Maskura docs

Maskura is an S3-compatible gateway that runs your WebAssembly plugins over every object in transit. Point any S3 SDK, CLI, or tool at Maskura; each object passes through your plugin pipeline — filter, redact, encrypt, convert, validate, route — and the result is forwarded to any S3-compatible storage backend.

The quickest way to see it working is the README’s Docker quickstart: run the published Maskura image with AUTH_DISABLED=true and a durable local volume, open the demo dashboard, and push a file through Maskura’s own S3-compatible API. No MinIO service is involved in this path. This site is the deeper documentation:

• Plugins — write, load, and compose your own Wasm filters.
• MinIO-compatible Docker image — run Maskura as a zero-config drop-in replacement for docker run minio/minio.
• Run the claims — black-box S3, plugin, and Python encryption proofs with explicit assertions and limits.
• Avro gate — the typed Avro OCF processing path.
• Lance format — the columnar ML table adapter, in development (ADR 0026, ahead of Parquet).
• Binary adapters — schema-aware binary reductors for typed formats.
• MCP — the local stdio MCP server for agent clients.
• End-to-end suite — the no-secrets local e2e harness.
• Security — the security model, trust boundaries, and deployment responsibilities.
• Architecture Decision Records — the decisions behind the design.