raqeb 1.0.0__tar.gz

raqeb-1.0.0/PKG-INFO

@@ -0,0 +1,274 @@
+Metadata-Version: 2.4
+Name: raqeb
+Version: 1.0.0
+Summary: Python SDK for Raqeb Database PAM and Secrets Management
+Home-page: https://github.com/raqeb/python-sdk
+Author: Raqeb
+Author-email: support@raqeb.cloud
+Classifier: Development Status :: 5 - Production/Stable
+Classifier: Intended Audience :: Developers
+Classifier: Topic :: Software Development :: Libraries :: Python Modules
+Classifier: License :: OSI Approved :: MIT License
+Classifier: Programming Language :: Python :: 3
+Classifier: Programming Language :: Python :: 3.7
+Classifier: Programming Language :: Python :: 3.8
+Classifier: Programming Language :: Python :: 3.9
+Classifier: Programming Language :: Python :: 3.10
+Classifier: Programming Language :: Python :: 3.11
+Requires-Python: >=3.7
+Description-Content-Type: text/markdown
+Requires-Dist: requests>=2.25.0
+Provides-Extra: dev
+Requires-Dist: pytest>=6.0; extra == "dev"
+Requires-Dist: pytest-cov>=2.0; extra == "dev"
+Requires-Dist: black>=21.0; extra == "dev"
+Requires-Dist: flake8>=3.9; extra == "dev"
+Dynamic: author
+Dynamic: author-email
+Dynamic: classifier
+Dynamic: description
+Dynamic: description-content-type
+Dynamic: home-page
+Dynamic: provides-extra
+Dynamic: requires-dist
+Dynamic: requires-python
+Dynamic: summary
+
+# Raqeb Python SDK
+
+Official Python SDK for Raqeb Database PAM and Secrets Management.
+
+## Installation
+
+```bash
+pip install raqeb
+```
+
+## Quick Start
+
+```python
+from raqeb import RaqebClient
+
+# Initialize client with service account API key
+client = RaqebClient(api_key="sa_your_api_key_here")
+
+# Get a secret
+secret = client.get_secret("secret-id")
+print(f"Secret value: {secret['value']}")
+
+# Get temporary database credentials
+creds = client.get_database_credentials(
+    database_id="db-id",
+    ttl_hours=4,
+    access_level="read-only"
+)
+
+print(f"Username: {creds['username']}")
+print(f"Password: {creds['password']}")
+print(f"Expires: {creds['expires_at']}")
+
+# Revoke credentials when done
+client.revoke_lease(creds['lease_id'])
+```
+
+## Usage Examples
+
+### Secrets Management
+
+```python
+from raqeb import RaqebClient
+
+client = RaqebClient(api_key="sa_your_key")
+
+# Retrieve a secret
+secret = client.get_secret("api-key-prod")
+api_key = secret['value']
+
+# Use the secret in your application
+import requests
+response = requests.get(
+    "https://api.example.com/data",
+    headers={"Authorization": f"Bearer {api_key}"}
+)
+```
+
+### Database Access
+
+```python
+from raqeb import RaqebClient
+import psycopg2
+
+client = RaqebClient(api_key="sa_your_key")
+
+# Get temporary database credentials
+creds = client.get_database_credentials(
+    database_id="prod-postgres",
+    ttl_hours=2,
+    access_level="read-only"
+)
+
+# Connect to database
+conn = psycopg2.connect(
+    host="db.example.com",
+    port=5432,
+    database="myapp",
+    user=creds['username'],
+    password=creds['password']
+)
+
+try:
+    # Use the connection
+    cursor = conn.cursor()
+    cursor.execute("SELECT * FROM users LIMIT 10")
+    results = cursor.fetchall()
+    
+finally:
+    conn.close()
+    # Revoke credentials
+    client.revoke_lease(creds['lease_id'])
+```
+
+### Context Manager
+
+```python
+from raqeb import RaqebClient
+
+# Use context manager for automatic cleanup
+with RaqebClient(api_key="sa_your_key") as client:
+    secret = client.get_secret("secret-id")
+    print(secret['value'])
+```
+
+### API Key Management
+
+```python
+from raqeb import RaqebClient
+
+client = RaqebClient(api_key="sa_your_key")
+
+# List API keys
+keys = client.list_api_keys()
+for key in keys:
+    print(f"{key['name']}: {key['key_prefix']}...")
+
+# Create new API key
+new_key = client.create_api_key(
+    name="CI/CD Pipeline",
+    scopes=["secrets:read", "databases:read"],
+    description="Key for automated deployments"
+)
+print(f"New API Key: {new_key['api_key']}")  # Save this!
+
+# Delete API key
+client.delete_api_key("key-id")
+```
+
+## Error Handling
+
+```python
+from raqeb import RaqebClient, AuthenticationError, PermissionError, NotFoundError
+
+client = RaqebClient(api_key="sa_your_key")
+
+try:
+    secret = client.get_secret("secret-id")
+    
+except AuthenticationError:
+    print("Invalid or expired API key")
+    
+except PermissionError:
+    print("Insufficient permissions - check API key scopes")
+    
+except NotFoundError:
+    print("Secret not found")
+    
+except RaqebError as e:
+    print(f"API error: {e}")
+```
+
+## API Reference
+
+### RaqebClient
+
+#### `__init__(api_key, base_url="https://app.raqeb.cloud/api/v1")`
+Initialize the client.
+
+#### `get_secret(secret_id) -> dict`
+Retrieve a secret value.
+
+**Returns:**
+```python
+{
+    'secret_id': 'secret-123',
+    'name': 'API Key',
+    'value': 'secret-value',
+    'retrieved_at': '2026-02-14T16:09:00Z'
+}
+```
+
+#### `get_database_credentials(database_id, ttl_hours=4, access_level='read-only') -> dict`
+Generate temporary database credentials.
+
+**Parameters:**
+- `database_id` (str): Database ID
+- `ttl_hours` (int): Time to live in hours (default: 4)
+- `access_level` (str): 'read-only', 'read-write', or 'admin'
+
+**Returns:**
+```python
+{
+    'lease_id': 'lease-123',
+    'username': 'temp_user_abc',
+    'password': 'temp_pass_xyz',
+    'database_id': 'db-123',
+    'access_level': 'read-only',
+    'issued_at': '2026-02-14T16:09:00Z',
+    'expires_at': '2026-02-14T20:09:00Z',
+    'ttl_seconds': 14400
+}
+```
+
+#### `revoke_lease(lease_id) -> None`
+Revoke a dynamic secret lease.
+
+#### `list_api_keys() -> list`
+List user's API keys.
+
+#### `create_api_key(name, description=None, scopes=None, expires_at=None) -> dict`
+Create a new API key.
+
+#### `delete_api_key(key_id) -> None`
+Delete an API key.
+
+## Environment Variables
+
+You can use environment variables for configuration:
+
+```python
+import os
+from raqeb import RaqebClient
+
+client = RaqebClient(
+    api_key=os.getenv('RAQEB_API_KEY'),
+    base_url=os.getenv('RAQEB_BASE_URL', 'https://app.raqeb.cloud/api/v1')
+)
+```
+
+## Best Practices
+
+1. **Never hardcode API keys** - Use environment variables
+2. **Use minimal scopes** - Only grant necessary permissions
+3. **Set appropriate TTLs** - Use shortest time needed
+4. **Always revoke leases** - Clean up credentials when done
+5. **Handle errors gracefully** - Catch and handle SDK exceptions
+6. **Use context managers** - Automatic resource cleanup
+
+## License
+
+MIT License - see LICENSE file for details
+
+## Support
+
+- Documentation: https://docs.raqeb.cloud
+- Email: support@raqeb.cloud
+- GitHub: https://github.com/raqeb/python-sdk

raqeb-1.0.0/README.md

@@ -0,0 +1,238 @@
+# Raqeb Python SDK
+
+Official Python SDK for Raqeb Database PAM and Secrets Management.
+
+## Installation
+
+```bash
+pip install raqeb
+```
+
+## Quick Start
+
+```python
+from raqeb import RaqebClient
+
+# Initialize client with service account API key
+client = RaqebClient(api_key="sa_your_api_key_here")
+
+# Get a secret
+secret = client.get_secret("secret-id")
+print(f"Secret value: {secret['value']}")
+
+# Get temporary database credentials
+creds = client.get_database_credentials(
+    database_id="db-id",
+    ttl_hours=4,
+    access_level="read-only"
+)
+
+print(f"Username: {creds['username']}")
+print(f"Password: {creds['password']}")
+print(f"Expires: {creds['expires_at']}")
+
+# Revoke credentials when done
+client.revoke_lease(creds['lease_id'])
+```
+
+## Usage Examples
+
+### Secrets Management
+
+```python
+from raqeb import RaqebClient
+
+client = RaqebClient(api_key="sa_your_key")
+
+# Retrieve a secret
+secret = client.get_secret("api-key-prod")
+api_key = secret['value']
+
+# Use the secret in your application
+import requests
+response = requests.get(
+    "https://api.example.com/data",
+    headers={"Authorization": f"Bearer {api_key}"}
+)
+```
+
+### Database Access
+
+```python
+from raqeb import RaqebClient
+import psycopg2
+
+client = RaqebClient(api_key="sa_your_key")
+
+# Get temporary database credentials
+creds = client.get_database_credentials(
+    database_id="prod-postgres",
+    ttl_hours=2,
+    access_level="read-only"
+)
+
+# Connect to database
+conn = psycopg2.connect(
+    host="db.example.com",
+    port=5432,
+    database="myapp",
+    user=creds['username'],
+    password=creds['password']
+)
+
+try:
+    # Use the connection
+    cursor = conn.cursor()
+    cursor.execute("SELECT * FROM users LIMIT 10")
+    results = cursor.fetchall()
+    
+finally:
+    conn.close()
+    # Revoke credentials
+    client.revoke_lease(creds['lease_id'])
+```
+
+### Context Manager
+
+```python
+from raqeb import RaqebClient
+
+# Use context manager for automatic cleanup
+with RaqebClient(api_key="sa_your_key") as client:
+    secret = client.get_secret("secret-id")
+    print(secret['value'])
+```
+
+### API Key Management
+
+```python
+from raqeb import RaqebClient
+
+client = RaqebClient(api_key="sa_your_key")
+
+# List API keys
+keys = client.list_api_keys()
+for key in keys:
+    print(f"{key['name']}: {key['key_prefix']}...")
+
+# Create new API key
+new_key = client.create_api_key(
+    name="CI/CD Pipeline",
+    scopes=["secrets:read", "databases:read"],
+    description="Key for automated deployments"
+)
+print(f"New API Key: {new_key['api_key']}")  # Save this!
+
+# Delete API key
+client.delete_api_key("key-id")
+```
+
+## Error Handling
+
+```python
+from raqeb import RaqebClient, AuthenticationError, PermissionError, NotFoundError
+
+client = RaqebClient(api_key="sa_your_key")
+
+try:
+    secret = client.get_secret("secret-id")
+    
+except AuthenticationError:
+    print("Invalid or expired API key")
+    
+except PermissionError:
+    print("Insufficient permissions - check API key scopes")
+    
+except NotFoundError:
+    print("Secret not found")
+    
+except RaqebError as e:
+    print(f"API error: {e}")
+```
+
+## API Reference
+
+### RaqebClient
+
+#### `__init__(api_key, base_url="https://app.raqeb.cloud/api/v1")`
+Initialize the client.
+
+#### `get_secret(secret_id) -> dict`
+Retrieve a secret value.
+
+**Returns:**
+```python
+{
+    'secret_id': 'secret-123',
+    'name': 'API Key',
+    'value': 'secret-value',
+    'retrieved_at': '2026-02-14T16:09:00Z'
+}
+```
+
+#### `get_database_credentials(database_id, ttl_hours=4, access_level='read-only') -> dict`
+Generate temporary database credentials.
+
+**Parameters:**
+- `database_id` (str): Database ID
+- `ttl_hours` (int): Time to live in hours (default: 4)
+- `access_level` (str): 'read-only', 'read-write', or 'admin'
+
+**Returns:**
+```python
+{
+    'lease_id': 'lease-123',
+    'username': 'temp_user_abc',
+    'password': 'temp_pass_xyz',
+    'database_id': 'db-123',
+    'access_level': 'read-only',
+    'issued_at': '2026-02-14T16:09:00Z',
+    'expires_at': '2026-02-14T20:09:00Z',
+    'ttl_seconds': 14400
+}
+```
+
+#### `revoke_lease(lease_id) -> None`
+Revoke a dynamic secret lease.
+
+#### `list_api_keys() -> list`
+List user's API keys.
+
+#### `create_api_key(name, description=None, scopes=None, expires_at=None) -> dict`
+Create a new API key.
+
+#### `delete_api_key(key_id) -> None`
+Delete an API key.
+
+## Environment Variables
+
+You can use environment variables for configuration:
+
+```python
+import os
+from raqeb import RaqebClient
+
+client = RaqebClient(
+    api_key=os.getenv('RAQEB_API_KEY'),
+    base_url=os.getenv('RAQEB_BASE_URL', 'https://app.raqeb.cloud/api/v1')
+)
+```
+
+## Best Practices
+
+1. **Never hardcode API keys** - Use environment variables
+2. **Use minimal scopes** - Only grant necessary permissions
+3. **Set appropriate TTLs** - Use shortest time needed
+4. **Always revoke leases** - Clean up credentials when done
+5. **Handle errors gracefully** - Catch and handle SDK exceptions
+6. **Use context managers** - Automatic resource cleanup
+
+## License
+
+MIT License - see LICENSE file for details
+
+## Support
+
+- Documentation: https://docs.raqeb.cloud
+- Email: support@raqeb.cloud
+- GitHub: https://github.com/raqeb/python-sdk

raqeb-1.0.0/raqeb/__init__.py

@@ -0,0 +1,25 @@
+"""
+Raqeb Python SDK - Database PAM and Secrets Management
+
+Usage:
+    from raqeb import RaqebClient
+    
+    client = RaqebClient(api_key="sa_your_api_key")
+    
+    # Get secret
+    secret = client.get_secret("secret-id")
+    
+    # Get database credentials
+    creds = client.get_database_credentials("db-id", ttl_hours=4)
+    print(f"Username: {creds['username']}")
+    print(f"Password: {creds['password']}")
+    
+    # Revoke when done
+    client.revoke_lease(creds['lease_id'])
+"""
+
+from .client import RaqebClient
+from .exceptions import RaqebError, AuthenticationError, NotFoundError, PermissionError
+
+__version__ = "1.0.0"
+__all__ = ["RaqebClient", "RaqebError", "AuthenticationError", "NotFoundError", "PermissionError"]

raqeb-1.0.0/raqeb/client.py

@@ -0,0 +1,193 @@
+"""Raqeb Python SDK Client."""
+
+import requests
+from typing import Dict, List, Optional, Any
+from .exceptions import RaqebError, AuthenticationError, NotFoundError, PermissionError
+
+
+class RaqebClient:
+    """Client for interacting with Raqeb API."""
+    
+    def __init__(self, api_key: str, base_url: str = "https://app.raqeb.cloud/api/v1"):
+        """
+        Initialize Raqeb client.
+        
+        Args:
+            api_key: Service account API key (starts with 'sa_')
+            base_url: Base URL for Raqeb API
+        """
+        self.api_key = api_key
+        self.base_url = base_url.rstrip('/')
+        self.session = requests.Session()
+        self.session.headers.update({
+            'Authorization': f'Bearer {api_key}',
+            'Content-Type': 'application/json'
+        })
+    
+    def _request(self, method: str, endpoint: str, **kwargs) -> Any:
+        """Make HTTP request to API."""
+        url = f"{self.base_url}{endpoint}"
+        
+        try:
+            response = self.session.request(method, url, **kwargs)
+            response.raise_for_status()
+            return response.json() if response.content else None
+            
+        except requests.exceptions.HTTPError as e:
+            status_code = e.response.status_code
+            detail = e.response.json().get('detail', str(e))
+            
+            if status_code == 401:
+                raise AuthenticationError(detail)
+            elif status_code == 403:
+                raise PermissionError(detail)
+            elif status_code == 404:
+                raise NotFoundError(detail)
+            else:
+                raise RaqebError(f"HTTP {status_code}: {detail}")
+        
+        except requests.exceptions.RequestException as e:
+            raise RaqebError(f"Request failed: {str(e)}")
+    
+    # ============================================================================
+    # Secrets Management
+    # ============================================================================
+    
+    def get_secret(self, secret_id: str) -> Dict[str, Any]:
+        """
+        Retrieve a secret value.
+        
+        Args:
+            secret_id: ID of the secret to retrieve
+            
+        Returns:
+            Dict with keys: secret_id, name, value, retrieved_at
+            
+        Example:
+            >>> secret = client.get_secret("secret-123")
+            >>> print(secret['value'])
+        """
+        return self._request('POST', '/service-accounts/secrets/retrieve', params={'secret_id': secret_id})
+    
+    # ============================================================================
+    # Database Credentials
+    # ============================================================================
+    
+    def get_database_credentials(
+        self,
+        database_id: str,
+        ttl_hours: int = 4,
+        access_level: str = 'read-only'
+    ) -> Dict[str, Any]:
+        """
+        Generate temporary database credentials.
+        
+        Args:
+            database_id: ID of the database
+            ttl_hours: Time to live in hours (default: 4)
+            access_level: Access level - 'read-only', 'read-write', or 'admin'
+            
+        Returns:
+            Dict with keys: lease_id, username, password, database_id, access_level,
+                          issued_at, expires_at, ttl_seconds
+            
+        Example:
+            >>> creds = client.get_database_credentials("db-123", ttl_hours=2)
+            >>> print(f"Username: {creds['username']}")
+            >>> print(f"Password: {creds['password']}")
+            >>> print(f"Expires: {creds['expires_at']}")
+        """
+        payload = {
+            'database_id': database_id,
+            'ttl_hours': ttl_hours,
+            'access_level': access_level
+        }
+        return self._request('POST', '/service-accounts/databases/dynamic-credentials', json=payload)
+    
+    def revoke_lease(self, lease_id: str) -> None:
+        """
+        Revoke a dynamic secret lease.
+        
+        Args:
+            lease_id: ID of the lease to revoke
+            
+        Example:
+            >>> client.revoke_lease("lease-123")
+        """
+        self._request('POST', f'/service-accounts/leases/{lease_id}/revoke')
+    
+    # ============================================================================
+    # API Keys Management
+    # ============================================================================
+    
+    def list_api_keys(self) -> List[Dict[str, Any]]:
+        """
+        List user's API keys.
+        
+        Returns:
+            List of API key objects
+            
+        Example:
+            >>> keys = client.list_api_keys()
+            >>> for key in keys:
+            ...     print(f"{key['name']}: {key['key_prefix']}...")
+        """
+        return self._request('GET', '/service-accounts/api-keys')
+    
+    def create_api_key(
+        self,
+        name: str,
+        description: Optional[str] = None,
+        scopes: Optional[List[str]] = None,
+        expires_at: Optional[str] = None
+    ) -> Dict[str, Any]:
+        """
+        Create a new API key.
+        
+        Args:
+            name: Name for the API key
+            description: Optional description
+            scopes: List of scopes (e.g., ['secrets:read', 'databases:read'])
+            expires_at: Optional expiration date (ISO format)
+            
+        Returns:
+            Dict with keys: id, name, api_key, key_prefix, scopes, created_at
+            
+        Note:
+            The api_key is only returned once. Save it securely!
+            
+        Example:
+            >>> key = client.create_api_key("My App", scopes=['secrets:read'])
+            >>> print(f"API Key: {key['api_key']}")  # Save this!
+        """
+        payload = {
+            'name': name,
+            'description': description,
+            'scopes': scopes or ['secrets:read', 'databases:read'],
+            'expires_at': expires_at
+        }
+        return self._request('POST', '/service-accounts/api-keys', json=payload)
+    
+    def delete_api_key(self, key_id: str) -> None:
+        """
+        Delete an API key.
+        
+        Args:
+            key_id: ID of the key to delete
+            
+        Example:
+            >>> client.delete_api_key("key-123")
+        """
+        self._request('DELETE', f'/service-accounts/api-keys/{key_id}')
+    
+    # ============================================================================
+    # Context Manager Support
+    # ============================================================================
+    
+    def __enter__(self):
+        """Context manager entry."""
+        return self
+    
+    def __exit__(self, exc_type, exc_val, exc_tb):
+        """Context manager exit - close session."""
+        self.session.close()

raqeb-1.0.0/raqeb/exceptions.py

@@ -0,0 +1,21 @@
+"""Raqeb SDK Exceptions."""
+
+
+class RaqebError(Exception):
+    """Base exception for Raqeb SDK."""
+    pass
+
+
+class AuthenticationError(RaqebError):
+    """Authentication failed - invalid or expired API key."""
+    pass
+
+
+class PermissionError(RaqebError):
+    """Permission denied - insufficient scopes."""
+    pass
+
+
+class NotFoundError(RaqebError):
+    """Resource not found."""
+    pass

raqeb-1.0.0/raqeb.egg-info/PKG-INFO

@@ -0,0 +1,274 @@
+Metadata-Version: 2.4
+Name: raqeb
+Version: 1.0.0
+Summary: Python SDK for Raqeb Database PAM and Secrets Management
+Home-page: https://github.com/raqeb/python-sdk
+Author: Raqeb
+Author-email: support@raqeb.cloud
+Classifier: Development Status :: 5 - Production/Stable
+Classifier: Intended Audience :: Developers
+Classifier: Topic :: Software Development :: Libraries :: Python Modules
+Classifier: License :: OSI Approved :: MIT License
+Classifier: Programming Language :: Python :: 3
+Classifier: Programming Language :: Python :: 3.7
+Classifier: Programming Language :: Python :: 3.8
+Classifier: Programming Language :: Python :: 3.9
+Classifier: Programming Language :: Python :: 3.10
+Classifier: Programming Language :: Python :: 3.11
+Requires-Python: >=3.7
+Description-Content-Type: text/markdown
+Requires-Dist: requests>=2.25.0
+Provides-Extra: dev
+Requires-Dist: pytest>=6.0; extra == "dev"
+Requires-Dist: pytest-cov>=2.0; extra == "dev"
+Requires-Dist: black>=21.0; extra == "dev"
+Requires-Dist: flake8>=3.9; extra == "dev"
+Dynamic: author
+Dynamic: author-email
+Dynamic: classifier
+Dynamic: description
+Dynamic: description-content-type
+Dynamic: home-page
+Dynamic: provides-extra
+Dynamic: requires-dist
+Dynamic: requires-python
+Dynamic: summary
+
+# Raqeb Python SDK
+
+Official Python SDK for Raqeb Database PAM and Secrets Management.
+
+## Installation
+
+```bash
+pip install raqeb
+```
+
+## Quick Start
+
+```python
+from raqeb import RaqebClient
+
+# Initialize client with service account API key
+client = RaqebClient(api_key="sa_your_api_key_here")
+
+# Get a secret
+secret = client.get_secret("secret-id")
+print(f"Secret value: {secret['value']}")
+
+# Get temporary database credentials
+creds = client.get_database_credentials(
+    database_id="db-id",
+    ttl_hours=4,
+    access_level="read-only"
+)
+
+print(f"Username: {creds['username']}")
+print(f"Password: {creds['password']}")
+print(f"Expires: {creds['expires_at']}")
+
+# Revoke credentials when done
+client.revoke_lease(creds['lease_id'])
+```
+
+## Usage Examples
+
+### Secrets Management
+
+```python
+from raqeb import RaqebClient
+
+client = RaqebClient(api_key="sa_your_key")
+
+# Retrieve a secret
+secret = client.get_secret("api-key-prod")
+api_key = secret['value']
+
+# Use the secret in your application
+import requests
+response = requests.get(
+    "https://api.example.com/data",
+    headers={"Authorization": f"Bearer {api_key}"}
+)
+```
+
+### Database Access
+
+```python
+from raqeb import RaqebClient
+import psycopg2
+
+client = RaqebClient(api_key="sa_your_key")
+
+# Get temporary database credentials
+creds = client.get_database_credentials(
+    database_id="prod-postgres",
+    ttl_hours=2,
+    access_level="read-only"
+)
+
+# Connect to database
+conn = psycopg2.connect(
+    host="db.example.com",
+    port=5432,
+    database="myapp",
+    user=creds['username'],
+    password=creds['password']
+)
+
+try:
+    # Use the connection
+    cursor = conn.cursor()
+    cursor.execute("SELECT * FROM users LIMIT 10")
+    results = cursor.fetchall()
+    
+finally:
+    conn.close()
+    # Revoke credentials
+    client.revoke_lease(creds['lease_id'])
+```
+
+### Context Manager
+
+```python
+from raqeb import RaqebClient
+
+# Use context manager for automatic cleanup
+with RaqebClient(api_key="sa_your_key") as client:
+    secret = client.get_secret("secret-id")
+    print(secret['value'])
+```
+
+### API Key Management
+
+```python
+from raqeb import RaqebClient
+
+client = RaqebClient(api_key="sa_your_key")
+
+# List API keys
+keys = client.list_api_keys()
+for key in keys:
+    print(f"{key['name']}: {key['key_prefix']}...")
+
+# Create new API key
+new_key = client.create_api_key(
+    name="CI/CD Pipeline",
+    scopes=["secrets:read", "databases:read"],
+    description="Key for automated deployments"
+)
+print(f"New API Key: {new_key['api_key']}")  # Save this!
+
+# Delete API key
+client.delete_api_key("key-id")
+```
+
+## Error Handling
+
+```python
+from raqeb import RaqebClient, AuthenticationError, PermissionError, NotFoundError
+
+client = RaqebClient(api_key="sa_your_key")
+
+try:
+    secret = client.get_secret("secret-id")
+    
+except AuthenticationError:
+    print("Invalid or expired API key")
+    
+except PermissionError:
+    print("Insufficient permissions - check API key scopes")
+    
+except NotFoundError:
+    print("Secret not found")
+    
+except RaqebError as e:
+    print(f"API error: {e}")
+```
+
+## API Reference
+
+### RaqebClient
+
+#### `__init__(api_key, base_url="https://app.raqeb.cloud/api/v1")`
+Initialize the client.
+
+#### `get_secret(secret_id) -> dict`
+Retrieve a secret value.
+
+**Returns:**
+```python
+{
+    'secret_id': 'secret-123',
+    'name': 'API Key',
+    'value': 'secret-value',
+    'retrieved_at': '2026-02-14T16:09:00Z'
+}
+```
+
+#### `get_database_credentials(database_id, ttl_hours=4, access_level='read-only') -> dict`
+Generate temporary database credentials.
+
+**Parameters:**
+- `database_id` (str): Database ID
+- `ttl_hours` (int): Time to live in hours (default: 4)
+- `access_level` (str): 'read-only', 'read-write', or 'admin'
+
+**Returns:**
+```python
+{
+    'lease_id': 'lease-123',
+    'username': 'temp_user_abc',
+    'password': 'temp_pass_xyz',
+    'database_id': 'db-123',
+    'access_level': 'read-only',
+    'issued_at': '2026-02-14T16:09:00Z',
+    'expires_at': '2026-02-14T20:09:00Z',
+    'ttl_seconds': 14400
+}
+```
+
+#### `revoke_lease(lease_id) -> None`
+Revoke a dynamic secret lease.
+
+#### `list_api_keys() -> list`
+List user's API keys.
+
+#### `create_api_key(name, description=None, scopes=None, expires_at=None) -> dict`
+Create a new API key.
+
+#### `delete_api_key(key_id) -> None`
+Delete an API key.
+
+## Environment Variables
+
+You can use environment variables for configuration:
+
+```python
+import os
+from raqeb import RaqebClient
+
+client = RaqebClient(
+    api_key=os.getenv('RAQEB_API_KEY'),
+    base_url=os.getenv('RAQEB_BASE_URL', 'https://app.raqeb.cloud/api/v1')
+)
+```
+
+## Best Practices
+
+1. **Never hardcode API keys** - Use environment variables
+2. **Use minimal scopes** - Only grant necessary permissions
+3. **Set appropriate TTLs** - Use shortest time needed
+4. **Always revoke leases** - Clean up credentials when done
+5. **Handle errors gracefully** - Catch and handle SDK exceptions
+6. **Use context managers** - Automatic resource cleanup
+
+## License
+
+MIT License - see LICENSE file for details
+
+## Support
+
+- Documentation: https://docs.raqeb.cloud
+- Email: support@raqeb.cloud
+- GitHub: https://github.com/raqeb/python-sdk

raqeb-1.0.0/raqeb.egg-info/SOURCES.txt

@@ -0,0 +1,10 @@
+README.md
+setup.py
+raqeb/__init__.py
+raqeb/client.py
+raqeb/exceptions.py
+raqeb.egg-info/PKG-INFO
+raqeb.egg-info/SOURCES.txt
+raqeb.egg-info/dependency_links.txt
+raqeb.egg-info/requires.txt
+raqeb.egg-info/top_level.txt

raqeb-1.0.0/raqeb.egg-info/dependency_links.txt

@@ -0,0 +1 @@
+

raqeb-1.0.0/raqeb.egg-info/requires.txt

@@ -0,0 +1,7 @@
+requests>=2.25.0
+
+[dev]
+pytest>=6.0
+pytest-cov>=2.0
+black>=21.0
+flake8>=3.9

raqeb-1.0.0/raqeb.egg-info/top_level.txt

@@ -0,0 +1 @@
+raqeb

raqeb-1.0.0/setup.cfg

@@ -0,0 +1,4 @@
+[egg_info]
+tag_build = 
+tag_date = 0
+

raqeb-1.0.0/setup.py

@@ -0,0 +1,42 @@
+"""Setup script for Raqeb Python SDK."""
+
+from setuptools import setup, find_packages
+
+with open("README.md", "r", encoding="utf-8") as fh:
+    long_description = fh.read()
+
+setup(
+    name="raqeb",
+    version="1.0.0",
+    author="Raqeb",
+    author_email="support@raqeb.cloud",
+    description="Python SDK for Raqeb Database PAM and Secrets Management",
+    long_description=long_description,
+    long_description_content_type="text/markdown",
+    url="https://github.com/raqeb/python-sdk",
+    packages=find_packages(),
+    classifiers=[
+        "Development Status :: 5 - Production/Stable",
+        "Intended Audience :: Developers",
+        "Topic :: Software Development :: Libraries :: Python Modules",
+        "License :: OSI Approved :: MIT License",
+        "Programming Language :: Python :: 3",
+        "Programming Language :: Python :: 3.7",
+        "Programming Language :: Python :: 3.8",
+        "Programming Language :: Python :: 3.9",
+        "Programming Language :: Python :: 3.10",
+        "Programming Language :: Python :: 3.11",
+    ],
+    python_requires=">=3.7",
+    install_requires=[
+        "requests>=2.25.0",
+    ],
+    extras_require={
+        "dev": [
+            "pytest>=6.0",
+            "pytest-cov>=2.0",
+            "black>=21.0",
+            "flake8>=3.9",
+        ],
+    },
+)