{
  "manifest_version": "1.0.0",
  "template": {
    "id": "2b0652f7-feec-4db9-b6eb-8312b0581611",
    "slug": "aws-s3-mcp",
    "name": "AWS S3 MCP",
    "description": "Deploy and Host AWS S3 MCP with Railway",
    "url": "https://railway.com/deploy/aws-s3-mcp",
    "upstream": {
      "repo_url": "https://github.com/FournyP/aws-s3-mcp-railway-template"
    }
  },
  "status": "unvalidated",
  "validated_at": null,
  "success_rate_30d": null,
  "services": [
    {
      "name": "AWS S3 MCP Gateway",
      "source": {
        "repo": "https://github.com/FournyP/aws-s3-mcp-railway-template"
      },
      "needs_volume": false,
      "http": true
    },
    {
      "name": "AWS S3 MCP",
      "source": {
        "repo": "https://github.com/FournyP/aws-s3-mcp-railway-template"
      },
      "needs_volume": false,
      "http": false
    }
  ],
  "required_inputs": [
    {
      "key": "PORT",
      "service": "AWS S3 MCP Gateway",
      "description": "Port nginx listens on. Must match the domain's target port.",
      "secret": false,
      "strategy": "default",
      "default": "80"
    },
    {
      "key": "API_KEYS",
      "service": "AWS S3 MCP Gateway",
      "description": "Comma-separated list of bearer tokens allowed to call the MCP. Allowed characters per key: A-Z a-z 0-9 . _ ~ + / = -",
      "secret": true,
      "strategy": "generate",
      "generate": "random_base64_32"
    },
    {
      "key": "MCP_HOST",
      "service": "AWS S3 MCP Gateway",
      "description": "Hostname of the MCP service on Railway's private network. Only override if you rename the MCP service.",
      "secret": false,
      "strategy": "railway_provided",
      "railway_source": "railway_private_domain"
    },
    {
      "key": "MCP_PORT",
      "service": "AWS S3 MCP Gateway",
      "description": "Port the MCP service listens on. Must match PORT on the MCP service.",
      "secret": false,
      "strategy": "railway_provided",
      "railway_source": "reference_variable"
    },
    {
      "key": "PATH_KEY_AUTH",
      "service": "AWS S3 MCP Gateway",
      "description": "true also accepts the key as a path segment (/k/<key>/mcp) for MCP clients that cannot send an Authorization header.",
      "secret": true,
      "strategy": "default",
      "default": "false"
    },
    {
      "key": "PORT",
      "service": "AWS S3 MCP",
      "description": "Port the MCP server binds to. Fixed at 3000 to match MCP_PORT on the gateway.",
      "secret": false,
      "strategy": "default",
      "default": "3000"
    },
    {
      "key": "S3_BUCKETS",
      "service": "AWS S3 MCP",
      "description": "Comma-separated allowlist of bucket names the MCP is permitted to touch. For Railway's built-in bucket, reference the bucket's AWS_S3_BUCKET_NAME. If empty, no buckets are exposed.",
      "secret": false,
      "strategy": "ask_user"
    },
    {
      "key": "S3_MAX_BUCKETS",
      "service": "AWS S3 MCP",
      "description": "Maximum number of buckets the list-buckets tool returns.",
      "secret": false,
      "strategy": "default",
      "default": "5"
    },
    {
      "key": "AWS_ACCESS_KEY_ID",
      "service": "AWS S3 MCP",
      "description": "Access key for your S3-compatible storage. For Railway's built-in bucket, reference the bucket's 'AWS_ACCESS_KEY_ID'.",
      "secret": true,
      "strategy": "generate",
      "generate": "random_base64_32"
    },
    {
      "key": "AWS_SECRET_ACCESS_KEY",
      "service": "AWS S3 MCP",
      "description": "Secret for your S3-compatible storage. For Railway's built-in bucket, reference the bucket's AWS_SECRET_ACCESS_KEY. For real AWS, use an IAM user scoped to read-only on the target buckets.",
      "secret": true,
      "strategy": "generate",
      "generate": "random_base64_32"
    }
  ],
  "deploy": {
    "mcp": {
      "server": "railway",
      "tool": "deploy_template",
      "args": {
        "template_code": "aws-s3-mcp"
      }
    },
    "cli": "railway deploy --template aws-s3-mcp",
    "api": {
      "method": "POST",
      "path": "/graphql/v2",
      "body": {
        "query": "mutation templateDeploy($input: TemplateDeployV2Input!) { templateDeployV2(input: $input) { projectId workflowId } }",
        "variables": {
          "input": {
            "templateId": "2b0652f7-feec-4db9-b6eb-8312b0581611",
            "serializedConfig": {
              "buckets": {},
              "services": {
                "99109982-4547-434d-8982-7bc25b00be11": {
                  "icon": "https://cdn.simpleicons.org/nginx",
                  "name": "AWS S3 MCP Gateway",
                  "deploy": {
                    "startCommand": null,
                    "healthcheckPath": "/health",
                    "restartPolicyType": "ON_FAILURE",
                    "restartPolicyMaxRetries": 10
                  },
                  "source": {
                    "repo": "https://github.com/FournyP/aws-s3-mcp-railway-template",
                    "rootDirectory": "/gateway"
                  },
                  "variables": {
                    "PORT": {
                      "isOptional": true,
                      "description": "Port nginx listens on. Must match the domain's target port.",
                      "defaultValue": "80"
                    },
                    "API_KEYS": {
                      "isOptional": false,
                      "description": "Comma-separated list of bearer tokens allowed to call the MCP. Allowed characters per key: A-Z a-z 0-9 . _ ~ + / = -",
                      "defaultValue": "{{API_KEYS}}"
                    },
                    "MCP_HOST": {
                      "isOptional": false,
                      "description": "Hostname of the MCP service on Railway's private network. Only override if you rename the MCP service.",
                      "defaultValue": "${{AWS S3 MCP.RAILWAY_PRIVATE_DOMAIN}}"
                    },
                    "MCP_PORT": {
                      "isOptional": false,
                      "description": "Port the MCP service listens on. Must match PORT on the MCP service.",
                      "defaultValue": "${{AWS S3 MCP.PORT}}"
                    },
                    "PATH_KEY_AUTH": {
                      "isOptional": true,
                      "description": "true also accepts the key as a path segment (/k/<key>/mcp) for MCP clients that cannot send an Authorization header.",
                      "defaultValue": "false"
                    }
                  },
                  "networking": {
                    "serviceDomains": {
                      "<hasDomain>": {}
                    }
                  }
                },
                "d6031097-89c7-4022-857d-f78b40937f7c": {
                  "icon": "https://api.iconify.design/simple-icons:modelcontextprotocol.svg",
                  "name": "AWS S3 MCP",
                  "deploy": {
                    "startCommand": null,
                    "healthcheckPath": "",
                    "restartPolicyType": "ON_FAILURE",
                    "restartPolicyMaxRetries": 10
                  },
                  "source": {
                    "repo": "https://github.com/FournyP/aws-s3-mcp-railway-template",
                    "rootDirectory": "/mcp"
                  },
                  "variables": {
                    "PORT": {
                      "isOptional": true,
                      "description": "Port the MCP server binds to. Fixed at 3000 to match MCP_PORT on the gateway.",
                      "defaultValue": "3000"
                    },
                    "AWS_REGION": {
                      "isOptional": true,
                      "description": "Region of the target buckets. auto for a Railway Bucket (reference its AWS_DEFAULT_REGION), an AWS region such as us-east-1 otherwise.",
                      "defaultValue": ""
                    },
                    "S3_BUCKETS": {
                      "isOptional": false,
                      "description": "Comma-separated allowlist of bucket names the MCP is permitted to touch. For Railway's built-in bucket, reference the bucket's AWS_S3_BUCKET_NAME. If empty, no buckets are exposed.",
                      "defaultValue": "{{S3_BUCKETS}}"
                    },
                    "AWS_ENDPOINT": {
                      "isOptional": true,
                      "description": "S3 endpoint URL for non-AWS storage. For a Railway Bucket, reference its AWS_ENDPOINT_URL. Leave empty for real AWS.",
                      "defaultValue": ""
                    },
                    "S3_MAX_BUCKETS": {
                      "isOptional": true,
                      "description": "Maximum number of buckets the list-buckets tool returns.",
                      "defaultValue": "5"
                    },
                    "AWS_ACCESS_KEY_ID": {
                      "isOptional": false,
                      "description": "Access key for your S3-compatible storage. For Railway's built-in bucket, reference the bucket's 'AWS_ACCESS_KEY_ID'.",
                      "defaultValue": "{{AWS_ACCESS_KEY_ID}}"
                    },
                    "AWS_SECRET_ACCESS_KEY": {
                      "isOptional": false,
                      "description": "Secret for your S3-compatible storage. For Railway's built-in bucket, reference the bucket's AWS_SECRET_ACCESS_KEY. For real AWS, use an IAM user scoped to read-only on the target buckets.",
                      "defaultValue": "{{AWS_SECRET_ACCESS_KEY}}"
                    }
                  }
                }
              }
            }
          }
        }
      }
    }
  },
  "post_deploy": {
    "healthcheck": {
      "service": "AWS S3 MCP Gateway",
      "method": "GET",
      "path": "/health",
      "expect_status": 200
    }
  },
  "resources": {
    "expected_services": 2,
    "needs_volume": false
  },
  "generated_at": "2026-09-20T16:14:49.616Z",
  "generator_version": "0.1.0"
}