# NEXUS AI Storage

NEXUS AI exposes two storage models through its authenticated API: persistent volumes and object-storage buckets.

## Persistent volumes

Volume operations include listing, creating, attaching, detaching, and refreshing usage. Volume routes require the appropriate organization permission.

## Object-storage buckets

Bucket operations include listing, creating, attaching, detaching, refreshing usage, rotating credentials, listing files, uploading files, creating download URLs, downloading files, and deleting files.

Each bucket uses a scoped service account. Bucket attachments inject S3-compatible variables such as `S3_ENDPOINT`, `S3_BUCKET`, `S3_ACCESS_KEY`, `S3_SECRET_KEY`, and `S3_REGION` on the next deployment.

## Safety

Storage credentials, signed URLs, and uploaded data are sensitive. Agents should use the narrowest available permission, avoid logging credentials, and require explicit authorization before deleting volumes, buckets, or files.

## Related resources

- [Security](/docs/security.md)
- [API](/docs/api.md)
- [MCP](/docs/mcp.md)