Maskura docs

Maskura is an S3-compatible gateway that runs your WebAssembly plugins over every object in transit. Point any S3 SDK, CLI, or tool at Maskura; each object passes through your plugin pipeline — filter, redact, encrypt, convert, validate, route — and the result is forwarded to any S3-compatible storage backend.

The quickest way to see it working is the README’s 60-second Docker demo: run the published image with AUTH_DISABLED=true, open the demo dashboard, and push a file through the pipeline. This site is the deeper documentation:

• Plugins — write, load, and compose your own Wasm filters.
• Avro gate — the typed Avro OCF processing path.
• Binary adapters — schema-aware binary reductors for typed formats.
• MCP — the local stdio MCP server for agent clients.
• End-to-end suite — the no-secrets local e2e harness.
• Security — the security model, trust boundaries, and deployment responsibilities.
• Architecture Decision Records — the decisions behind the design.