How to enable
Go to Settings → Capabilities and enable Cloud storage. Enter an AWS region (e.g.us-east-1) or a full https:// endpoint URL for other S3-compatible providers, link a workspace secret with your access key ID and secret access key, and optionally set a default bucket. If no default bucket is set, the agent includes a bucket name on every call.
Example use cases
- Archive attachments — “When you receive an email with a PDF attached, upload it to the
invoices/prefix in our S3 bucket” - Scheduled exports — “Every Monday, put a CSV of last week’s signups into the
reports/folder in R2” - Read reference data — “Fetch
config/pricing.jsonfrom the bucket and summarize the current tier structure” - Cross-bucket cleanup — “List objects under
tmp/older than 30 days and delete them” - Cross-tool workflows — “Download the latest export from the bucket, summarize it, and post the highlights to Slack”
What the agent can do
| Tool | What it does |
|---|---|
| List objects | Browse a bucket or a prefix, with pagination for large listings |
| Get object metadata | Inspect size, content type, and headers without downloading the body |
| Download object | Read an object’s contents into the conversation |
| Upload object | Write a new object or overwrite an existing one |
| Delete object | Remove an object from the bucket |
To keep responses manageable, downloads are limited to about 5 MiB per object and uploads to about 10 MiB per object. For larger files, use tools outside the agent or split the work into smaller pieces.
How to connect a provider
Create access keys
In your provider’s console, create an access key ID and secret access key scoped to the buckets you want the agent to use. Grant only the permissions you need (e.g. read-only, or read-write on a specific bucket).
- AWS S3 — IAM user or role with an S3 policy
- Cloudflare R2 — R2 API Token (S3 compatibility)
- Google Cloud Storage — HMAC key for a service account
- MinIO / Backblaze B2 / other — provider-specific access key and secret
Note the region or endpoint
For AWS S3, note the region (e.g.
us-east-1, eu-west-1). For other providers, copy the full https:// endpoint URL from the provider’s dashboard.Learn more
Google Drive
Store and share files in Google Drive from the agent.
SharePoint
Access Microsoft SharePoint files and libraries.