# How do I connect DecisionPen MCP to an S3 document repository?

> Canonical: https://decisionpen.com/docs/mcp-s3-document-store  
> GitHub wiki: https://github.com/DecisionPen/decisionpen-mcp/blob/main/SYNC.md

## Summary

You can allowlist an S3 prefix so agents can list sources, search documents, fetch files, propose enrichment, and run sync. DecisionPen does not store customer AWS keys on this edge push path. Proposals and sync results go to Inbox for human review. Setup needs an Edge token, `DP_S3_BUCKET` and `DP_S3_PREFIX`, prefix-scoped IAM, a dry-run, then MCP or cron.

## FAQ

**Are AWS keys stored in DecisionPen?**  
Not on this edge path.

**Does get_document update the Confirmed map?**  
No. Listing or fetching a file does not change the trusted map.