aden-tools 1.0.2__py3-none-any.whl

aden_tools/__init__.py

@@ -0,0 +1,52 @@
+"""
+Aden Tools - Tool library for the Aden agent framework.
+
+Tools provide capabilities that AI agents can use to interact with
+external systems, process data, and perform actions.
+
+Usage:
+    from fastmcp import FastMCP
+    from aden_tools.tools import register_all_tools
+    from aden_tools.credentials import CredentialStoreAdapter
+
+    mcp = FastMCP("my-server")
+    credentials = CredentialStoreAdapter.default()
+    register_all_tools(mcp, credentials=credentials)
+"""
+
+__version__ = "0.1.0"
+
+# Credential management (no external dependencies)
+from .credentials import (
+    CREDENTIAL_SPECS,
+    CredentialError,
+    CredentialSpec,
+    CredentialStoreAdapter,
+)
+
+# Utilities (no external dependencies)
+from .utils import get_env_var
+
+
+def __getattr__(name: str):
+    """Lazy import for tools that require fastmcp."""
+    if name == "register_all_tools":
+        from .tools import register_all_tools
+
+        return register_all_tools
+    raise AttributeError(f"module {__name__!r} has no attribute {name!r}")
+
+
+__all__ = [
+    # Version
+    "__version__",
+    # Utilities
+    "get_env_var",
+    # Credentials
+    "CredentialStoreAdapter",
+    "CredentialSpec",
+    "CredentialError",
+    "CREDENTIAL_SPECS",
+    # MCP registration (lazy loaded)
+    "register_all_tools",
+]

aden_tools/credentials/__init__.py

@@ -0,0 +1,330 @@
+"""
+Centralized credential management for Aden Tools.
+
+Provides agent-aware validation, clear error messages, and testability.
+
+Philosophy: Google Strictness + Apple UX
+- Validate credentials before running an agent (fail-fast at the right boundary)
+- Guided error messages with clear next steps
+
+Usage:
+    from aden_tools.credentials import CredentialStoreAdapter
+    from framework.credentials import CredentialStore
+
+    # With encrypted storage (production)
+    store = CredentialStore.with_encrypted_storage()  # defaults to ~/.hive/credentials
+    credentials = CredentialStoreAdapter(store)
+
+    # With composite storage (encrypted primary + env fallback)
+    credentials = CredentialStoreAdapter.default()
+
+    # In agent runner (validate at agent load time)
+    credentials.validate_for_tools(["web_search", "file_read"])
+
+    # In tools
+    api_key = credentials.get("brave_search")
+
+    # In tests
+    creds = CredentialStoreAdapter.for_testing({"brave_search": "test-key"})
+
+    # Template resolution
+    headers = credentials.resolve_headers({
+        "Authorization": "Bearer {{github_oauth.access_token}}"
+    })
+
+Credential categories:
+- search.py: Search tool credentials (brave_search, google_search, etc.)
+- email.py: Email provider credentials (resend, google/gmail)
+- apollo.py: Apollo.io API credentials
+- brevo.py: Brevo (Sendinblue) transactional email/SMS credentials
+- discord.py: Discord bot credentials
+- github.py: GitHub API credentials
+- google_analytics.py: Google Analytics 4 Data API credentials
+- google_maps.py: Google Maps Platform credentials
+- hubspot.py: HubSpot CRM credentials
+- intercom.py: Intercom customer messaging credentials
+- postgres.py: PostgreSQL database credentials
+- slack.py: Slack workspace credentials
+- stripe.py: Stripe payments API credentials
+- calcom.py: Cal.com scheduling API credentials
+
+Note: Tools that don't need credentials simply omit the 'credentials' parameter
+from their register_tools() function. This convention is enforced by CI tests.
+
+To add a new credential:
+1. Find the appropriate category file (or create a new one)
+2. Add the CredentialSpec to that file's dictionary
+3. If new category, import and merge it in this __init__.py
+"""
+
+from .airtable import AIRTABLE_CREDENTIALS
+from .apify import APIFY_CREDENTIALS
+from .apollo import APOLLO_CREDENTIALS
+from .asana import ASANA_CREDENTIALS
+from .attio import ATTIO_CREDENTIALS
+from .aws_s3 import AWS_S3_CREDENTIALS
+from .azure_sql import AZURE_SQL_CREDENTIALS
+from .base import CredentialError, CredentialSpec
+from .bigquery import BIGQUERY_CREDENTIALS
+from .brevo import BREVO_CREDENTIALS
+from .browser import get_aden_auth_url, get_aden_setup_url, open_browser
+from .calcom import CALCOM_CREDENTIALS
+from .calendly import CALENDLY_CREDENTIALS
+from .cloudflare import CLOUDFLARE_CREDENTIALS
+from .cloudinary import CLOUDINARY_CREDENTIALS
+from .confluence import CONFLUENCE_CREDENTIALS
+from .databricks import DATABRICKS_CREDENTIALS
+from .discord import DISCORD_CREDENTIALS
+from .docker_hub import DOCKER_HUB_CREDENTIALS
+from .email import EMAIL_CREDENTIALS
+from .freshdesk import FRESHDESK_CREDENTIALS
+from .gcp_vision import GCP_VISION_CREDENTIALS
+from .github import GITHUB_CREDENTIALS
+from .gitlab import GITLAB_CREDENTIALS
+from .google_analytics import GOOGLE_ANALYTICS_CREDENTIALS
+from .google_maps import GOOGLE_MAPS_CREDENTIALS
+from .google_search_console import GOOGLE_SEARCH_CONSOLE_CREDENTIALS
+from .greenhouse import GREENHOUSE_CREDENTIALS
+from .health_check import (
+    HealthCheckResult,
+    check_credential_health,
+)
+from .hubspot import HUBSPOT_CREDENTIALS
+from .huggingface import HUGGINGFACE_CREDENTIALS
+from .intercom import INTERCOM_CREDENTIALS
+from .jira import JIRA_CREDENTIALS
+from .kafka import KAFKA_CREDENTIALS
+from .langfuse import LANGFUSE_CREDENTIALS
+from .linear import LINEAR_CREDENTIALS
+from .lusha import LUSHA_CREDENTIALS
+from .mattermost import MATTERMOST_CREDENTIALS
+from .microsoft_graph import MICROSOFT_GRAPH_CREDENTIALS
+from .mongodb import MONGODB_CREDENTIALS
+from .n8n import N8N_CREDENTIALS
+from .news import NEWS_CREDENTIALS
+from .notion import NOTION_CREDENTIALS
+from .obsidian import OBSIDIAN_CREDENTIALS
+from .pagerduty import PAGERDUTY_CREDENTIALS
+from .pinecone import PINECONE_CREDENTIALS
+from .pipedrive import PIPEDRIVE_CREDENTIALS
+from .plaid import PLAID_CREDENTIALS
+from .postgres import POSTGRES_CREDENTIALS
+from .powerbi import POWERBI_CREDENTIALS
+from .prometheus import PROMETHEUS_CREDENTIALS
+from .pushover import PUSHOVER_CREDENTIALS
+from .quickbooks import QUICKBOOKS_CREDENTIALS
+from .razorpay import RAZORPAY_CREDENTIALS
+from .reddit import REDDIT_CREDENTIALS
+from .redis import REDIS_CREDENTIALS
+from .redshift import REDSHIFT_CREDENTIALS
+from .salesforce import SALESFORCE_CREDENTIALS
+from .sap import SAP_CREDENTIALS
+from .search import SEARCH_CREDENTIALS
+from .serpapi import SERPAPI_CREDENTIALS
+from .shell_config import (
+    add_env_var_to_shell_config,
+    detect_shell,
+    get_shell_config_path,
+    get_shell_source_command,
+)
+from .shopify import SHOPIFY_CREDENTIALS
+from .similarweb import SIMILARWEB_CREDENTIALS
+from .slack import SLACK_CREDENTIALS
+from .snowflake import SNOWFLAKE_CREDENTIALS
+from .store_adapter import CredentialStoreAdapter
+from .stripe import STRIPE_CREDENTIALS
+from .supabase import SUPABASE_CREDENTIALS
+from .telegram import TELEGRAM_CREDENTIALS
+from .terraform import TERRAFORM_CREDENTIALS
+from .tines import TINES_CREDENTIALS
+from .trello import TRELLO_CREDENTIALS
+from .twilio import TWILIO_CREDENTIALS
+from .twitter import TWITTER_CREDENTIALS
+from .vercel import VERCEL_CREDENTIALS
+from .wandb import WANDB_CREDENTIALS
+from .youtube import YOUTUBE_CREDENTIALS
+from .zendesk import ZENDESK_CREDENTIALS
+from .zoho_crm import ZOHO_CRM_CREDENTIALS
+from .zoom import ZOOM_CREDENTIALS
+
+# Merged registry of all credentials
+CREDENTIAL_SPECS = {
+    **AIRTABLE_CREDENTIALS,
+    **NEWS_CREDENTIALS,
+    **SEARCH_CREDENTIALS,
+    **EMAIL_CREDENTIALS,
+    **GCP_VISION_CREDENTIALS,
+    **APIFY_CREDENTIALS,
+    **APOLLO_CREDENTIALS,
+    **ASANA_CREDENTIALS,
+    **ATTIO_CREDENTIALS,
+    **AWS_S3_CREDENTIALS,
+    **AZURE_SQL_CREDENTIALS,
+    **BIGQUERY_CREDENTIALS,
+    **BREVO_CREDENTIALS,
+    **CALCOM_CREDENTIALS,
+    **CALENDLY_CREDENTIALS,
+    **CLOUDFLARE_CREDENTIALS,
+    **CLOUDINARY_CREDENTIALS,
+    **CONFLUENCE_CREDENTIALS,
+    **DATABRICKS_CREDENTIALS,
+    **DISCORD_CREDENTIALS,
+    **DOCKER_HUB_CREDENTIALS,
+    **EMAIL_CREDENTIALS,
+    **GCP_VISION_CREDENTIALS,
+    **GITHUB_CREDENTIALS,
+    **GREENHOUSE_CREDENTIALS,
+    **GITLAB_CREDENTIALS,
+    **GOOGLE_ANALYTICS_CREDENTIALS,
+    **GOOGLE_MAPS_CREDENTIALS,
+    **GOOGLE_SEARCH_CONSOLE_CREDENTIALS,
+    **HUBSPOT_CREDENTIALS,
+    **HUGGINGFACE_CREDENTIALS,
+    **INTERCOM_CREDENTIALS,
+    **JIRA_CREDENTIALS,
+    **KAFKA_CREDENTIALS,
+    **LANGFUSE_CREDENTIALS,
+    **LINEAR_CREDENTIALS,
+    **LUSHA_CREDENTIALS,
+    **MATTERMOST_CREDENTIALS,
+    **MICROSOFT_GRAPH_CREDENTIALS,
+    **MONGODB_CREDENTIALS,
+    **N8N_CREDENTIALS,
+    **NEWS_CREDENTIALS,
+    **NOTION_CREDENTIALS,
+    **OBSIDIAN_CREDENTIALS,
+    **PAGERDUTY_CREDENTIALS,
+    **PINECONE_CREDENTIALS,
+    **PIPEDRIVE_CREDENTIALS,
+    **PLAID_CREDENTIALS,
+    **POSTGRES_CREDENTIALS,
+    **POWERBI_CREDENTIALS,
+    **PROMETHEUS_CREDENTIALS,
+    **PUSHOVER_CREDENTIALS,
+    **QUICKBOOKS_CREDENTIALS,
+    **RAZORPAY_CREDENTIALS,
+    **REDDIT_CREDENTIALS,
+    **REDIS_CREDENTIALS,
+    **REDSHIFT_CREDENTIALS,
+    **SALESFORCE_CREDENTIALS,
+    **SAP_CREDENTIALS,
+    **SEARCH_CREDENTIALS,
+    **SERPAPI_CREDENTIALS,
+    **SIMILARWEB_CREDENTIALS,
+    **SHOPIFY_CREDENTIALS,
+    **SLACK_CREDENTIALS,
+    **SNOWFLAKE_CREDENTIALS,
+    **STRIPE_CREDENTIALS,
+    **SUPABASE_CREDENTIALS,
+    **TELEGRAM_CREDENTIALS,
+    **TERRAFORM_CREDENTIALS,
+    **TINES_CREDENTIALS,
+    **TRELLO_CREDENTIALS,
+    **TWILIO_CREDENTIALS,
+    **TWITTER_CREDENTIALS,
+    **VERCEL_CREDENTIALS,
+    **YOUTUBE_CREDENTIALS,
+    **WANDB_CREDENTIALS,
+    **ZENDESK_CREDENTIALS,
+    **ZOHO_CRM_CREDENTIALS,
+    **ZOOM_CREDENTIALS,
+    **FRESHDESK_CREDENTIALS,
+}
+
+__all__ = [
+    # Core classes
+    "CredentialSpec",
+    "CredentialStoreAdapter",
+    "CredentialError",
+    # Health check utilities
+    "HealthCheckResult",
+    "check_credential_health",
+    # Browser utilities for OAuth2 flows
+    "open_browser",
+    "get_aden_auth_url",
+    "get_aden_setup_url",
+    # Shell config utilities
+    "detect_shell",
+    "get_shell_config_path",
+    "get_shell_source_command",
+    "add_env_var_to_shell_config",
+    # Merged registry
+    "CREDENTIAL_SPECS",
+    # Category registries
+    "AIRTABLE_CREDENTIALS",
+    "APIFY_CREDENTIALS",
+    "APOLLO_CREDENTIALS",
+    "ASANA_CREDENTIALS",
+    "ATTIO_CREDENTIALS",
+    "AWS_S3_CREDENTIALS",
+    "AZURE_SQL_CREDENTIALS",
+    "BIGQUERY_CREDENTIALS",
+    "BREVO_CREDENTIALS",
+    "CALCOM_CREDENTIALS",
+    "CALENDLY_CREDENTIALS",
+    "CLOUDFLARE_CREDENTIALS",
+    "CLOUDINARY_CREDENTIALS",
+    "CONFLUENCE_CREDENTIALS",
+    "DATABRICKS_CREDENTIALS",
+    "DISCORD_CREDENTIALS",
+    "DOCKER_HUB_CREDENTIALS",
+    "EMAIL_CREDENTIALS",
+    "GCP_VISION_CREDENTIALS",
+    "GITHUB_CREDENTIALS",
+    "GREENHOUSE_CREDENTIALS",
+    "GITLAB_CREDENTIALS",
+    "GOOGLE_ANALYTICS_CREDENTIALS",
+    "GOOGLE_MAPS_CREDENTIALS",
+    "GOOGLE_SEARCH_CONSOLE_CREDENTIALS",
+    "HUBSPOT_CREDENTIALS",
+    "HUGGINGFACE_CREDENTIALS",
+    "INTERCOM_CREDENTIALS",
+    "JIRA_CREDENTIALS",
+    "KAFKA_CREDENTIALS",
+    "LANGFUSE_CREDENTIALS",
+    "LINEAR_CREDENTIALS",
+    "LUSHA_CREDENTIALS",
+    "MATTERMOST_CREDENTIALS",
+    "MICROSOFT_GRAPH_CREDENTIALS",
+    "MONGODB_CREDENTIALS",
+    "N8N_CREDENTIALS",
+    "NEWS_CREDENTIALS",
+    "NOTION_CREDENTIALS",
+    "OBSIDIAN_CREDENTIALS",
+    "PAGERDUTY_CREDENTIALS",
+    "PINECONE_CREDENTIALS",
+    "PIPEDRIVE_CREDENTIALS",
+    "PLAID_CREDENTIALS",
+    "POSTGRES_CREDENTIALS",
+    "POWERBI_CREDENTIALS",
+    "PROMETHEUS_CREDENTIALS",
+    "PUSHOVER_CREDENTIALS",
+    "QUICKBOOKS_CREDENTIALS",
+    "RAZORPAY_CREDENTIALS",
+    "REDDIT_CREDENTIALS",
+    "REDIS_CREDENTIALS",
+    "REDSHIFT_CREDENTIALS",
+    "SALESFORCE_CREDENTIALS",
+    "SAP_CREDENTIALS",
+    "SEARCH_CREDENTIALS",
+    "SERPAPI_CREDENTIALS",
+    "SIMILARWEB_CREDENTIALS",
+    "SHOPIFY_CREDENTIALS",
+    "SLACK_CREDENTIALS",
+    "SNOWFLAKE_CREDENTIALS",
+    "STRIPE_CREDENTIALS",
+    "SUPABASE_CREDENTIALS",
+    "TELEGRAM_CREDENTIALS",
+    "TERRAFORM_CREDENTIALS",
+    "TINES_CREDENTIALS",
+    "TRELLO_CREDENTIALS",
+    "TWILIO_CREDENTIALS",
+    "TWITTER_CREDENTIALS",
+    "VERCEL_CREDENTIALS",
+    "WANDB_CREDENTIALS",
+    "YOUTUBE_CREDENTIALS",
+    "ZENDESK_CREDENTIALS",
+    "ZOHO_CRM_CREDENTIALS",
+    "ZOOM_CREDENTIALS",
+    "FRESHDESK_CREDENTIALS",
+]

aden_tools/credentials/airtable.py

@@ -0,0 +1,40 @@
+"""
+Airtable credentials.
+
+Contains credentials for the Airtable Web API.
+Requires AIRTABLE_PAT (Personal Access Token).
+"""
+
+from .base import CredentialSpec
+
+AIRTABLE_CREDENTIALS = {
+    "airtable_pat": CredentialSpec(
+        env_var="AIRTABLE_PAT",
+        tools=[
+            "airtable_list_records",
+            "airtable_get_record",
+            "airtable_create_records",
+            "airtable_update_records",
+            "airtable_list_bases",
+            "airtable_get_base_schema",
+            "airtable_delete_records",
+            "airtable_search_records",
+            "airtable_list_collaborators",
+        ],
+        required=True,
+        startup_required=False,
+        help_url="https://airtable.com/create/tokens",
+        description="Airtable Personal Access Token",
+        direct_api_key_supported=True,
+        api_key_instructions="""To set up Airtable API access:
+1. Go to https://airtable.com/create/tokens
+2. Create a new Personal Access Token
+3. Grant scopes: data.records:read, data.records:write, schema.bases:read
+4. Select the bases to grant access to
+5. Set environment variable:
+   export AIRTABLE_PAT=your-personal-access-token""",
+        health_check_endpoint="",
+        credential_id="airtable_pat",
+        credential_key="api_key",
+    ),
+}

aden_tools/credentials/apify.py

@@ -0,0 +1,34 @@
+"""
+Apify credentials.
+
+Contains credentials for Apify web scraping and automation platform.
+"""
+
+from .base import CredentialSpec
+
+APIFY_CREDENTIALS = {
+    "apify": CredentialSpec(
+        env_var="APIFY_API_TOKEN",
+        tools=[
+            "apify_run_actor",
+            "apify_get_run",
+            "apify_get_dataset_items",
+            "apify_list_actors",
+            "apify_list_runs",
+            "apify_get_kv_store_record",
+        ],
+        required=True,
+        startup_required=False,
+        help_url="https://docs.apify.com/api/v2",
+        description="Apify API token for running web scraping actors and retrieving datasets",
+        direct_api_key_supported=True,
+        api_key_instructions="""To get an Apify API token:
+1. Go to https://console.apify.com/account/integrations
+2. Copy your personal API token
+3. Set the environment variable:
+   export APIFY_API_TOKEN=your-api-token""",
+        health_check_endpoint="https://api.apify.com/v2/users/me",
+        credential_id="apify",
+        credential_key="api_key",
+    ),
+}

aden_tools/credentials/apollo.py

@@ -0,0 +1,46 @@
+"""
+Apollo.io tool credentials.
+
+Contains credentials for Apollo.io API integration.
+"""
+
+from .base import CredentialSpec
+
+APOLLO_CREDENTIALS = {
+    "apollo": CredentialSpec(
+        env_var="APOLLO_API_KEY",
+        tools=[
+            "apollo_enrich_person",
+            "apollo_enrich_company",
+            "apollo_search_people",
+            "apollo_search_companies",
+            "apollo_get_person_activities",
+            "apollo_list_email_accounts",
+            "apollo_bulk_enrich_people",
+        ],
+        required=True,
+        startup_required=False,
+        help_url="https://apolloio.github.io/apollo-api-docs/",
+        description="Apollo.io API key for contact and company data enrichment",
+        # Auth method support
+        aden_supported=False,
+        direct_api_key_supported=True,
+        api_key_instructions="""To get an Apollo.io API key:
+1. Sign up or log in at https://app.apollo.io/
+2. Go to Settings > Integrations > API
+3. Click "Connect" to generate your API key
+4. Copy the API key
+
+Note: Apollo uses export credits for enrichment:
+- Free plan: 10 credits/month
+- Basic ($49/user/mo): 1,000 credits/month
+- Professional ($79/user/mo): 2,000 credits/month
+- Overage: $0.20/credit""",
+        # Health check configuration
+        health_check_endpoint="https://api.apollo.io/v1/auth/health",
+        health_check_method="GET",
+        # Credential store mapping
+        credential_id="apollo",
+        credential_key="api_key",
+    ),
+}

aden_tools/credentials/asana.py

@@ -0,0 +1,38 @@
+"""
+Asana credentials.
+
+Contains credentials for Asana task and project management.
+"""
+
+from .base import CredentialSpec
+
+ASANA_CREDENTIALS = {
+    "asana": CredentialSpec(
+        env_var="ASANA_ACCESS_TOKEN",
+        tools=[
+            "asana_list_workspaces",
+            "asana_list_projects",
+            "asana_list_tasks",
+            "asana_get_task",
+            "asana_create_task",
+            "asana_search_tasks",
+            "asana_update_task",
+            "asana_add_comment",
+            "asana_create_subtask",
+        ],
+        required=True,
+        startup_required=False,
+        help_url="https://developers.asana.com/docs/personal-access-token",
+        description="Asana personal access token for task and project management",
+        direct_api_key_supported=True,
+        api_key_instructions="""To get an Asana personal access token:
+1. Go to https://app.asana.com/0/my-apps
+2. Click 'Create new token'
+3. Give it a name and copy the token
+4. Set the environment variable:
+   export ASANA_ACCESS_TOKEN=your-pat""",
+        health_check_endpoint="https://app.asana.com/api/1.0/users/me",
+        credential_id="asana",
+        credential_key="api_key",
+    ),
+}

aden_tools/credentials/attio.py

@@ -0,0 +1,55 @@
+"""
+Attio tool credentials.
+
+Contains credentials for Attio CRM integration.
+"""
+
+from .base import CredentialSpec
+
+ATTIO_CREDENTIALS = {
+    "attio": CredentialSpec(
+        env_var="ATTIO_API_KEY",
+        tools=[
+            "attio_record_list",
+            "attio_record_get",
+            "attio_record_create",
+            "attio_record_update",
+            "attio_record_assert",
+            "attio_list_lists",
+            "attio_list_entries_get",
+            "attio_list_entry_create",
+            "attio_list_entry_delete",
+            "attio_task_create",
+            "attio_task_list",
+            "attio_task_get",
+            "attio_task_delete",
+            "attio_members_list",
+            "attio_member_get",
+        ],
+        required=True,
+        startup_required=False,
+        help_url="https://attio.com/help/apps/other-apps/generating-an-api-key",
+        description="Attio API key for CRM integration",
+        # Auth method support
+        aden_supported=False,
+        direct_api_key_supported=True,
+        api_key_instructions="""To get an Attio API key:
+1. Go to Attio Settings > Developers > Access tokens
+2. Click "Generate new token"
+3. Name your token (e.g., "Hive Agent")
+4. Select required scopes:
+   - record_permission:read-write
+   - object_configuration:read
+   - list_entry:read-write
+   - list_configuration:read
+   - task:read-write
+   - user_management:read
+5. Copy the generated token""",
+        # Health check configuration
+        health_check_endpoint="https://api.attio.com/v2/workspace_members",
+        health_check_method="GET",
+        # Credential store mapping
+        credential_id="attio",
+        credential_key="api_key",
+    ),
+}

aden_tools/credentials/aws_s3.py

@@ -0,0 +1,63 @@
+"""
+AWS S3 credentials.
+
+Contains credentials for AWS S3 REST API with SigV4 signing.
+Requires AWS_ACCESS_KEY_ID and AWS_SECRET_ACCESS_KEY.
+"""
+
+from .base import CredentialSpec
+
+AWS_S3_CREDENTIALS = {
+    "aws_access_key": CredentialSpec(
+        env_var="AWS_ACCESS_KEY_ID",
+        tools=[
+            "s3_list_buckets",
+            "s3_list_objects",
+            "s3_get_object",
+            "s3_put_object",
+            "s3_delete_object",
+            "s3_copy_object",
+            "s3_get_object_metadata",
+            "s3_generate_presigned_url",
+        ],
+        required=True,
+        startup_required=False,
+        help_url="https://docs.aws.amazon.com/IAM/latest/UserGuide/id_credentials_access-keys.html",
+        description="AWS Access Key ID for S3 API access",
+        direct_api_key_supported=True,
+        api_key_instructions="""To set up AWS S3 API access:
+1. Go to AWS IAM > Users > Security credentials
+2. Create a new access key
+3. Set environment variables:
+   export AWS_ACCESS_KEY_ID=your-access-key-id
+   export AWS_SECRET_ACCESS_KEY=your-secret-access-key
+   export AWS_REGION=us-east-1""",
+        health_check_endpoint="",
+        credential_id="aws_access_key",
+        credential_key="api_key",
+        credential_group="aws",
+    ),
+    "aws_secret_key": CredentialSpec(
+        env_var="AWS_SECRET_ACCESS_KEY",
+        tools=[
+            "s3_list_buckets",
+            "s3_list_objects",
+            "s3_get_object",
+            "s3_put_object",
+            "s3_delete_object",
+            "s3_copy_object",
+            "s3_get_object_metadata",
+            "s3_generate_presigned_url",
+        ],
+        required=True,
+        startup_required=False,
+        help_url="https://docs.aws.amazon.com/IAM/latest/UserGuide/id_credentials_access-keys.html",
+        description="AWS Secret Access Key for S3 API access",
+        direct_api_key_supported=True,
+        api_key_instructions="""See AWS_ACCESS_KEY_ID instructions above.""",
+        health_check_endpoint="",
+        credential_id="aws_secret_key",
+        credential_key="api_key",
+        credential_group="aws",
+    ),
+}