": {
      "url": "https://edge.vinkius.com/vk_preview_V1Hjef8Ai0tGUVU2o51pGeh56RG2FMQyrBPdlT7Z/mcp"
    }
  }
}
Copy into chat04

  • Check the access control settings for the object 'logs/daily_report.csv' in my 'production-data' bucket.

  • Is versioning enabled on my 'user-uploads' bucket?

  • Audit the permissions for all objects in the 'backup-archive' bucket and tell me if any are public.

  • Enable versioning on my 'critical-assets' bucket if it isn't already on.

  • Claude
  • ChatGPT
  • Cursor
  • VS Code
  • Windsurf
  • Claude Code
  • JetBrains
  • Cline

Start here

Connect Wasabi once, then ask.

You only need to link your Wasabi credentials once. After that, your AI handles the heavy lifting of scanning and checking settings.

Connect Wasabi to your AI

FAQ

How this task behaves

  • 01

    Can the AI change my bucket policies?

    No. The AI can only check existing permissions or enable versioning. It cannot modify complex bucket policies or ACLs directly.

  • 02

    Will the AI delete any of my files?

    No. The tools provided only allow for reading permissions and managing versioning status. The AI has no capability to delete objects.

  • 03

    How does the AI know which bucket to check?

    You tell the AI the specific bucket name in your prompt, and it uses that name to run the check.

  • 04

    Can I use this to fix public buckets?

    The AI can identify if an object has public access, but you must manually update the policy to close those permissions.

  • 05

    Does the AI handle my Wasabi keys?

    No. Your credentials are encrypted and managed by Vinkius. Your AI client uses them to perform the requested actions through the MCP.

  • More questions about Wasabi? The Connector page answers them. See everything the Wasabi Connector can do

Connect Wasabi to Claude, Cursor, ChatGPT & more