Helper function to extract data from CallToolResult content.

Handle an incoming Lambda request.

Check if the server is running in read-only mode.

Lint WDL or CWL workflow definitions and return validation findings. This tool validates workflow definitions using appropriate linting tools:

Parse Oracle query results with AWR/V$SQL fallback logic.

Reset the credential context using a token from :func:`set_credential_context`. Restores the contextvar to its previous value so the request's cr

Executes a CloudWatch Logs Insights query against trace span records stored in CloudWatch Logs with the OpenTelemetry semantic-convention schema (@dat

Set the credential context for the current request. Intended for use by the identity middleware to populate the per-request context before an

Create or update IAM policy for Aurora access. Maintains one policy per user, adding new clusters as they're created. Args: db_user:

Load and validate usage_data file against schema entities. Args: usage_data_path: Path to usage_data.json file schema

Validate UUID format constraints. Args: value: The UUID string to validate field_name: Name of the field for error messages

Build a mock get_app_monitor response.

Execute a SQL statement against a Redshift cluster in a protected fashion. The SQL is first validated by the read-only guard (single-statement en

Generate a comprehensive analysis report from the structured data. Args: analysis_data: Structured analysis data from _get_run_analysis_d

Set page content via CDP Page.setDocumentContent. AgentCore Chromium enforces Trusted Types, blocking page.set_content() and document.write()

Calculate similarity score between target name and candidate name. Args: target_name: The name the user is looking for candidate_

Create a boto3 client with the appropriate profile and region. The client is configured with a custom user agent suffix 'awslabs/mcp/aws-data

Create sample cluster data for testing. Parameters ---------- cluster_name : str Cluster name status : str Clust

Return a list of mutating keywords found in the SQL. The SQL is comment-normalized first so a comment wedged between the words of a multi-wor

Record an error message (no-op for tests).

Comprehensive Kafka ESM troubleshooting tool for both MSK and self-managed Kafka. This unified tool supports both Amazon MSK and self-managed

Execute a query (no-op).

Create a boto3 S3 Tables client. Args: region_name: Optional AWS region name. If not provided, uses AWS_REGION environment variable

Convert an exception into a structured ErrorResponse. Extracts error code, message, and HTTP status from botocore ClientError. Falls back to

Load an OpenAPI specification from a URL or file path. URL fetches are always DNS-pinned: the spec is retrieved by connecting only to the IP

Manage AWS Glue Data Catalog databases with both read and write operations. This tool provides operations for managing Glue Data Catalog data

Create a context manager that mocks boto3.client with the provided client dictionary. Args: mock_clients: Dictionary map

Run a SQL query against Microsoft SQL Server.

Wrap *data* in a ``{success: true, data: ...}`` envelope.

Invoke get_credits with the billing and STS clients patched.

Build a RedshiftCluster for mocking discover_clusters() return values.

Validate that the SQL is a single permitted statement. Fails closed: oversized input and any parser error are rejected. Args: sql: T

Creates an EC2 jump host instance to access an ElastiCache cluster via SSH tunnel. Args: cache_cluster_id (str): ID of the ElastiCache cl

Creates an EC2 jump host instance to access an ElastiCache serverless cache via SSH tunnel. Args: serverless_cache_name (str): Name of th

Extract details from an exception and return a structured failure. If *error* carries ``status_code`` and ``body`` attributes (e.g. an HttpError)

Filter table rows by matching ALL query words (case-insensitive) across cell values. Handles both flat rows (dict of column→value) and nested row

Handle AWS API errors using boto3's built-in exception information. Leverages boto3's structured error handling as documented at: https://bot

Convert an exception into a structured ErrorResponse. Extracts error code, message, and HTTP status from botocore ClientError. Falls back to

Check if a resource is managed by MCP by looking at Tags and Parameters. This method first checks if the resource has the MCP managed tag.

List workflow runs. Args: ctx: MCP context for error reporting max_results: Maximum number of results to return (default: 10)

Load language configuration from JSON file.

Load configuration from environment variables.

Create a realistic API Gateway proxy event for Lambda.

Create a PymssqlPoolConnection configured for testing.

Save scan state to local storage. Keeps last 50 scans.

Search a Valkey Search index with auto-detected mode. Defaults to hybrid when embeddings are configured, which combines text matching with se

Start a batch translation job with S3 integration. Args: input_config: Configuration for input documents in S3 output

Validate ECR configuration for HealthOmics workflows. Performs a comprehensive validation of the ECR configuration to ensure HealthOmics work

Validate the quality of a translation. This method performs basic validation checks on translation quality, including length ratio an

Return epoch milliseconds for N days ago.

Helper to create a base get_workflow mock response with optional overrides.

Reload compute_optimizer_tools with FastMCP.tool patched to return the original function unchanged (identity decorator). This exposes a callable

Validate input parameters.

Capture an accessibility tree snapshot of the current page. Returns a structured text view of the page with element refs. Use the ref

Complete a Human-in-the-Loop (HITL) task. ⚠️ REQUIRES EXPLICIT USER CONFIRMATION. Before calling this tool you MUST present the full

Check if SQL contains write operations that modify data or schema. This method analyzes SQL queries to detect operations that would modify

Create or retrieve a cached boto3 client with the appropriate profile and region. The client is configured with a custom user agent suffix 'a

Analyze seasonality and extract trend component. Returns: DecompositionResult with seasonality and trend

Helper function to extract data from CallToolResult content.

Format a botocore ClientError into a readable 'Code: Message' string.

Generate DynamoDB entities and repositories from a schema file. Args: schema_path: Path to the schema JSON file output_dir: Outpu

Generate a CDK project from the given JSON file. Args: json_file_path: Path to dynamodb_data_model.json Returns:

Get a database connection from the map.

Get the AWS account ID for the current session. The account ID is cached after the first call to avoid repeated STS calls. Returns:

AWS Client handler with multi-profile support. Args: service_name: AWS service name (e.g., 'logs', 'cloudwatch') region_name: AWS

Get the AWS Timestream for InfluxDB client.

Create a mock for boto3.client that returns specified clients.

Prepare standard tags for a resource. Args: resource_type: The type of resource being created (e.g., 'EMRCluster', 'GlueJob', 'Cr

Scrub sensitive data from a text string. Args: text: The text to scrub Returns: The scrubbed text with sensi

Convert a timestamp to a UTC ISO 8601 formatted string. Handles both epoch seconds (int/float) and datetime objects, as different AWS service

Filter and optimize AWS pricing data for reduced response size. Args: pricing_json_list: List of JSON strings from AWS Pricing API

Validate AWS HealthLake datastore ID format. Requires exactly DATASTORE_ID_LENGTH alphanumeric characters. Used to constrain the value before

Validate a file path before reading. Ensures the path is absolute, resolves symlinks and traversals, and blocks access to sensitive directori

Validate that a Flux query does not contain write-producing operations. When INFLUXDB_WRITE_MODE is disabled (default), this function rejects Flu

Validate string length constraints. Args: value: The string to validate min_length: Minimum allowed length max_length: Ma

Return a UTC calendar date the given number of days from today. Windows for GetCredits are validated against the current date, so tests use o

Parse the EventStream response from invoke('listFiles'). The API returns a streaming response with content blocks. For listFiles, expect 'tex

Adds the search_intent query parameter to the search_url if search_intent is a string. :param search_url: URL to be used for search_documentation

Calculate cost and performance metrics from input data.

Close the pool (no-op).

Connect Playwright to a remote browser via CDP. Uses the bedrock-agentcore SDK to generate SigV4-signed WebSocket headers and the aut

Offload an API response to SQL if it exceeds the size threshold. Auto-derives pagination metadata (`next_page_token`, `has_more`, `pages_fetc

Detect the language of the given text. Args: text: Text to analyze for language detection Returns: LanguageD

Return a list of mutating keywords found in the SQL (excluding comments).

Expand wildcard patterns for service operation targets with pagination support. Args: targets: List of target dictionaries unix_s

Fetch and cache datasets from RODA. Uses the official NDJSON index file which contains all datasets pre-parsed. Thread-safe: uses asyncio.Loc

Get config for the current region.

Get pricing information from AWS Price List API. Args: service_code: The service code (e.g., 'AmazonES' for OpenSearch, 'AmazonS3' for S3

Mock insert_one operation. Args: document: Document to insert Returns: MagicMock: A mock InsertOneResult

Resolve InfluxDB configuration from parameters or environment variables. Caller-supplied connection parameters and server environment credentials

Validate parameter count matches range condition requirements. Args: pattern: AccessPattern object to validate patter

Validate a CloudFormation template using cfn-lint. Args: template_content: CloudFormation template as YAML or JSON string regions

Build common mocks for HealthOmics client, logs, and MCP context. Args: task_count: Number of task events to include. Use 1 for single-ta

Build a billing client mock whose get_credits returns the given list.

Remove SQL comments and string literal contents for security analysis. Parses character-by-character to correctly handle ``--`` and ``/*`` th