Manage saved SQL queries in AWS Athena. This tool provides operations for creating, retrieving, updating, and deleting named queries

Manage AWS EMR EC2 steps for processing data on EMR clusters. This tool provides comprehensive operations for managing EMR steps, which are u

Normalize exceptions to structured error responses. This function ensures that all exceptions are properly normalized to prevent leaking inte

Set a database connection in the map.

Update config for the current region. None values are ignored. Use clear_config_keys() to explicitly remove keys.

Get all S3 bucket paths including configured and validated adhoc buckets. Args: request: Search request containing potential adho

Reload compute_optimizer_tools with FastMCP.tool patched to return the original function unchanged (identity decorator). This exposes a callable

Add documents to a Valkey Search index with optional embedding generation. Stores documents as Valkey hashes. When embedding_field and text_field

Mock implementation of aws_pricing for testing.

Delete a value from the cache. Args: key: Cache key Returns: bool: True if the key was found and deleted, Fa

Detect the type of content input. Detection order: 1. If starts with 's3://' -> S3_URI 2. If path passes security checks and exists on fi

Detect the genomics file type from a file path. Args: file_path: The file path to analyze Returns: GenomicsF

Provides comprehensive diagnostic information for a failed workflow run. This function collects multiple sources of diagnostic information includ

Execute a command and return the result. This is a utility function that handles the execution of CLI commands. It sets up the proper environ

Add correlation ID to log record. Args: record: Log record to modify Returns: True to allow the record to be

Generate all Markdown files and manifest. Returns: Tuple of (list of generated file paths, list of errors) Errors are

Create and return an AWS service client using boto3's default credential chain. Args: service_name: AWS service name (e.g., 'cloudcontrol

Convert an exception into a structured ErrorResponse. Extracts error code, message, and HTTP status from botocore ClientError. Falls back to

Convert an exception into a structured ErrorResponse. Extracts error code, message, and HTTP status from botocore ClientError. Falls back to

Initiate a pull-through cache by calling batch_get_image. When an image is not found in a pull-through cache repository, calling batch_get_im

Perform basic validation of S3 bucket name format. Args: bucket_name: Bucket name to validate Returns: True if bucket name a

List all available terminologies. Args: max_results: Maximum number of terminologies to return (1-500) next_token: To

Manage AWS Athena data catalogs with both read and write operations. This tool provides operations for managing Athena data catalogs, includi

r"""Manage AWS Glue Resource Policies for access control. This tool allows you to retrieve, create, update, and delete AWS Glue Resource Poli

Send a chat message to the AWS Transform assistant and poll for a response. Polls up to 60s for the assistant's reply. On timeout the result incl

Analyzes source database to extract schema and access patterns for DynamoDB modeling. WHEN TO USE: Call this tool when the user selects "Existing

Stop an SAP application registered with AWS Systems Manager for SAP. For HANA applications with associated NetWeaver (SAP_ABAP) applications,

Validate and resolve a file path before writing a download. Prevents path traversal by stripping directory components from *file_name* via os

Get a fresh securityagent boto3 client.

Compile wildcard pattern once for reuse. Args: pattern: Wildcard pattern with * for any characters Returns: Compiled regex p

Create a sample pull-through cache rule response object.

Format query result data as Markdown table. Args: data: List of row dictionaries Returns: Markdown table str

Check if text matches pre-compiled wildcard pattern. Args: text: Text to test compiled_pattern: Pre-compiled regex pattern from _

Raise an error requesting user confirmation for write operations.

Async wrapper around the sync Logs Insights poll loop. Wrapping in ``asyncio.to_thread`` keeps the event loop free while the blocking boto3 c

Register an MCP tool with automatic audit logging. Usage: audited_tool(mcp, 'create_job')(self.create_job)

Builds and pushes a Docker image to ECR. Args: app_path: Path to the application directory containing the Dockerfile reposit

Create a new custom terminology. Args: name: Terminology name (must be unique) description: Terminology description

Detect the type of README input. Detection rules (in order): 1. If starts with 's3://' -> S3_URI 2. If path exists and ends with '.md' ->

Task-level diagnostics for ECS task failures. Parameters ---------- cluster_name : str The name of the ECS Cluster time_

Format a result dictionary with status and message. This utility function creates a standardized response format used by all the MCP tools. I

Formats a single usage item object from the list_workload_estimate_usage API response. Args: usage_item: Single usage item object from AW

Generate a detailed, downloadable health report for SAP systems managed by SSM for SAP. Produces a comprehensive Markdown-formatted report co

Generate infrastructure code for security scanning before resource creation or update.

Generate a startup script based on runtime and entry point. This script starts up your web server so that beings listening for requests. Args:

Get or create the GLIDE client singleton (thread-safe via asyncio.Lock).

Get enablement guide for AWS Application Signals. Use this tool when the user wants to: - Enable observability, monitoring, or Application Si

Get the results of a completed CloudTrail Lake query with pagination support. This tool retrieves the results of a previously executed CloudT

Convert an exception into a structured ``ErrorResponse``. Args: operation: Friendly name of the API operation that failed. error:

Make a SigV4-signed request to the CloudWatch PromQL API. Args: endpoint: API endpoint path (e.g., 'query', 'query_range', 'label

Create a mock for boto3.client that returns specified clients.

Open the connection pool asynchronously. Args: wait: Whether to wait for connections to be established timeout: Timeo

Auto-paginate a FES list call, collecting all items. Args: operation: FES operation name. body: Request body (not mutated).

Handle pagination for AWS API calls. Args: ctx: The MCP context object operation_name: Name of the operation (for logging)

Recommend field indexes for a specific CloudWatch log group. Analyzes the last 30 days of completed Logs Insights queries (CWLI, SQL, PPL), i

Request explicit user consent before executing a mutating operation. Raises ValueError if the user rejects or the client doesn't support elicitat

Run a SQL query against Oracle Database.

Start a cloud browser session via Amazon Bedrock AgentCore. Creates an isolated browser session running in a Firecracker microVM. Ret

Start a workflow run. Args: ctx: MCP context for error reporting workflow_id: ID of the workflow to run role_arn: ARN of

Calculate seasonal strength and extract deseasonalized data for trend. Returns: Tuple of (strength, deseasonalized_values) where

Filter out uninstrumented and aws native services. Args: all_services: List of service summaries from list_services API Returns:

Extract the element ref for a given role and name from snapshot text. Args: snapshot_text: Accessibility tree text from browser_snapshot.

Async wrapper: returns (log_group, platform).

Extract the parsed JSON payload from an MCP result envelope.

Process FHIR Bundle response and extract pagination information. ``pagination.next_token`` is the opaque ``page`` value extracted fro

Reload bvs_tools with FastMCP.tool patched to return the original function. This exposes callable tool functions we can invoke directly to cover

Analyze S3 bucket usage patterns for data processing services (Glue, EMR, Athena). This tool helps identify which buckets are actively used b

HEALTH AUDIT TOOL - Detect anomalies and unhealthy services in a group. Use this tool when users ask: - "Is the Payment application healthy?"

Build partition key for lookups

Build sort key for lookups

Check if IAM Access Analyzer is enabled in the specified region. Args: region: AWS region to check session: boto3 Session for AWS

Convert Unix epoch timestamp to human-readable format. This tool provides accurate timestamp conversion to prevent AI agents from making conv

Create standardized error response.

Create a new metadata transfer job for bulk import/export operations between S3 and IoT SiteWise. This tool provides a user-friendly way to set u

Validate SQL for Aurora DSQL compatibility and optionally auto-fix issues. Args: sql: SQL string to validate ctx: MCP context for

Enrich a single HITL task with a concrete response template.

Mock MCP ctx.error with the given message. Args: message: The error message

Log an error and return it with a snapshot of the current page. If page is None (e.g. get_page() itself failed) or the snapshot capture fails

Comprehensive ESM optimization tool combining analysis, validation, and template generation. This consolidated tool provides three main optim

Execute a query (no-op).

Generate mapping for all access patterns in an entity. Args: entity_name: Name of the entity entity_config: Entity co

Fetch job status — concise assistant summary by default, full snapshot when detailed.

Get detailed information about a terminology. Args: name: Terminology name terminology_data_format: Format for return

Determine if an image is from ECR.

List the billing views available for a given time period. Every AWS account has a unique PRIMARY billing view that represents the billing dat

Manage AWS Glue Security Configurations for data encryption. This tool allows you to create, retrieve, and delete AWS Glue Security Configura

Remove scatter/iteration suffixes from task name. Normalizes task names by removing workflow-specific scatter/iteration suffixes to g

Parse an S3 path into bucket name and prefix. Args: s3_path: S3 path (e.g., 's3://bucket-name/prefix/') Returns: Tuple of (b

Resolve a bundle input to a dictionary of {relative_path: text_content}. Handles dict passthrough (backward compatible), local directories, l

The implementation of the search_table tool.

Set up logging configuration based on server config.

Validate max results parameter.

A best effort check that makes sure that the format of a patch document is valid before sending it to CloudControl.

Validate that provider_type is a supported value. Args: ctx: MCP context for error reporting provider_type: The provider type to

Validate S3 URI format and return parsed bucket and key. Extracted from content_resolver._validate_s3_uri_format to be shared across modules.

Validate a URL for safe server-side fetching of OpenAPI specs. Performs DNS resolution and IP validation to prevent SSRF attacks. By default,

Create a mock RepositoryPolicyNotFoundException for testing.