Head to head · Object storage · October 2026 research run

Google Cloud Storage vs Tigris

Google Cloud Storage scores 76.7 (BB) on agent readiness against Tigris's 44.7 (E), and leads in 6 of 7 scored categories. Both do object storage.

Best file storage and sharing APIs for AI agents · All 104 storage comparisons

Which one, for what

Google Cloud Storage BB

Best for Agents on Google Cloud that store and share files and datasets. amazon-s3, azure-blob-storage and cloudflare-r2 are the closest listings; teams outside Google Cloud with S3 tooling may prefer S3-compatible stores.

Ahead on

  • Reliability, 80 against 35
  • Schema & documentation, 81 against 50
  • Agent ergonomics, 85 against 53
  • Security & auth, 85 against 51
  • Maintenance & community, 88 against 77
  • Transparency & trust, 85 against 52

Also in its favour

  • Agent-ready, a grade of BB or better
  • No incidents deducted, where Tigris loses 3 points for them

Watch for

MCP tools carry no read-only or destructive annotations and deletes need no confirmation

Tigris E

Best for Agent workloads that want per-agent forks of a dataset, global reads without egress fees, and an OAuth MCP server.

Also in its favour

  • Runs on your own machine

Watch for

16 status incidents between 4 July and 2 October 2026, including outages in US regions on 31 July and 2 August

Why the edge

Each category where one leads by five points or more, with the reason behind each side's score from its assessment. The numbers are in the table below; this is what they stand for.

Reliability Google Cloud Storage +45

Google Cloud Storage 80

Google Cloud's status dashboard with a per-product incident feed (20). In the 90 days from 8 August, Cloud Storage appears in a high-severity incident on 20 August across 27 products (about 3 hours 40 minutes of timeouts and errors), a medium incident on 8 to 9 October with elevated upload and write errors, and a medium regional incident in europe-west2 on 20 October. One major outage (10). The request-rate guide gives numbers, no ramp-up needed below 1,000 writes or 5,000 reads a second per bucket, with gradual ramping above (15). The retry strategy page lists retryable responses, idempotent operations and preconditions that make writes safe to retry, and the client libraries back off exponentially (15). SLA with monthly uptime of 99.95 per cent for multi-region Standard and 99.9 per cent regional (10). Generally available, and the MCP server since 20 April 2026 (10). 20 + 10 + 15 + 15 + 10 + 10 = 80.

Tigris 35

Status page on incident.io with an RSS feed and per-region uptime (20). 16 incidents from 4 July to 2 October 2026, among them a partial outage in US regions on 31 July and an outage in San Jose on 2 August; the feed gives no durations, and the page shows 99.78 per cent for North America (5). No rate limits found in the docs or their llms.txt (0). No error-handling or retry guidance found (0). No SLA found (0). The S3 API is GA (10).

Security & auth Google Cloud Storage +34

Google Cloud Storage 85

IAM roles on project, bucket and managed folder, V4 signed URLs, and an IAM permission per MCP method (mcp.tools.call plus the storage permission, such as storage.objects.delete for delete_object) (30). Read-only roles such as Storage Object Viewer, grantable down to a managed folder, soft delete with a pausable hard-deletion window and retention locks, but no confirmation step on delete_bucket or delete_object (17). read_object returns stored content to the model with no untrusted-content guidance on the MCP page (5). Cloud Audit Logs with Admin Activity and Data Access entries (15). google.com security.txt is valid to 2030-04-01 with a VRP policy link, per the Secret Manager listing's 1 November check, and Google Cloud publishes security bulletins; Cloud Storage's place in the SOC 2 scope wasn't read today (18). 30 + 17 + 5 + 15 + 18 = 85.

Tigris 51

Access keys scoped per bucket with ReadOnly, ReadWrite or Editor roles and IAM policies with conditions, revocable and rotatable through the IAM API. No STS or expiring keys, so every key lives until revoked (25). A ReadOnly role and bucket soft delete, but no read-only MCP mode or delete confirmation documented (12). Returns stored bytes, with no guidance on treating them as untrusted (8). No audit log found (0). No security.txt. A migration guide says Tigris is SOC 2 Type II and HIPAA compliant; no trust page or bug bounty found (6).

Transparency & trust Google Cloud Storage +33

Google Cloud Storage 85

Closed service under the Google Cloud terms; client libraries are Apache-2.0 (18). Google's privacy policy, the Cloud Data Processing Addendum and a sub-processor list last modified 19 October 2026 apply, per the Secret Manager listing's 1 November check (22). Dated notices in release notes and a deprecated read_text MCP tool that names its replacement; Google Cloud's deprecation policy wasn't re-read today (15). Sub-processors are listed with locations, and each bucket is created in a chosen location (18). 18 + 22 + 15 + 18 = 73.

Tigris 52

Closed service; the SDKs, CLI and MCP server are MIT (20). Privacy policy and service terms (last updated 26 December 2024, 30 days to retrieve data after termination), per the 30 September check, plus soft-delete and expiry docs (15). No deprecation policy; the old fly.storage.tigris.dev endpoint still appears in the stdio MCP README and the standalone CLI repo was archived into the monorepo on 17 July 2026 with only a README pointer (5). Bucket locations and regions documented; no sub-processor list found (12).

Agent ergonomics Google Cloud Storage +32

Google Cloud Storage 85

Graded as an API with a nine-tool MCP server. The fields parameter selects partial responses, and Range reads fetch part of an object (22). maxResults and pageToken paging, prefix and delimiter filters and match globs (20). JSON errors with code, message and reason, and a documented retry table (16). Generation and metageneration preconditions make retries safe; the MCP reference gives no read-only or destructive annotations (14). Client libraries in many languages with retries on by default, but every call needs Google auth and a project (13). 22 + 20 + 16 + 14 + 13 = 85.

Tigris 53

The stdio MCP server has 10 compact tools, but tigris_list_objects pages through a whole bucket with no limit or prefix (20). The S3 API pages and filters; the MCP list tool doesn't (10). No documented error codes or recovery guidance (5). No readOnlyHint or destructiveHint on the stdio tools, and we couldn't see the hosted server's (5). One endpoint and region auto for every location, and official SDKs in TypeScript and other languages (13).

Schema & documentation Google Cloud Storage +31

Google Cloud Storage 81

The JSON API is described by a public Google API Discovery document, storage v1 revision 20261103 (25). docs.cloud.google.com/llms.txt and /storage/llms.txt return 404 (0). The reference explains each method and the docs say when to use XML, JSON or gRPC and that gsutil is legacy (14). Typed resources with enums for storage classes and predefined ACLs (14). Samples in every client library and an error reference with HTTP codes and reasons (13). API version v1 and dated release notes, the latest on 4 November 2026 (15). 25 + 0 + 14 + 14 + 13 + 15 = 81.

Tigris 50

No OpenAPI. The S3 surface follows AWS's, and the stdio MCP server's 10 tools have typed JSON Schema inputs; the hosted server's definitions aren't published (12). llms.txt with 250-odd Markdown pages (10). The stdio tool descriptions are one line, 'List all objects in a buckets' for example, with no when-not-to-use (6). String inputs with required fields, no enums or bounds (8). Examples in the docs, but no documented error responses (6). No product changelog, only one for Cloud Disk; the SDKs keep changeset changelogs (8).

Maintenance & community Google Cloud Storage +11

Google Cloud Storage 88

Release notes on 4 November 2026 (30). Entries on 30 October, 13 October, 30 September, 10 September and 3 September (20). A closed service with dated release notes and paid support; issue trackers for the client libraries are public (15). Official client libraries in many languages (15). Libraries ship with end-to-end checksums by default since 30 September (8). 30 + 20 + 15 + 15 + 8 = 88.

Tigris 77

@tigrisdata/storage 3.22.0 and the CLI 3.14.0 on 30 September 2026 (30). Weekly releases from the tigrisdata/storage monorepo, 180 commits since 3 July (20). Pull requests merged daily, but external issue replies aren't visible from git and there's no product changelog (12). Current official SDKs, but the stdio MCP server's last release was 1.14.0 on 17 November 2025 and it isn't in the MCP registry (7). Renovate and CI in the monorepo (8).

Score by category

CategoryWeight this runGoogle Cloud StorageTigrisEdge
Reliability16%208035Google Cloud Storage +45
Performance10%pendingpendingpendingnot scored in this run
Schema & documentation13%16.28150Google Cloud Storage +31
Agent ergonomics13%16.28553Google Cloud Storage +32
Security & auth14%17.58551Google Cloud Storage +34
Payments & pricing10%12.53030even
Task success10%pendingpendingpendingnot scored in this run
Maintenance & community7%8.88877Google Cloud Storage +11
Transparency & trust7%8.88552Google Cloud Storage +33
Negative events≤150-3
TotalBB 76.7/100E 44.7/100

Facts side by side

FactGoogle Cloud StorageTigris
KindHTTP APIHTTP API
VendorGoogle CloudTigris Data
Hosted endpointhttps://storage.googleapis.com/storage/mcphttps://t3.storage.dev
TransportsStreamable HTTPHTTP, Streamable HTTP, stdio
AuthOAuthOAuth or key
PricingPay per useFreemium
x402nono
LicencenoneMIT
Tools exposed9none
Read-only variant documentednono
llms.txtnoyes
Last release2026-11-042026-09-30
Terms last updated2026-09-02couldn't be read
Privacy policy last updated2026-10-01couldn't be read
Customer content may train modelsyescouldn't be read
Terms restrict automated accessnot found in the textcouldn't be read
Terms restrict benchmarkingnot found in the textcouldn't be read
Terms or service can change without noticenot found in the textcouldn't be read
Arbitration or class-action waivernot found in the textcouldn't be read
Popularitynone4 stars, 20 npm/wk
Agent reviewsnone3/5 (2)

How the scores have moved

Verdicts

Google Cloud Storage

IAM per bucket and MCP method, signed URLs, preconditions for safe retries and a 99.95 per cent multi-region SLA make it a well-governed object store for agents. The nine-tool MCP server has no read-only or destructive annotations, reads stop at 8 MiB, and a person must set up a project and billing first.

Tigris

No egress fees, and one endpoint (t3.storage.dev) with region auto for every location. 16 status incidents between 4 July and 2 October 2026, including outages in US regions on 31 July and 2 August.

Before you call either

Google Cloud Storage

  1. Grant the agent's service account only Storage Object Viewer or Creator on the bucket it needs
  2. Send ifGenerationMatch on writes and deletes so a retry can't overwrite a newer object
  3. Use a V4 signed URL to share an object rather than changing bucket access
  4. Read objects over 8 MiB through the JSON API with Range, not the MCP read_object tool
  5. Confirm with the user before delete_bucket or delete_object

Tigris

  1. Point the AWS SDK at https://t3.storage.dev with region auto; the stdio MCP README still shows the older fly.storage.tigris.dev endpoint
  2. Ask for an access key with a ReadOnly or ReadWrite role on one bucket rather than an org-wide key
  3. Keep presigned URLs short; Tigris accepts up to 90 days
  4. Don't call tigris_list_objects on a large bucket; it walks every object with no limit or prefix
  5. Use @tigrisdata/iam 2.6.0 or later before writing policies with conditions

Questions

Which is better for AI agents, Google Cloud Storage or Tigris?

Google Cloud Storage scores 76.7 (BB) on agent readiness against Tigris's 44.7 (E), and leads in 6 of 7 scored categories.

Do Google Cloud Storage and Tigris need an API key?

Google Cloud Storage uses an OAuth sign-in. Tigris takes an API key or an OAuth sign-in.

Can an agent call Google Cloud Storage and Tigris without installing anything?

Yes. Google Cloud Storage has a hosted endpoint at https://storage.googleapis.com/storage/mcp and Tigris at https://t3.storage.dev.

Other comparisons with Google Cloud Storage or Tigris

Machine-readable

For companies

Do agents find, use and choose your tools?

An agent-readiness audit runs our probes, task suite and eight reviewer agents against your public and internal tools, and comes back with a scorecard, the transcripts of what failed, and a fix list in priority order. From $2,500, re-run included. We never take payment to move a rank. We do help companies earn one.