@apteva/integrations 0.3.62 → 0.15.4

package/src/apps/aws-s3.json

@@ -1,141 +1,99 @@
 {
   "slug": "aws-s3",
   "name": "AWS S3",
-  "description": "MCP server for AWS S3 - buckets, objects, presigned URLs",
+  "description": "Amazon Simple Storage Service \u2014 object storage. Bucket-scoped REST endpoints with AWS SigV4 request signing. Use put_object/get_object/list_objects/delete_object from any app needing durable cloud storage (backup, media, etc.).",
   "logo": "https://www.google.com/s2/favicons?domain=aws.amazon.com&sz=128",
   "categories": [
-    "aws",
-    "s3",
     "storage",
-    "objects",
-    "buckets"
+    "aws",
+    "cloud",
+    "infrastructure"
   ],
-  "base_url": "https://s3.{region}.amazonaws.com",
+  "base_url": "https://s3.{{region}}.amazonaws.com",
   "auth": {
     "types": [
-      "bearer"
+      "aws_sigv4"
     ],
-    "headers": {
-      "Authorization": "Bearer {{token}}"
+    "aws_sigv4": {
+      "service": "s3"
     },
     "credential_fields": [
       {
         "name": "access_key_id",
-        "label": "Access_key_id",
-        "description": "Your AWS Access Key ID"
+        "label": "AWS Access Key ID",
+        "description": "IAM access key with s3:GetObject / s3:PutObject / s3:DeleteObject / s3:ListBucket on the buckets the app will use.",
+        "required": true,
+        "type": "text"
       },
       {
         "name": "secret_access_key",
-        "label": "Secret_access_key",
-        "description": "Your AWS Secret Access Key"
+        "label": "AWS Secret Access Key",
+        "required": true,
+        "type": "password"
       },
       {
         "name": "region",
-        "label": "Region",
-        "description": "AWS Region (e.g., us-east-1)"
+        "label": "AWS Region",
+        "description": "Region the bucket lives in (e.g. us-east-1, eu-west-1). Bucket-region mismatch produces a 301 redirect rather than a 4xx, so getting this right matters.",
+        "required": true,
+        "type": "text"
       },
       {
         "name": "session_token",
-        "label": "Session_token",
-        "description": "Temporary session token (for temporary credentials)"
+        "label": "AWS Session Token",
+        "description": "Only required when using temporary credentials issued by STS (assume-role, federated identities). Leave blank for long-lived IAM user keys.",
+        "required": false,
+        "type": "password"
       }
     ]
   },
   "tools": [
-    {
-      "name": "list_buckets",
-      "description": "List all S3 buckets",
-      "method": "GET",
-      "path": "/list-buckets",
-      "input_schema": {
-        "type": "object",
-        "properties": {
-          "aws_region": {
-            "type": "string"
-          }
-        }
-      }
-    },
-    {
-      "name": "create_bucket",
-      "description": "Create an S3 bucket",
-      "method": "POST",
-      "path": "/create-bucket",
-      "input_schema": {
-        "type": "object",
-        "properties": {
-          "bucket": {
-            "type": "string"
-          },
-          "acl": {
-            "type": "string"
-          },
-          "aws_region": {
-            "type": "string"
-          }
-        },
-        "required": [
-          "bucket"
-        ]
-      }
-    },
-    {
-      "name": "delete_bucket",
-      "description": "Delete an S3 bucket",
-      "method": "DELETE",
-      "path": "/delete-bucket",
-      "input_schema": {
-        "type": "object",
-        "properties": {
-          "bucket": {
-            "type": "string"
-          },
-          "aws_region": {
-            "type": "string"
-          }
-        },
-        "required": [
-          "bucket"
-        ]
-      }
-    },
     {
       "name": "list_objects",
-      "description": "List objects in a bucket",
+      "description": "List objects in a bucket (S3 ListObjectsV2). Returns XML the caller parses; key fields are Contents[].Key, Contents[].Size, Contents[].LastModified, IsTruncated, NextContinuationToken.",
       "method": "GET",
-      "path": "/list-objects",
+      "path": "/{bucket}",
       "input_schema": {
         "type": "object",
         "properties": {
           "bucket": {
-            "type": "string"
+            "type": "string",
+            "description": "Bucket name."
           },
           "prefix": {
-            "type": "string"
+            "type": "string",
+            "description": "Filter to keys starting with this prefix."
           },
-          "delimiter": {
-            "type": "string"
+          "continuation-token": {
+            "type": "string",
+            "description": "Pagination cursor from a prior IsTruncated response."
           },
-          "max_keys": {
-            "type": "number"
+          "max-keys": {
+            "type": "integer",
+            "description": "Page size (max 1000)."
           },
-          "continuation_token": {
-            "type": "string"
-          },
-          "aws_region": {
-            "type": "string"
+          "list-type": {
+            "type": "integer",
+            "description": "Use 2 for ListObjectsV2 (recommended).",
+            "default": 2
           }
         },
         "required": [
           "bucket"
         ]
-      }
+      },
+      "query_params": [
+        "prefix",
+        "continuation-token",
+        "max-keys",
+        "list-type"
+      ]
     },
     {
-      "name": "get_object",
-      "description": "Get an object from S3",
-      "method": "GET",
-      "path": "/get-object",
+      "name": "put_object",
+      "description": "Upload an object. The request body is the object content verbatim; pass it as the 'body' input. Inputs are signed (SigV4) and the body is hashed for integrity.",
+      "method": "PUT",
+      "path": "/{bucket}/{key}",
       "input_schema": {
         "type": "object",
         "properties": {
@@ -143,29 +101,27 @@
             "type": "string"
           },
           "key": {
-            "type": "string"
+            "type": "string",
+            "description": "Object key (path inside the bucket)."
           },
-          "version_id": {
-            "type": "string"
-          },
-          "return_body": {
-            "type": "boolean"
-          },
-          "aws_region": {
-            "type": "string"
+          "body": {
+            "type": "string",
+            "description": "Object content. Bytes welcome \u2014 the runner sends them verbatim."
           }
         },
         "required": [
           "bucket",
-          "key"
+          "key",
+          "body"
         ]
-      }
+      },
+      "body_input": "body"
     },
     {
-      "name": "put_object",
-      "description": "Upload an object to S3",
+      "name": "get_object",
+      "description": "Download an object. Response body is the raw object bytes.",
       "method": "GET",
-      "path": "/put-object",
+      "path": "/{bucket}/{key}",
       "input_schema": {
         "type": "object",
         "properties": {
@@ -174,21 +130,6 @@
           },
           "key": {
             "type": "string"
-          },
-          "body": {
-            "type": "string"
-          },
-          "content_type": {
-            "type": "string"
-          },
-          "metadata": {
-            "type": "object"
-          },
-          "acl": {
-            "type": "string"
-          },
-          "aws_region": {
-            "type": "string"
           }
         },
         "required": [
@@ -199,9 +140,9 @@
     },
     {
       "name": "delete_object",
-      "description": "Delete an object from S3",
+      "description": "Delete a single object. Returns 204 No Content on success.",
       "method": "DELETE",
-      "path": "/delete-object",
+      "path": "/{bucket}/{key}",
       "input_schema": {
         "type": "object",
         "properties": {
@@ -210,12 +151,6 @@
           },
           "key": {
             "type": "string"
-          },
-          "version_id": {
-            "type": "string"
-          },
-          "aws_region": {
-            "type": "string"
           }
         },
         "required": [
@@ -225,95 +160,76 @@
       }
     },
     {
-      "name": "copy_object",
-      "description": "Copy an object within S3",
+      "name": "list_buckets",
+      "description": "List all buckets owned by the authenticated account. Returns XML; ListAllMyBucketsResult.Buckets.Bucket[] has the names + creation dates.",
       "method": "GET",
-      "path": "/copy-object",
+      "path": "/",
+      "input_schema": {
+        "type": "object",
+        "properties": {}
+      }
+    },
+    {
+      "name": "create_bucket",
+      "description": "Create an S3 bucket. The body field carries the optional CreateBucketConfiguration XML — leave it empty for us-east-1 (the default region for the API), and pass `<CreateBucketConfiguration xmlns=\"http://s3.amazonaws.com/doc/2006-03-01/\"><LocationConstraint>REGION</LocationConstraint></CreateBucketConfiguration>` for any other region. Bucket names are globally unique, 3–63 chars, lowercase + DNS-safe. Returns 200 with empty body on success; 409 BucketAlreadyOwnedByYou is the idempotent-success case (treat as ok).",
+      "method": "PUT",
+      "path": "/{bucket}",
       "input_schema": {
         "type": "object",
         "properties": {
-          "source_bucket": {
-            "type": "string"
-          },
-          "source_key": {
-            "type": "string"
-          },
-          "destination_bucket": {
-            "type": "string"
-          },
-          "destination_key": {
-            "type": "string"
+          "bucket": {
+            "type": "string",
+            "description": "Bucket name. Must be globally unique, lowercase, 3–63 DNS-safe chars."
           },
-          "aws_region": {
-            "type": "string"
+          "body": {
+            "type": "string",
+            "description": "CreateBucketConfiguration XML for non-us-east-1 regions, or empty string for us-east-1."
           }
         },
-        "required": [
-          "source_bucket",
-          "source_key",
-          "destination_bucket",
-          "destination_key"
-        ]
-      }
+        "required": ["bucket"]
+      },
+      "body_input": "body"
     },
     {
-      "name": "get_presigned_url",
-      "description": "Generate a presigned URL",
-      "method": "GET",
-      "path": "/get-presigned-url",
+      "name": "put_bucket_policy",
+      "description": "Attach (or replace) the bucket policy. Body is the policy as a JSON string — pass it via the `policy` input. Used to grant external AWS services (e.g. ses.amazonaws.com s3:PutObject) write access to the bucket. Returns 204 on success.",
+      "method": "PUT",
+      "path": "/{bucket}?policy",
       "input_schema": {
         "type": "object",
         "properties": {
           "bucket": {
             "type": "string"
           },
-          "key": {
-            "type": "string"
-          },
-          "operation": {
-            "type": "string"
-          },
-          "expires_in": {
-            "type": "number"
-          },
-          "content_type": {
-            "type": "string"
-          },
-          "aws_region": {
-            "type": "string"
+          "policy": {
+            "type": "string",
+            "description": "Bucket policy as a JSON string. Example for SES inbound: {\"Version\":\"2012-10-17\",\"Statement\":[{\"Sid\":\"AllowSESPuts\",\"Effect\":\"Allow\",\"Principal\":{\"Service\":\"ses.amazonaws.com\"},\"Action\":\"s3:PutObject\",\"Resource\":\"arn:aws:s3:::BUCKET/*\",\"Condition\":{\"StringEquals\":{\"AWS:SourceAccount\":\"ACCOUNT_ID\"}}}]}"
           }
         },
-        "required": [
-          "bucket",
-          "key"
-        ]
-      }
+        "required": ["bucket", "policy"]
+      },
+      "body_input": "policy"
     },
     {
-      "name": "set_bucket_policy",
-      "description": "Get, set, or delete bucket policy",
+      "name": "get_bucket_policy",
+      "description": "Fetch the current bucket policy as a JSON string. Useful for idempotent bootstrap — read first, decide whether to upsert. Returns 404 NoSuchBucketPolicy when no policy is attached.",
       "method": "GET",
-      "path": "/set-bucket-policy",
+      "path": "/{bucket}?policy",
       "input_schema": {
         "type": "object",
         "properties": {
           "bucket": {
             "type": "string"
-          },
-          "policy": {
-            "type": "object"
-          },
-          "action": {
-            "type": "string"
-          },
-          "aws_region": {
-            "type": "string"
           }
         },
-        "required": [
-          "bucket"
-        ]
+        "required": ["bucket"]
       }
     }
-  ]
-}
+  ],
+  "health_check": {
+    "tool": "list_buckets",
+    "auth_ok_when_body_contains": [
+      "AccessDenied"
+    ]
+  }
+}