how-to-guide

How Multica Handles File Storage with S3 and CloudFront Signed URLs

April 11, 2026 multica-ai/multica ↗

Multica stores binary attachments in Amazon S3 and serves them through CloudFront using RSA-signed URLs and cookies, enforcing per-user access without exposing the bucket publicly.

The multica-ai/multica repository implements a secure file storage layer that combines S3 durability with CloudFront edge delivery. Instead of generating presigned S3 URLs, the system uses CloudFront signed URLs and signed cookies to control access, leveraging private RSA keys stored in AWS Secrets Manager or environment variables.

S3 Storage Architecture

Mult

Have a question about this repo?

These articles cover the highlights, but your codebase questions are specific. Give your agent direct access to the source. Share this with your agent to get started:

Share the following with your agent to get started:

curl -s "https://instagit.com/install.md"

Add to your MCP client configuration:

{
  "mcpServers": {
    "instagit": {
      "command": "npx",
      "args": ["-y", "instagit@latest"]
    }
  }
}

Ask your agent:

"Use Instagit MCP to understand how multica-ai/multica works."

Works with

Claude Codex Cursor VS Code OpenClaw Any MCP Client

Maintain an open-source project? Get it listed too →