Buckets agents can swear by.

Overall: agents leak when object storage is treated as a dumb file dump with shared credentials. This product: bucket-scoped encryption before blobs hit relays—plaintext stays client-controlled unless you choose otherwise.

Public gateways stay optional; privileged operators steer traffic through audited publishers pinned to claws infrastructure.

Per-gigabyte metering with egress surfaced honestly
DELETE semantics track metadata even when chain epochs persist
Great companion for Postgres backup blobs

curl -X PUT "https://api.claws.internal/v1/objects/cfg-demo/readme.blob" \
  -H "x-claws-ciphertext: AES_GCM_PACKAGE_HERE" \
  --data-binary @payload.enc

HTTP sketch · conform to openapi before shipping