chore: header update + main merge fixes

Co-authored-by: Yuan Teoh <45984206+Yuan325@users.noreply.github.com>

.ci/integration.cloudbuild.yaml

@@ -340,6 +340,26 @@ steps:
           spanner \
           spanner || echo "Integration tests failed." # ignore test failures
 
+  - id: "spanner-admin"
+    name: golang:1
+    waitFor: ["compile-test-binary"]
+    entrypoint: /bin/bash
+    env:
+      - "GOPATH=/gopath"
+      - "SPANNER_PROJECT=$PROJECT_ID"
+      - "SERVICE_ACCOUNT_EMAIL=$SERVICE_ACCOUNT_EMAIL"
+    secretEnv: ["CLIENT_ID"]
+    volumes:
+      - name: "go"
+        path: "/gopath"
+    args:
+      - -c
+      - |
+        .ci/test_with_coverage.sh \
+          "Spanner Admin" \
+          spanneradmin \
+          spanneradmin || echo "Integration tests failed."
+
   - id: "neo4j"
     name: golang:1
     waitFor: ["compile-test-binary"]

cmd/root.go

@@ -221,6 +221,7 @@ import (
 	_ "github.com/googleapis/genai-toolbox/internal/tools/spanner/spannerlistgraphs"
 	_ "github.com/googleapis/genai-toolbox/internal/tools/spanner/spannerlisttables"
 	_ "github.com/googleapis/genai-toolbox/internal/tools/spanner/spannersql"
+	_ "github.com/googleapis/genai-toolbox/internal/tools/spanneradmin/spannercreateinstance"
 	_ "github.com/googleapis/genai-toolbox/internal/tools/sqlite/sqliteexecutesql"
 	_ "github.com/googleapis/genai-toolbox/internal/tools/sqlite/sqlitesql"
 	_ "github.com/googleapis/genai-toolbox/internal/tools/tidb/tidbexecutesql"
@@ -267,6 +268,7 @@ import (
 	_ "github.com/googleapis/genai-toolbox/internal/sources/singlestore"
 	_ "github.com/googleapis/genai-toolbox/internal/sources/snowflake"
 	_ "github.com/googleapis/genai-toolbox/internal/sources/spanner"
+	_ "github.com/googleapis/genai-toolbox/internal/sources/spanneradmin"
 	_ "github.com/googleapis/genai-toolbox/internal/sources/sqlite"
 	_ "github.com/googleapis/genai-toolbox/internal/sources/tidb"
 	_ "github.com/googleapis/genai-toolbox/internal/sources/trino"

docs/SPANNERADMIN_README.md

@@ -0,0 +1,59 @@
+# Cloud Spanner Admin MCP Server
+
+The Cloud Spanner Admin Model Context Protocol (MCP) Server gives AI-powered development tools the ability to manage your Google Cloud Spanner infrastructure. It supports creating instances.
+
+## Features
+
+An editor configured to use the Cloud Spanner Admin MCP server can use its AI capabilities to help you:
+
+- **Provision & Manage Infrastructure** - Create Cloud Spanner instances
+
+## Prerequisites
+
+*   [Node.js](https://nodejs.org/) installed.
+*   A Google Cloud project with the **Cloud Spanner Admin API** enabled.
+*   Ensure [Application Default Credentials](https://cloud.google.com/docs/authentication/gcloud) are available in your environment.
+*   IAM Permissions:
+    *   Cloud Spanner Admin (`roles/spanner.admin`)
+
+## Install & Configuration
+
+In the Antigravity MCP Store, click the "Install" button.
+
+You'll now be able to see all enabled tools in the "Tools" tab.
+
+> [!NOTE]
+> If you encounter issues with Windows Defender blocking the execution, you may need to configure an allowlist. See [Configure exclusions for Microsoft Defender Antivirus](https://learn.microsoft.com/en-us/microsoft-365/security/defender-endpoint/configure-exclusions-microsoft-defender-antivirus?view=o365-worldwide) for more details.
+
+## Usage
+
+Once configured, the MCP server will automatically provide Cloud Spanner Admin capabilities to your AI assistant. You can:
+
+   * "Create a new Spanner instance named 'my-spanner-instance' in the 'my-gcp-project' project with config 'regional-us-central1', edition 'ENTERPRISE', and 1 node."
+
+## Server Capabilities
+
+The Cloud Spanner Admin MCP server provides the following tools:
+
+| Tool Name         | Description                      |
+|:------------------|:---------------------------------|
+| `create_instance` | Create a Cloud Spanner instance. |
+
+## Custom MCP Server Configuration
+
+Add the following configuration to your MCP client (e.g., `settings.json` for Gemini CLI, `mcp_config.json` for Antigravity):
+
+```json
+{
+  "mcpServers": {
+    "spanner-admin": {
+      "command": "npx",
+      "args": ["-y", "@toolbox-sdk/server", "--prebuilt", "spanner-admin", "--stdio"]
+    }
+  }
+}
+```
+
+## Documentation
+
+For more information, visit the [Cloud Spanner Admin API documentation](https://cloud.google.com/spanner/docs/reference/rpc/google.spanner.admin.instance.v1).

docs/en/resources/sources/spanner-admin.md

@@ -0,0 +1,42 @@
+---
+title: Spanner Admin
+type: docs
+weight: 1
+description: "A \"spanner-admin\" source provides a client for the Cloud Spanner Admin API.\n"
+alias: [/resources/sources/spanner-admin]
+---
+
+## About
+
+The `spanner-admin` source provides a client to interact with the [Google
+Cloud Spanner Admin API](https://cloud.google.com/spanner/docs/reference/rpc/google.spanner.admin.instance.v1). This
+allows tools to perform administrative tasks on Spanner instances, such as
+creating instances.
+
+Authentication can be handled in two ways:
+
+1.  **Application Default Credentials (ADC):** By default, the source uses ADC
+    to authenticate with the API.
+2.  **Client-side OAuth:** If `useClientOAuth` is set to `true`, the source will
+    expect an OAuth 2.0 access token to be provided by the client (e.g., a web
+    browser) for each request.
+
+## Example
+
+```yaml
+sources:
+    my-spanner-admin:
+        kind: spanner-admin
+
+    my-oauth-spanner-admin:
+        kind: spanner-admin
+        useClientOAuth: true
+```
+
+## Reference
+
+| **field**      | **type** | **required** | **description**                                                                                                                                |
+| -------------- | :------: | :----------: | ---------------------------------------------------------------------------------------------------------------------------------------------- |
+| kind           |  string  |     true     | Must be "spanner-admin".                                                                                                                       |
+| defaultProject |  string  |     false    | The Google Cloud project ID to use for Spanner infrastructure tools.                                                                           |
+| useClientOAuth |  boolean |     false    | If true, the source will use client-side OAuth for authorization. Otherwise, it will use Application Default Credentials. Defaults to `false`. |

docs/en/resources/tools/spanneradmin/spanner-create-instance.md

@@ -0,0 +1,52 @@
+---
+title: spanner-create-instance
+type: docs
+weight: 2
+description: "Create a Cloud Spanner instance."
+---
+
+The `spanner-create-instance` tool creates a new Cloud Spanner instance in a
+specified Google Cloud project.
+
+{{< notice info >}}
+This tool uses the `spanner-admin` source.
+{{< /notice >}}
+
+## Configuration
+
+Here is an example of how to configure the `spanner-create-instance` tool in
+your `tools.yaml` file:
+
+```yaml
+sources:
+  my-spanner-admin-source:
+    kind: spanner-admin
+
+tools:
+  create_my_spanner_instance:
+    kind: spanner-create-instance
+    source: my-spanner-admin-source
+    description: "Creates a Spanner instance."
+```
+
+## Parameters
+
+The `spanner-create-instance` tool has the following parameters:
+
+| **field**       | **type** | **required** | **description**                                                                      |
+| --------------- | :------: | :----------: | ------------------------------------------------------------------------------------ |
+| project         |  string  |     true     | The Google Cloud project ID.                                                         |
+| instanceId      |  string  |     true     | The ID of the instance to create.                                                    |
+| displayName     |  string  |     true     | The display name of the instance.                                                    |
+| config          |  string  |     true     | The instance configuration (e.g., `regional-us-central1`).                           |
+| nodeCount       | integer  |     true     | The number of nodes. Mutually exclusive with `processingUnits` (one must be 0).      |
+| processingUnits | integer  |     true     | The number of processing units. Mutually exclusive with `nodeCount` (one must be 0). |
+| edition         |  string  |    false     | The edition of the instance (`STANDARD`, `ENTERPRISE`, `ENTERPRISE_PLUS`).           |
+
+## Reference
+
+| **field**   | **type** | **required** | **description**                                              |
+| ----------- | :------: | :----------: | ------------------------------------------------------------ |
+| kind        |  string  |     true     | Must be `spanner-create-instance`.                           |
+| source      |  string  |     true     | The name of the `spanner-admin` source to use for this tool. |
+| description |  string  |    false     | A description of the tool that is passed to the agent.       |

internal/prebuiltconfigs/prebuiltconfigs_test.go

@@ -50,6 +50,7 @@ var expectedToolSources = []string{
 	"serverless-spark",
 	"singlestore",
 	"snowflake",
+	"spanner-admin",
 	"spanner-postgres",
 	"spanner",
 	"sqlite",

internal/prebuiltconfigs/tools/spanner-admin.yaml

@@ -0,0 +1,27 @@
+# Copyright 2026 Google LLC
+#
+# Licensed under the Apache License, Version 2.0 (the "License");
+# you may not use this file except in compliance with the License.
+# You may obtain a copy of the License at
+#
+#     http://www.apache.org/licenses/LICENSE-2.0
+#
+# Unless required by applicable law or agreed to in writing, software
+# distributed under the License is distributed on an "AS IS" BASIS,
+# WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
+# See the License for the specific language governing permissions and
+# limitations under the License.
+
+sources:
+  spanner-admin-source:
+    kind: spanner-admin
+    defaultProject: ${SPANNER_PROJECT:}
+
+tools:
+  create_instance:
+    kind: spanner-create-instance
+    source: spanner-admin-source
+
+toolsets:
+  spanner_admin_tools:
+    - create_instance

internal/sources/spanneradmin/spanneradmin.go

@@ -0,0 +1,120 @@
+// Copyright 2026 Google LLC
+//
+// Licensed under the Apache License, Version 2.0 (the "License");
+// you may not use this file except in compliance with the License.
+// You may obtain a copy of the License at
+//
+//      http://www.apache.org/licenses/LICENSE-2.0
+//
+// Unless required by applicable law or agreed to in writing, software
+// distributed under the License is distributed on an "AS IS" BASIS,
+// WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
+// See the License for the specific language governing permissions and
+// limitations under the License.
+
+package spanneradmin
+
+import (
+	"context"
+	"fmt"
+
+	instance "cloud.google.com/go/spanner/admin/instance/apiv1"
+	"github.com/goccy/go-yaml"
+	"github.com/googleapis/genai-toolbox/internal/sources"
+	"github.com/googleapis/genai-toolbox/internal/util"
+	"go.opentelemetry.io/otel/trace"
+	"golang.org/x/oauth2"
+	"google.golang.org/api/option"
+)
+
+const SourceKind string = "spanner-admin"
+
+// validate interface
+var _ sources.SourceConfig = Config{}
+
+func init() {
+	if !sources.Register(SourceKind, newConfig) {
+		panic(fmt.Sprintf("source kind %q already registered", SourceKind))
+	}
+}
+
+func newConfig(ctx context.Context, name string, decoder *yaml.Decoder) (sources.SourceConfig, error) {
+	actual := Config{Name: name}
+	if err := decoder.DecodeContext(ctx, &actual); err != nil {
+		return nil, err
+	}
+	return actual, nil
+}
+
+type Config struct {
+	Name           string `yaml:"name" validate:"required"`
+	Kind           string `yaml:"kind" validate:"required"`
+	DefaultProject string `yaml:"defaultProject"`
+	UseClientOAuth bool   `yaml:"useClientOAuth"`
+}
+
+func (r Config) SourceConfigKind() string {
+	return SourceKind
+}
+
+// Initialize initializes a Spanner Admin Source instance.
+func (r Config) Initialize(ctx context.Context, tracer trace.Tracer) (sources.Source, error) {
+	var client *instance.InstanceAdminClient
+
+	if !r.UseClientOAuth {
+		ua, err := util.UserAgentFromContext(ctx)
+		if err != nil {
+			return nil, fmt.Errorf("error in User Agent retrieval: %s", err)
+		}
+		// Use Application Default Credentials
+		client, err = instance.NewInstanceAdminClient(ctx, option.WithUserAgent(ua))
+		if err != nil {
+			return nil, fmt.Errorf("error creating new spanner instance admin client: %w", err)
+		}
+	}
+
+	s := &Source{
+		Config: r,
+		Client: client,
+	}
+	return s, nil
+}
+
+var _ sources.Source = &Source{}
+
+type Source struct {
+	Config
+	Client *instance.InstanceAdminClient
+}
+
+func (s *Source) SourceKind() string {
+	return SourceKind
+}
+
+func (s *Source) ToConfig() sources.SourceConfig {
+	return s.Config
+}
+
+func (s *Source) GetDefaultProject() string {
+	return s.DefaultProject
+}
+
+func (s *Source) GetClient(ctx context.Context, accessToken string) (*instance.InstanceAdminClient, error) {
+	if s.UseClientOAuth {
+		token := &oauth2.Token{AccessToken: accessToken}
+		ua, err := util.UserAgentFromContext(ctx)
+		if err != nil {
+			return nil, err
+		}
+		client, err := instance.NewInstanceAdminClient(ctx, option.WithTokenSource(oauth2.StaticTokenSource(token)), option.WithUserAgent(ua))
+		if err != nil {
+			return nil, fmt.Errorf("error creating new spanner instance admin client: %w", err)
+		}
+		return client, nil
+	}
+	return s.Client, nil
+}
+
+func (s *Source) UseClientAuthorization() bool {
+	return s.UseClientOAuth
+}

internal/sources/spanneradmin/spanneradmin_test.go

@@ -0,0 +1,135 @@
+// Copyright 2026 Google LLC
+//
+// Licensed under the Apache License, Version 2.0 (the "License");
+// you may not use this file except in compliance with the License.
+// You may obtain a copy of the License at
+//
+//     http://www.apache.org/licenses/LICENSE-2.0
+//
+// Unless required by applicable law or agreed to in writing, software
+// distributed under the License is distributed on an "AS IS" BASIS,
+// WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
+// See the License for the specific language governing permissions and
+// limitations under the License.
+
+package spanneradmin_test
+
+import (
+	"testing"
+
+	yaml "github.com/goccy/go-yaml"
+	"github.com/google/go-cmp/cmp"
+	"github.com/googleapis/genai-toolbox/internal/server"
+	"github.com/googleapis/genai-toolbox/internal/sources"
+	"github.com/googleapis/genai-toolbox/internal/sources/spanneradmin"
+	"github.com/googleapis/genai-toolbox/internal/testutils"
+)
+
+func TestParseFromYamlSpannerAdmin(t *testing.T) {
+	t.Parallel()
+	tcs := []struct {
+		desc string
+		in   string
+		want server.SourceConfigs
+	}{
+		{
+			desc: "basic example",
+			in: `
+			sources:
+				my-spanner-admin-instance:
+					kind: spanner-admin
+			`,
+			want: map[string]sources.SourceConfig{
+				"my-spanner-admin-instance": spanneradmin.Config{
+					Name:           "my-spanner-admin-instance",
+					Kind:           spanneradmin.SourceKind,
+					UseClientOAuth: false,
+				},
+			},
+		},
+		{
+			desc: "use client auth example",
+			in: `
+			sources:
+				my-spanner-admin-instance:
+					kind: spanner-admin
+					useClientOAuth: true
+			`,
+			want: map[string]sources.SourceConfig{
+				"my-spanner-admin-instance": spanneradmin.Config{
+					Name:           "my-spanner-admin-instance",
+					Kind:           spanneradmin.SourceKind,
+					UseClientOAuth: true,
+				},
+			},
+		},
+	}
+	for _, tc := range tcs {
+		tc := tc
+		t.Run(tc.desc, func(t *testing.T) {
+			t.Parallel()
+			got := struct {
+				Sources server.SourceConfigs `yaml:"sources"`
+			}{}
+			// Parse contents
+			err := yaml.Unmarshal(testutils.FormatYaml(tc.in), &got)
+			if err != nil {
+				t.Fatalf("unable to unmarshal: %s", err)
+			}
+			if !cmp.Equal(tc.want, got.Sources) {
+				t.Fatalf("incorrect parse: want %v, got %v", tc.want, got.Sources)
+			}
+		})
+	}
+}
+
+func TestFailParseFromYaml(t *testing.T) {
+	t.Parallel()
+	tcs := []struct {
+		desc string
+		in   string
+		err  string
+	}{
+		{
+			desc: "extra field",
+			in: `
+			sources:
+				my-spanner-admin-instance:
+					kind: spanner-admin
+					project: test-project
+			`,
+			err: `unable to parse source "my-spanner-admin-instance" as "spanner-admin": [2:1] unknown field "project"
+   1 | kind: spanner-admin
+>  2 | project: test-project
+       ^
+`,
+		},
+		{
+			desc: "missing required field",
+			in: `
+			sources:
+				my-spanner-admin-instance:
+					useClientOAuth: true
+			`,
+			err: "missing 'kind' field for source \"my-spanner-admin-instance\"",
+		},
+	}
+	for _, tc := range tcs {
+		tc := tc
+		t.Run(tc.desc, func(t *testing.T) {
+			t.Parallel()
+			got := struct {
+				Sources server.SourceConfigs `yaml:"sources"`
+			}{}
+			// Parse contents
+			err := yaml.Unmarshal(testutils.FormatYaml(tc.in), &got)
+			if err == nil {
+				t.Fatalf("expect parsing to fail")
+			}
+			errStr := err.Error()
+			if errStr != tc.err {
+				t.Fatalf("unexpected error: got %q, want %q", errStr, tc.err)
+			}
+		})
+	}
+}

internal/tools/spanneradmin/spannercreateinstance/spannercreateinstance.go

@@ -0,0 +1,233 @@
+// Copyright 2026 Google LLC
+//
+// Licensed under the Apache License, Version 2.0 (the "License");
+// you may not use this file except in compliance with the License.
+// You may obtain a copy of the License at
+//
+//      http://www.apache.org/licenses/LICENSE-2.0
+//
+// Unless required by applicable law or agreed to in writing, software
+// distributed under the License is distributed on an "AS IS" BASIS,
+// WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
+// See the License for the specific language governing permissions and
+// limitations under the License.
+
+package spannercreateinstance
+
+import (
+	"context"
+	"fmt"
+
+	instance "cloud.google.com/go/spanner/admin/instance/apiv1"
+	"cloud.google.com/go/spanner/admin/instance/apiv1/instancepb"
+	"github.com/goccy/go-yaml"
+	"github.com/googleapis/genai-toolbox/internal/embeddingmodels"
+	"github.com/googleapis/genai-toolbox/internal/sources"
+	"github.com/googleapis/genai-toolbox/internal/tools"
+	"github.com/googleapis/genai-toolbox/internal/util/parameters"
+)
+
+const kind string = "spanner-create-instance"
+
+func init() {
+	if !tools.Register(kind, newConfig) {
+		panic(fmt.Sprintf("tool kind %q already registered", kind))
+	}
+}
+
+func newConfig(ctx context.Context, name string, decoder *yaml.Decoder) (tools.ToolConfig, error) {
+	actual := Config{Name: name}
+	if err := decoder.DecodeContext(ctx, &actual); err != nil {
+		return nil, err
+	}
+	return actual, nil
+}
+
+type compatibleSource interface {
+	GetDefaultProject() string
+	GetClient(context.Context, string) (*instance.InstanceAdminClient, error)
+	UseClientAuthorization() bool
+}
+
+// Config defines the configuration for the create-instance tool.
+type Config struct {
+	Name         string   `yaml:"name" validate:"required"`
+	Kind         string   `yaml:"kind" validate:"required"`
+	Description  string   `yaml:"description"`
+	Source       string   `yaml:"source" validate:"required"`
+	AuthRequired []string `yaml:"authRequired"`
+}
+
+// validate interface
+var _ tools.ToolConfig = Config{}
+
+// ToolConfigKind returns the kind of the tool.
+func (cfg Config) ToolConfigKind() string {
+	return kind
+}
+
+// Initialize initializes the tool from the configuration.
+func (cfg Config) Initialize(srcs map[string]sources.Source) (tools.Tool, error) {
+	rawS, ok := srcs[cfg.Source]
+	if !ok {
+		return nil, fmt.Errorf("no source named %q configured", cfg.Source)
+	}
+	s, ok := rawS.(compatibleSource)
+	if !ok {
+		return nil, fmt.Errorf("invalid source for %q tool: source %q not compatible", kind, cfg.Source)
+	}
+
+	project := s.GetDefaultProject()
+	var projectParam parameters.Parameter
+	if project != "" {
+		projectParam = parameters.NewStringParameterWithDefault("project", project, "The GCP project ID.")
+	} else {
+		projectParam = parameters.NewStringParameter("project", "The project ID")
+	}
+
+	allParameters := parameters.Parameters{
+		projectParam,
+		parameters.NewStringParameter("instanceId", "The ID of the instance"),
+		parameters.NewStringParameter("displayName", "The display name of the instance"),
+		parameters.NewStringParameter("config", "The instance configuration (e.g., regional-us-central1)"),
+		parameters.NewIntParameter("nodeCount", "The number of nodes, mutually exclusive with processingUnits (one must be 0)"),
+		parameters.NewIntParameter("processingUnits", "The number of processing units, mutually exclusive with nodeCount (one must be 0)"),
+		parameters.NewStringParameter("edition", "The edition of the instance (STANDARD, ENTERPRISE, ENTERPRISE_PLUS)"),
+	}
+
+	paramManifest := allParameters.Manifest()
+
+	description := cfg.Description
+	if description == "" {
+		description = "Creates a Spanner instance."
+	}
+	mcpManifest := tools.GetMcpManifest(cfg.Name, description, cfg.AuthRequired, allParameters, nil)
+
+	return Tool{
+		Config:      cfg,
+		AllParams:   allParameters,
+		manifest:    tools.Manifest{Description: description, Parameters: paramManifest, AuthRequired: cfg.AuthRequired},
+		mcpManifest: mcpManifest,
+	}, nil
+}
+
+// Tool represents the create-instance tool.
+type Tool struct {
+	Config
+	AllParams   parameters.Parameters
+	manifest    tools.Manifest
+	mcpManifest tools.McpManifest
+}
+
+func (t Tool) ToConfig() tools.ToolConfig {
+	return t.Config
+}
+
+// Invoke executes the tool's logic.
+func (t Tool) Invoke(ctx context.Context, resourceMgr tools.SourceProvider, params parameters.ParamValues, accessToken tools.AccessToken) (any, error) {
+	paramsMap := params.AsMap()
+
+	project, _ := paramsMap["project"].(string)
+	instanceId, _ := paramsMap["instanceId"].(string)
+	displayName, _ := paramsMap["displayName"].(string)
+	config, _ := paramsMap["config"].(string)
+	nodeCount, _ := paramsMap["nodeCount"].(int)
+	processingUnits, _ := paramsMap["processingUnits"].(int)
+	editionStr, _ := paramsMap["edition"].(string)
+
+	if (nodeCount > 0 && processingUnits > 0) || (nodeCount == 0 && processingUnits == 0) {
+		return nil, fmt.Errorf("one of nodeCount or processingUnits must be positive, and the other must be 0")
+	}
+
+	source, err := tools.GetCompatibleSource[compatibleSource](resourceMgr, t.Source, t.Name, t.Kind)
+	if err != nil {
+		return nil, err
+	}
+
+	client, err := source.GetClient(ctx, string(accessToken))
+	if err != nil {
+		return nil, err
+	}
+	if source.UseClientAuthorization() {
+		defer client.Close()
+	}
+
+	parent := fmt.Sprintf("projects/%s", project)
+	instanceConfig := fmt.Sprintf("projects/%s/instanceConfigs/%s", project, config)
+
+	var edition instancepb.Instance_Edition
+	switch editionStr {
+	case "STANDARD":
+		edition = instancepb.Instance_STANDARD
+	case "ENTERPRISE":
+		edition = instancepb.Instance_ENTERPRISE
+	case "ENTERPRISE_PLUS":
+		edition = instancepb.Instance_ENTERPRISE_PLUS
+	default:
+		edition = instancepb.Instance_EDITION_UNSPECIFIED
+	}
+
+	// Construct the instance object
+	instance := &instancepb.Instance{
+		Config:          instanceConfig,
+		DisplayName:     displayName,
+		Edition:         edition,
+		NodeCount:       int32(nodeCount),
+		ProcessingUnits: int32(processingUnits),
+	}
+
+	req := &instancepb.CreateInstanceRequest{
+		Parent:     parent,
+		InstanceId: instanceId,
+		Instance:   instance,
+	}
+
+	op, err := client.CreateInstance(ctx, req)
+	if err != nil {
+		return nil, fmt.Errorf("failed to create instance: %w", err)
+	}
+
+	// Wait for the operation to complete
+	resp, err := op.Wait(ctx)
+	if err != nil {
+		return nil, fmt.Errorf("failed to wait for create instance operation: %w", err)
+	}
+
+	return resp, nil
+}
+
+// ParseParams parses the parameters for the tool.
+func (t Tool) ParseParams(data map[string]any, claims map[string]map[string]any) (parameters.ParamValues, error) {
+	return parameters.ParseParams(t.AllParams, data, claims)
+}
+
+func (t Tool) EmbedParams(ctx context.Context, paramValues parameters.ParamValues, embeddingModelsMap map[string]embeddingmodels.EmbeddingModel) (parameters.ParamValues, error) {
+	return parameters.EmbedParams(ctx, t.AllParams, paramValues, embeddingModelsMap, nil)
+}
+
+// Manifest returns the tool's manifest.
+func (t Tool) Manifest() tools.Manifest {
+	return t.manifest
+}
+
+// McpManifest returns the tool's MCP manifest.
+func (t Tool) McpManifest() tools.McpManifest {
+	return t.mcpManifest
+}
+
+// Authorized checks if the tool is authorized.
+func (t Tool) Authorized(verifiedAuthServices []string) bool {
+	return true
+}
+
+func (t Tool) RequiresClientAuthorization(resourceMgr tools.SourceProvider) (bool, error) {
+	source, err := tools.GetCompatibleSource[compatibleSource](resourceMgr, t.Source, t.Name, t.Kind)
+	if err != nil {
+		return false, err
+	}
+	return source.UseClientAuthorization(), nil
+}
+
+func (t Tool) GetAuthTokenHeaderName(resourceMgr tools.SourceProvider) (string, error) {
+	return "Authorization", nil
+}

internal/tools/spanneradmin/spannercreateinstance/spannercreateinstance_test.go

@@ -0,0 +1,110 @@
+// Copyright 2026 Google LLC
+//
+// Licensed under the Apache License, Version 2.0 (the "License");
+// you may not use this file except in compliance with the License.
+// You may obtain a copy of the License at
+//
+//      http://www.apache.org/licenses/LICENSE-2.0
+//
+// Unless required by applicable law or agreed to in writing, software
+// distributed under the License is distributed on an "AS IS" BASIS,
+// WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
+// See the License for the specific language governing permissions and
+// limitations under the License.
+
+package spannercreateinstance_test
+
+import (
+	"context"
+	"testing"
+
+	yaml "github.com/goccy/go-yaml"
+	"github.com/google/go-cmp/cmp"
+	"github.com/googleapis/genai-toolbox/internal/server"
+	"github.com/googleapis/genai-toolbox/internal/testutils"
+	"github.com/googleapis/genai-toolbox/internal/tools/spanneradmin/spannercreateinstance"
+	"github.com/googleapis/genai-toolbox/internal/util/parameters"
+)
+
+func TestParseFromYaml(t *testing.T) {
+	ctx, err := testutils.ContextWithNewLogger()
+	if err != nil {
+		t.Fatalf("unexpected error: %s", err)
+	}
+	tcs := []struct {
+		desc string
+		in   string
+		want server.ToolConfigs
+	}{
+		{
+			desc: "basic example",
+			in: `
+			tools:
+				create-instance-tool:
+					kind: spanner-create-instance
+					description: a test description
+					source: a-source
+			`,
+			want: server.ToolConfigs{
+				"create-instance-tool": spannercreateinstance.Config{
+					Name:         "create-instance-tool",
+					Kind:         "spanner-create-instance",
+					Description:  "a test description",
+					Source:       "a-source",
+					AuthRequired: []string{},
+				},
+			},
+		},
+	}
+	for _, tc := range tcs {
+		t.Run(tc.desc, func(t *testing.T) {
+			got := struct {
+				Tools server.ToolConfigs `yaml:"tools"`
+			}{}
+			// Parse contents
+			err := yaml.UnmarshalContext(ctx, testutils.FormatYaml(tc.in), &got)
+			if err != nil {
+				t.Fatalf("unable to unmarshal: %s", err)
+			}
+			if diff := cmp.Diff(tc.want, got.Tools); diff != "" {
+				t.Fatalf("incorrect parse: diff %v", diff)
+			}
+		})
+	}
+}
+
+func TestInvokeNodeCountAndProcessingUnitsValidation(t *testing.T) {
+	t.Parallel()
+	testCases := []struct {
+		name    string
+		params  parameters.ParamValues
+		wantErr string
+	}{
+		{
+			name: "Both positive",
+			params: parameters.ParamValues{
+				{Name: "nodeCount", Value: 1},
+				{Name: "processingUnits", Value: 1000},
+			},
+			wantErr: "one of nodeCount or processingUnits must be positive, and the other must be 0",
+		},
+		{
+			name: "Both zero",
+			params: parameters.ParamValues{
+				{Name: "nodeCount", Value: 0},
+				{Name: "processingUnits", Value: 0},
+			},
+			wantErr: "one of nodeCount or processingUnits must be positive, and the other must be 0",
+		},
+	}
+
+	for _, tc := range testCases {
+		t.Run(tc.name, func(t *testing.T) {
+			tool := spannercreateinstance.Tool{}
+			_, err := tool.Invoke(context.Background(), nil, tc.params, "")
+			if err == nil || err.Error() != tc.wantErr {
+				t.Errorf("Invoke() error = %v, wantErr %v", err, tc.wantErr)
+			}
+		})
+	}
+}

packages/release_dep_packages.sh

@@ -1,15 +0,0 @@
-cd server-darwin-arm64
-npm pack .
-npm publish --access public
-
-cd ../server-darwin-x64
-npm pack .
-npm publish --access public
-
-cd ../server-linux-x64
-npm pack .
-npm publish --access public
-
-cd ../server-win32-x64
-npm pack .
-npm publish --access public

packages/server-darwin-arm64/README.md

@@ -1,6 +0,0 @@
-# @toolbox-sdk/server-darwin-arm64
-
-Platform-specific binary for the `toolbox` package on Darwin arm64.
-This package is automatically installed by the main `@toolbox-sdk/server` package and is not intended to be installed directly.
-
-For more information, visit the [toolbox npm package](https://www.npmjs.com/package/@toolbox-sdk/server).

packages/server-darwin-arm64/package-lock.json

@@ -1,19 +0,0 @@
-{
-  "name": "@toolbox-sdk/server-darwin-arm64",
-  "version": "0.25.0",
-  "lockfileVersion": 3,
-  "requires": true,
-  "packages": {
-    "": {
-      "name": "@toolbox-sdk/server-darwin-arm64",
-      "version": "0.25.0",
-      "cpu": [
-        "arm64"
-      ],
-      "license": "Apache-2.0",
-      "os": [
-        "darwin"
-      ]
-    }
-  }
-}

packages/server-darwin-arm64/package.json

@@ -1,20 +0,0 @@
-{
-  "name": "@toolbox-sdk/server-darwin-arm64",
-  "version": "0.25.0",
-  "license": "Apache-2.0",
-  "author": "Google LLC",
-  "os": [
-    "darwin"
-  ],
-  "cpu": [
-    "arm64"
-  ],
-  "main": "bin/toolbox",
-  "repository": "googleapis/genai-toolbox",
-  "scripts": {
-    "prepack": "node scripts/downloadBinary.js darwin arm64"
-  },
-  "files": [
-    "bin/toolbox"
-  ]
-}

packages/server-darwin-arm64/scripts/downloadBinary.js

@@ -1,85 +0,0 @@
-const fs = require('fs');
-const path = require('path');
-const https = require('https');
-const { execSync } = require('child_process');
-
-// 1. Configuration
-const PLATFORM_MAP = {
-  'linux': 'linux',
-  'darwin': 'darwin',
-  'win32': 'windows'
-};
-
-const ARCH_MAP = {
-  'x64': 'amd64',
-  'arm64': 'arm64'
-};
-
-const args = process.argv.slice(2);
-if (args.length < 2) {
-  console.error("Usage: node download-binary.js <platform> <arch>");
-  process.exit(1);
-}
-
-const [targetPlatform, targetArch] = args;
-
-// 2. Determine Version
-const version = fs.readFileSync(path.join(process.cwd(), 'version.txt'), 'utf8').trim(); 
-
-// 3. Construct URL
-const gcsPlatform = PLATFORM_MAP[targetPlatform];
-const gcsArch = ARCH_MAP[targetArch];
-
-if (!gcsPlatform || !gcsArch) {
-  console.error(`Unsupported platform/arch: ${targetPlatform}/${targetArch}`);
-  process.exit(1);
-}
-
-const extension = targetPlatform === 'win32' ? '.exe' : '';
-const binaryName = `toolbox${extension}`;
-const url = `https://storage.googleapis.com/genai-toolbox/v${version}/${gcsPlatform}/${gcsArch}/${binaryName}`;
-
-// 4. Prepare Output
-const binDir = path.join(process.cwd(), 'bin');
-if (!fs.existsSync(binDir)) {
-  fs.mkdirSync(binDir, { recursive: true });
-}
-const destPath = path.join(binDir, binaryName);
-
-if (fs.existsSync(destPath)) {
-  console.log(`[Skipped] Binary already exists at ${destPath}`);
-  process.exit(0);
-}
-
-console.log(`[Prepack] Downloading ${binaryName} for ${targetPlatform}/${targetArch}...`);
-console.log(`[Source]  ${url}`);
-
-// 5. Download Function
-const file = fs.createWriteStream(destPath);
-https.get(url, function(response) {
-  if (response.statusCode !== 200) {
-    console.error(`❌ Failed to download. Status Code: ${response.statusCode}`);
-    fs.unlink(destPath, () => {}); // Delete partial file
-    process.exit(1);
-  }
-
-  response.pipe(file);
-
-  file.on('finish', () => {
-    file.close(() => {
-      // 6. Make executable (Unix only)
-      if (targetPlatform !== 'win32') {
-        try {
-          execSync(`chmod +x "${destPath}"`);
-        } catch (err) {
-          console.warn("⚠️  Could not set executable permissions (chmod failed).");
-        }
-      }
-      console.log(`✅ Success! Binary saved to ${destPath}`);
-    });
-  });
-}).on('error', function(err) {
-  fs.unlink(destPath, () => {});
-  console.error(`❌ Download Error: ${err.message}`);
-  process.exit(1);
-});

packages/server-darwin-arm64/version.txt

@@ -1 +0,0 @@
-0.25.0

packages/server-darwin-x64/README.md

@@ -1,6 +0,0 @@
-# @toolbox-sdk/server-darwin-x64
-
-Platform-specific binary for the `toolbox` package on Darwin x64.
-This package is automatically installed by the main `@toolbox-sdk/server` package and is not intended to be installed directly.
-
-For more information, visit the [toolbox npm package](https://www.npmjs.com/package/@toolbox-sdk/server).

packages/server-darwin-x64/package-lock.json

@@ -1,19 +0,0 @@
-{
-  "name": "@toolbox-sdk/server-darwin-x64",
-  "version": "0.25.0",
-  "lockfileVersion": 3,
-  "requires": true,
-  "packages": {
-    "": {
-      "name": "@toolbox-sdk/server-darwin-x64",
-      "version": "0.25.0",
-      "cpu": [
-        "x64"
-      ],
-      "license": "Apache-2.0",
-      "os": [
-        "darwin"
-      ]
-    }
-  }
-}

packages/server-darwin-x64/package.json

@@ -1,20 +0,0 @@
-{
-  "name": "@toolbox-sdk/server-darwin-x64",
-  "version": "0.25.0",
-  "license": "Apache-2.0",
-  "author": "Google LLC",
-  "os": [
-    "darwin"
-  ],
-  "cpu": [
-    "x64"
-  ],
-  "main": "bin/toolbox",
-  "repository": "googleapis/genai-toolbox",
-  "scripts": {
-    "prepack": "node scripts/downloadBinary.js darwin x64"
-  },
-  "files": [
-    "bin/toolbox"
-  ]
-}

packages/server-darwin-x64/scripts/downloadBinary.js

@@ -1,85 +0,0 @@
-const fs = require('fs');
-const path = require('path');
-const https = require('https');
-const { execSync } = require('child_process');
-
-// 1. Configuration
-const PLATFORM_MAP = {
-  'linux': 'linux',
-  'darwin': 'darwin',
-  'win32': 'windows'
-};
-
-const ARCH_MAP = {
-  'x64': 'amd64',
-  'arm64': 'arm64'
-};
-
-const args = process.argv.slice(2);
-if (args.length < 2) {
-  console.error("Usage: node download-binary.js <platform> <arch>");
-  process.exit(1);
-}
-
-const [targetPlatform, targetArch] = args;
-
-// 2. Determine Version
-const version = fs.readFileSync(path.join(process.cwd(), 'version.txt'), 'utf8').trim(); 
-
-// 3. Construct URL
-const gcsPlatform = PLATFORM_MAP[targetPlatform];
-const gcsArch = ARCH_MAP[targetArch];
-
-if (!gcsPlatform || !gcsArch) {
-  console.error(`Unsupported platform/arch: ${targetPlatform}/${targetArch}`);
-  process.exit(1);
-}
-
-const extension = targetPlatform === 'win32' ? '.exe' : '';
-const binaryName = `toolbox${extension}`;
-const url = `https://storage.googleapis.com/genai-toolbox/v${version}/${gcsPlatform}/${gcsArch}/${binaryName}`;
-
-// 4. Prepare Output
-const binDir = path.join(process.cwd(), 'bin');
-if (!fs.existsSync(binDir)) {
-  fs.mkdirSync(binDir, { recursive: true });
-}
-const destPath = path.join(binDir, binaryName);
-
-if (fs.existsSync(destPath)) {
-  console.log(`[Skipped] Binary already exists at ${destPath}`);
-  process.exit(0);
-}
-
-console.log(`[Prepack] Downloading ${binaryName} for ${targetPlatform}/${targetArch}...`);
-console.log(`[Source]  ${url}`);
-
-// 5. Download Function
-const file = fs.createWriteStream(destPath);
-https.get(url, function(response) {
-  if (response.statusCode !== 200) {
-    console.error(`❌ Failed to download. Status Code: ${response.statusCode}`);
-    fs.unlink(destPath, () => {}); // Delete partial file
-    process.exit(1);
-  }
-
-  response.pipe(file);
-
-  file.on('finish', () => {
-    file.close(() => {
-      // 6. Make executable (Unix only)
-      if (targetPlatform !== 'win32') {
-        try {
-          execSync(`chmod +x "${destPath}"`);
-        } catch (err) {
-          console.warn("⚠️  Could not set executable permissions (chmod failed).");
-        }
-      }
-      console.log(`✅ Success! Binary saved to ${destPath}`);
-    });
-  });
-}).on('error', function(err) {
-  fs.unlink(destPath, () => {});
-  console.error(`❌ Download Error: ${err.message}`);
-  process.exit(1);
-});

packages/server-darwin-x64/version.txt

@@ -1 +0,0 @@
-0.25.0

packages/server-linux-x64/README.md

@@ -1,7 +0,0 @@
-# @toolbox-sdk/server-linux-x64
-
-Platform-specific binary for the `toolbox` package on Linux x64.
-This package is automatically installed by the main `@toolbox-sdk/server` package and is not intended to be installed directly.
-
-For more information, visit the [toolbox npm package](https://www.npmjs.com/package/@toolbox-sdk/server).
-

packages/server-linux-x64/package-lock.json

@@ -1,19 +0,0 @@
-{
-  "name": "@toolbox-sdk/server-linux-x64",
-  "version": "0.25.0",
-  "lockfileVersion": 3,
-  "requires": true,
-  "packages": {
-    "": {
-      "name": "@toolbox-sdk/server-linux-x64",
-      "version": "0.25.0",
-      "cpu": [
-        "x64"
-      ],
-      "license": "Apache-2.0",
-      "os": [
-        "linux"
-      ]
-    }
-  }
-}

packages/server-linux-x64/package.json

@@ -1,20 +0,0 @@
-{
-  "name": "@toolbox-sdk/server-linux-x64",
-  "version": "0.25.0",
-  "license": "Apache-2.0",
-  "author": "Google LLC",
-  "os": [
-    "linux"
-  ],
-  "cpu": [
-    "x64"
-  ],
-  "main": "bin/toolbox",
-  "repository": "googleapis/genai-toolbox",
-  "scripts": {
-    "prepack": "node scripts/downloadBinary.js linux x64"
-  },
-  "files": [
-    "bin/toolbox"
-  ]
-}

packages/server-linux-x64/scripts/downloadBinary.js

@@ -1,85 +0,0 @@
-const fs = require('fs');
-const path = require('path');
-const https = require('https');
-const { execSync } = require('child_process');
-
-// 1. Configuration
-const PLATFORM_MAP = {
-  'linux': 'linux',
-  'darwin': 'darwin',
-  'win32': 'windows'
-};
-
-const ARCH_MAP = {
-  'x64': 'amd64',
-  'arm64': 'arm64'
-};
-
-const args = process.argv.slice(2);
-if (args.length < 2) {
-  console.error("Usage: node download-binary.js <platform> <arch>");
-  process.exit(1);
-}
-
-const [targetPlatform, targetArch] = args;
-
-// 2. Determine Version
-const version = fs.readFileSync(path.join(process.cwd(), 'version.txt'), 'utf8').trim(); 
-
-// 3. Construct URL
-const gcsPlatform = PLATFORM_MAP[targetPlatform];
-const gcsArch = ARCH_MAP[targetArch];
-
-if (!gcsPlatform || !gcsArch) {
-  console.error(`Unsupported platform/arch: ${targetPlatform}/${targetArch}`);
-  process.exit(1);
-}
-
-const extension = targetPlatform === 'win32' ? '.exe' : '';
-const binaryName = `toolbox${extension}`;
-const url = `https://storage.googleapis.com/genai-toolbox/v${version}/${gcsPlatform}/${gcsArch}/${binaryName}`;
-
-// 4. Prepare Output
-const binDir = path.join(process.cwd(), 'bin');
-if (!fs.existsSync(binDir)) {
-  fs.mkdirSync(binDir, { recursive: true });
-}
-const destPath = path.join(binDir, binaryName);
-
-if (fs.existsSync(destPath)) {
-  console.log(`[Skipped] Binary already exists at ${destPath}`);
-  process.exit(0);
-}
-
-console.log(`[Prepack] Downloading ${binaryName} for ${targetPlatform}/${targetArch}...`);
-console.log(`[Source]  ${url}`);
-
-// 5. Download Function
-const file = fs.createWriteStream(destPath);
-https.get(url, function(response) {
-  if (response.statusCode !== 200) {
-    console.error(`❌ Failed to download. Status Code: ${response.statusCode}`);
-    fs.unlink(destPath, () => {}); // Delete partial file
-    process.exit(1);
-  }
-
-  response.pipe(file);
-
-  file.on('finish', () => {
-    file.close(() => {
-      // 6. Make executable (Unix only)
-      if (targetPlatform !== 'win32') {
-        try {
-          execSync(`chmod +x "${destPath}"`);
-        } catch (err) {
-          console.warn("⚠️  Could not set executable permissions (chmod failed).");
-        }
-      }
-      console.log(`✅ Success! Binary saved to ${destPath}`);
-    });
-  });
-}).on('error', function(err) {
-  fs.unlink(destPath, () => {});
-  console.error(`❌ Download Error: ${err.message}`);
-  process.exit(1);
-});

packages/server-linux-x64/version.txt

@@ -1 +0,0 @@
-0.25.0

packages/server-win32-x64/README.md

@@ -1,7 +0,0 @@
-# @toolbox-sdk/server-win32-x64
-
-Platform-specific binary for the `toolbox` package on Windows x64.
-This package is automatically installed by the main `@toolbox-sdk/server` package and is not intended to be installed directly.
-
-For more information, visit the [toolbox npm package](https://www.npmjs.com/package/@toolbox-sdk/server).
-

packages/server-win32-x64/package-lock.json

@@ -1,19 +0,0 @@
-{
-  "name": "@toolbox-sdk/server-win32-x64",
-  "version": "0.25.0",
-  "lockfileVersion": 3,
-  "requires": true,
-  "packages": {
-    "": {
-      "name": "@toolbox-sdk/server-win32-x64",
-      "version": "0.25.0",
-      "cpu": [
-        "x64"
-      ],
-      "license": "Apache-2.0",
-      "os": [
-        "win32"
-      ]
-    }
-  }
-}

packages/server-win32-x64/package.json

@@ -1,20 +0,0 @@
-{
-  "name": "@toolbox-sdk/server-win32-x64",
-  "version": "0.25.0",
-  "license": "Apache-2.0",
-  "author": "Google LLC",
-  "os": [
-    "win32"
-  ],
-  "cpu": [
-    "x64"
-  ],
-  "main": "bin/toolbox.exe",
-  "repository": "googleapis/genai-toolbox",
-  "scripts": {
-    "prepack": "node scripts/downloadBinary.js win32 x64"
-  },
-  "files": [
-    "bin/toolbox.exe"
-  ]
-}

packages/server-win32-x64/scripts/downloadBinary.js

@@ -1,85 +0,0 @@
-const fs = require('fs');
-const path = require('path');
-const https = require('https');
-const { execSync } = require('child_process');
-
-// 1. Configuration
-const PLATFORM_MAP = {
-  'linux': 'linux',
-  'darwin': 'darwin',
-  'win32': 'windows'
-};
-
-const ARCH_MAP = {
-  'x64': 'amd64',
-  'arm64': 'arm64'
-};
-
-const args = process.argv.slice(2);
-if (args.length < 2) {
-  console.error("Usage: node download-binary.js <platform> <arch>");
-  process.exit(1);
-}
-
-const [targetPlatform, targetArch] = args;
-
-// 2. Determine Version
-const version = fs.readFileSync(path.join(process.cwd(), 'version.txt'), 'utf8').trim(); 
-
-// 3. Construct URL
-const gcsPlatform = PLATFORM_MAP[targetPlatform];
-const gcsArch = ARCH_MAP[targetArch];
-
-if (!gcsPlatform || !gcsArch) {
-  console.error(`Unsupported platform/arch: ${targetPlatform}/${targetArch}`);
-  process.exit(1);
-}
-
-const extension = targetPlatform === 'win32' ? '.exe' : '';
-const binaryName = `toolbox${extension}`;
-const url = `https://storage.googleapis.com/genai-toolbox/v${version}/${gcsPlatform}/${gcsArch}/${binaryName}`;
-
-// 4. Prepare Output
-const binDir = path.join(process.cwd(), 'bin');
-if (!fs.existsSync(binDir)) {
-  fs.mkdirSync(binDir, { recursive: true });
-}
-const destPath = path.join(binDir, binaryName);
-
-if (fs.existsSync(destPath)) {
-  console.log(`[Skipped] Binary already exists at ${destPath}`);
-  process.exit(0);
-}
-
-console.log(`[Prepack] Downloading ${binaryName} for ${targetPlatform}/${targetArch}...`);
-console.log(`[Source]  ${url}`);
-
-// 5. Download Function
-const file = fs.createWriteStream(destPath);
-https.get(url, function(response) {
-  if (response.statusCode !== 200) {
-    console.error(`❌ Failed to download. Status Code: ${response.statusCode}`);
-    fs.unlink(destPath, () => {}); // Delete partial file
-    process.exit(1);
-  }
-
-  response.pipe(file);
-
-  file.on('finish', () => {
-    file.close(() => {
-      // 6. Make executable (Unix only)
-      if (targetPlatform !== 'win32') {
-        try {
-          execSync(`chmod +x "${destPath}"`);
-        } catch (err) {
-          console.warn("⚠️  Could not set executable permissions (chmod failed).");
-        }
-      }
-      console.log(`✅ Success! Binary saved to ${destPath}`);
-    });
-  });
-}).on('error', function(err) {
-  fs.unlink(destPath, () => {});
-  console.error(`❌ Download Error: ${err.message}`);
-  process.exit(1);
-});

packages/server-win32-x64/version.txt

@@ -1 +0,0 @@
-0.25.0

packages/server/README.md

@@ -1,69 +0,0 @@
-# Toolbox
-
-A CLI tool for running a toolbox server.
-
-## Installation
-
-You can install the toolbox globally:
-
-```bash
-npm install -g @toolbox-sdk/server
-```
-
-Or run it directly using npx:
-
-```bash
-npx @toolbox-sdk/server
-```
-
-## Configuration
-
-The toolbox requires a `tools.yaml` file in the current working directory to define sources, tools, and prompts.
-
-### Example `tools.yaml`
-
-```yaml
-sources:
-  my-pg-source:
-    kind: postgres
-    host: 127.0.0.1
-    port: 5432
-    database: toolbox_db
-    user: postgres
-    password: password
-tools:
-  search-hotels-by-name:
-    kind: postgres-sql
-    source: my-pg-source
-    description: Search for hotels based on name.
-    parameters:
-      - name: name
-        type: string
-        description: The name of the hotel.
-    statement: SELECT * FROM hotels WHERE name ILIKE '%' || $1 || '%';
-prompts:
-  code-review:
-    description: "Asks the LLM to analyze code quality and suggest improvements."
-    messages:
-      - role: "user"
-        content: "Please review the following code for quality, correctness, and potential improvements: \n\n{{.code}}"
-    arguments:
-      - name: "code"
-        description: "The code to review"
-        required: true
-```
-
-To learn more on how to configure your toolbox, visit the [official docsite](https://googleapis.github.io/genai-toolbox/getting-started/configure/).
-
-## Platform Support
-
-The toolbox automatically handles platform-specific binaries. Supported platforms include:
-- macOS (arm64, x64)
-- Linux (x64)
-- Windows (x64)
-
-## Resources
-
-For more information, visit the 
-- [MCP Toolbox repository](https://github.com/googleapis/genai-toolbox)
-- [Official Documentation](https://googleapis.github.io/genai-toolbox/getting-started/introduction/)

packages/server/bin/run.js

@@ -1,49 +0,0 @@
-#!/usr/bin/env node
-const { spawn } = require('child_process');
-const path = require('path');
-const os = require('os');
-const fs = require('fs');
-
-const PLATFORMS = {
-  'darwin-arm64': '@toolbox-sdk/server-darwin-arm64',
-  'darwin-x64': '@toolbox-sdk/server-darwin-x64',
-  'linux-x64': '@toolbox-sdk/server-linux-x64',
-  'win32-x64': '@toolbox-sdk/server-win32-x64'
-};
-
-const currentKey = `${os.platform()}-${os.arch()}`;
-const pkgName = PLATFORMS[currentKey];
-
-if (!pkgName) {
-  console.error(`Unsupported platform: ${currentKey}`);
-  process.exit(1);
-}
-
-let binPath;
-try {
-  const pkgJsonPath = require.resolve(`${pkgName}/package.json`);
-  const pkgDir = path.dirname(pkgJsonPath);
-  const binName = os.platform() === 'win32' ? 'toolbox.exe' : 'toolbox';
-  binPath = path.join(pkgDir, 'bin', binName);
-} catch (e) {
-  console.error(`Binary for ${currentKey} not found. Installation failed?`);
-  process.exit(1);
-}
-
-if (os.platform() !== 'win32') {
-  try {
-    fs.chmodSync(binPath, 0o755);
-    if (os.platform() === 'darwin') {
-      const { execSync } = require('child_process');
-      try {
-        execSync(`xattr -d com.apple.quarantine "${binPath}"`, { stdio: 'ignore' });
-      } catch (e) {
-      }
-    }
-  } catch (e) {
-    console.warn(`Could not set execute permissions on ${binPath}: ${e.message}`);
-  }
-}
-
-spawn(binPath, process.argv.slice(2), { stdio: 'inherit' })
-  .on('exit', process.exit);

packages/server/package-lock.json

@@ -1,74 +0,0 @@
-{
-  "name": "@toolbox-sdk/server",
-  "version": "0.25.0",
-  "lockfileVersion": 3,
-  "requires": true,
-  "packages": {
-    "": {
-      "name": "@toolbox-sdk/server",
-      "version": "0.25.0",
-      "license": "Apache-2.0",
-      "bin": {
-        "toolbox": "bin/run.js"
-      },
-      "optionalDependencies": {
-        "@toolbox-sdk/server-darwin-arm64": "0.25.0",
-        "@toolbox-sdk/server-darwin-x64": "0.25.0",
-        "@toolbox-sdk/server-linux-x64": "0.25.0",
-        "@toolbox-sdk/server-win32-x64": "0.25.0"
-      }
-    },
-    "node_modules/@toolbox-sdk/server-darwin-arm64": {
-      "version": "0.25.0",
-      "resolved": "https://registry.npmjs.org/@toolbox-sdk/server-darwin-arm64/-/server-darwin-arm64-0.25.0.tgz",
-      "integrity": "sha512-HNAfaDOg2ggnZObJkh5JxoUtfL0WiA2nvDB7qNMdP3130Jgrc9y6rjpGVgN0ntk9zPhioussfbDDgc36jUTq+g==",
-      "cpu": [
-        "arm64"
-      ],
-      "license": "Apache-2.0",
-      "optional": true,
-      "os": [
-        "darwin"
-      ]
-    },
-    "node_modules/@toolbox-sdk/server-darwin-x64": {
-      "version": "0.25.0",
-      "resolved": "https://registry.npmjs.org/@toolbox-sdk/server-darwin-x64/-/server-darwin-x64-0.25.0.tgz",
-      "integrity": "sha512-RG7rcfuA8jFylbdT0geXWGKtLBfsqXtwDR2kgJtr5hjdFqjhOwuN6jK0JNnjyHZoBx6xN6cG4nHs25uEWjrD9g==",
-      "cpu": [
-        "x64"
-      ],
-      "license": "Apache-2.0",
-      "optional": true,
-      "os": [
-        "darwin"
-      ]
-    },
-    "node_modules/@toolbox-sdk/server-linux-x64": {
-      "version": "0.25.0",
-      "resolved": "https://registry.npmjs.org/@toolbox-sdk/server-linux-x64/-/server-linux-x64-0.25.0.tgz",
-      "integrity": "sha512-V/yjAcEJD4vxLyHXgkdUM6Wc8agma451O6Ms9loEfcIwwIWnb103UOOiZRd+pLdDViuuSzrhXNEH62vjhIoQUw==",
-      "cpu": [
-        "x64"
-      ],
-      "license": "Apache-2.0",
-      "optional": true,
-      "os": [
-        "linux"
-      ]
-    },
-    "node_modules/@toolbox-sdk/server-win32-x64": {
-      "version": "0.25.0",
-      "resolved": "https://registry.npmjs.org/@toolbox-sdk/server-win32-x64/-/server-win32-x64-0.25.0.tgz",
-      "integrity": "sha512-QUgPeWvHhD2lLqp4Tk1bDuEOu8l6y5ApsnTScEMIa2GO7G/jRJzkCT1TNZJIUxQMZEEXy38bn9x/fMMtNN9flQ==",
-      "cpu": [
-        "x64"
-      ],
-      "license": "Apache-2.0",
-      "optional": true,
-      "os": [
-        "win32"
-      ]
-    }
-  }
-}

packages/server/package.json

@@ -1,19 +0,0 @@
-{
-  "name": "@toolbox-sdk/server",
-  "version": "0.25.0",
-  "license": "Apache-2.0",
-  "author": "Google LLC",
-  "bin": {
-    "toolbox": "./bin/run.js"
-  },
-  "files": [
-    "bin/run.js"
-  ],
-  "repository": "googleapis/genai-toolbox",
-  "optionalDependencies": {
-    "@toolbox-sdk/server-darwin-arm64": "0.25.0",
-    "@toolbox-sdk/server-darwin-x64": "0.25.0",
-    "@toolbox-sdk/server-linux-x64": "0.25.0",
-    "@toolbox-sdk/server-win32-x64": "0.25.0"
-  }
-}

packages/testing.md

@@ -1,91 +0,0 @@
-# How to test on different platforms
-
-1. Create a local test registry. We are using Verdaccio. During the actual process, we publish to npm instead.
-    ```sh
-    # install
-    npm install -g verdaccio
-
-    # start server
-    verdaccio
-    ```
-
-    The output will show the config file location and the URL. Open your browser to:
-    http://localhost:4873
-
-    > Note: You can use `npm unpublish @toolbox-sdk/server --force --registry http://localhost:4873` to unpublish the package.
-
-2. Pack all 4 packages and publish them to the local registry. Go in each package (eg. server-darwin-arm64) and run
-    ```sh
-    npm ci --force
-    npm pack .
-    ```
-    
-    Then publish to the local registry
-    ```sh
-    npm publish --registry http://localhost:4873
-    ```
-
-3. Go to the server package and run
-    ```sh
-    npm ci --force
-    npm pack .
-    npm publish --registry http://localhost:4873
-    ```
-
-    Now, you have published your package.
-
-4. Now create a new folder (let's call it testing.) Add a tools.yaml file to the folder. It should look like this:
-    ```yaml
-      sources:
-        my-pg-source:
-          kind: postgres
-          host: 127.0.0.1
-          port: 5432
-          database: toolbox_db
-          user: postgres
-          password: password
-      tools:
-        search-hotels-by-name:
-          kind: postgres-sql
-          source: my-pg-source
-          description: Search for hotels based on name.
-          parameters:
-            - name: name
-              type: string
-              description: The name of the hotel.
-          statement: SELECT * FROM hotels WHERE name ILIKE '%' || $1 || '%';
-      prompts:
-        code-review:
-          description: "Asks the LLM to analyze code quality and suggest improvements."
-          messages:
-            - role: "user"
-              content: "Please review the following code for quality, correctness, and potential improvements: \n\n{{.code}}"
-          arguments:
-            - name: "code"
-              description: "The code to review"
-              required: true
-    ```
-
-    Note: Do not test this directly to the server folder. The registry might pick up local packages instead of global installation.
-    Use a separate testing folder outside the server folder for this testing.
-
-6. From the testing folder, run 
-    ```sh
-    npx --registry=http://localhost:4873/ -y @toolbox-sdk/server
-    ```
-
-    This should start up the toolbox server with the tools.yaml file.
-
-7. Run the command to verify that the tools are available:
-
-    ```sh
-    curl --location 'http://127.0.0.1:5000/mcp' \
-    --header 'Content-Type: application/json' \
-    --data '{
-        "jsonrpc": "2.0",
-        "method": "tools/list",
-        "params": {},
-        "id": 1
-    }'
-
-```

packages/update_dep_packages.sh

@@ -1,21 +0,0 @@
-cd server-darwin-arm64
-npm install --force
-rm -rf bin/ 
-git add version.txt package.json package-lock.json
-
-cd ../server-darwin-x64
-npm install --force
-rm -rf bin/ 
-git add version.txt package.json package-lock.json
-
-
-cd ../server-linux-x64
-npm install --force
-rm -rf bin/ 
-git add version.txt package.json package-lock.json
-
-
-cd ../server-win32-x64
-npm install --force
-rm -rf bin/ 
-git add version.txt package.json package-lock.json

packages/update_server_package.sh

@@ -1,7 +0,0 @@
-cd server
-npm install --package-lock-only
-git add package.json package-lock.json
-git commit -m "update dep versions"
-
-npm pack .
-npm publish --access public

packages/update_server_packages.sh

@@ -1,21 +0,0 @@
-cd server-darwin-arm64
-npm install --force
-rm -rf bin/ 
-git add version.txt package.json package-lock.json
-
-cd ../server-darwin-x64
-npm install --force
-rm -rf bin/ 
-git add version.txt package.json package-lock.json
-
-
-cd ../server-linux-x64
-npm install --force
-rm -rf bin/ 
-git add version.txt package.json package-lock.json
-
-
-cd ../server-win32-x64
-npm install --force
-rm -rf bin/ 
-git add version.txt package.json package-lock.json

tests/spanneradmin/spanneradmin_integration_test.go

@@ -0,0 +1,178 @@
+// Copyright 2026 Google LLC
+//
+// Licensed under the Apache License, Version 2.0 (the "License");
+// you may not use this file except in compliance with the License.
+// You may obtain a copy of the License at
+//
+//     http://www.apache.org/licenses/LICENSE-2.0
+//
+// Unless required by applicable law or agreed to in writing, software
+// distributed under the License is distributed on an "AS IS" BASIS,
+// WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
+// See the License for the specific language governing permissions and
+// limitations under the License.
+
+package spanneradmin
+
+import (
+	"bytes"
+	"context"
+	"encoding/json"
+	"fmt"
+	"io"
+	"net/http"
+	"os"
+	"regexp"
+	"strings"
+	"testing"
+	"time"
+
+	instance "cloud.google.com/go/spanner/admin/instance/apiv1"
+	"cloud.google.com/go/spanner/admin/instance/apiv1/instancepb"
+	"github.com/google/uuid"
+	"github.com/googleapis/genai-toolbox/internal/testutils"
+	"github.com/googleapis/genai-toolbox/tests"
+)
+
+var (
+	SpannerProject = os.Getenv("SPANNER_PROJECT")
+)
+
+func getSpannerAdminVars(t *testing.T) map[string]any {
+	if SpannerProject == "" {
+		t.Fatal("'SPANNER_PROJECT' not set")
+	}
+
+	return map[string]any{
+		"kind":           "spanner-admin",
+		"defaultProject": SpannerProject,
+	}
+}
+
+func TestSpannerAdminCreateInstance(t *testing.T) {
+	sourceConfig := getSpannerAdminVars(t)
+	ctx, cancel := context.WithTimeout(context.Background(), 20*time.Minute)
+	defer cancel()
+
+	shortUuid := strings.ReplaceAll(uuid.New().String(), "-", "")[:10]
+	instanceId := "test-inst-" + shortUuid
+
+	displayName := "Test Instance " + shortUuid
+	instanceConfig := "regional-us-central1"
+	nodeCount := 1
+	edition := "ENTERPRISE"
+
+	// Setup Admin Client for verification and cleanup
+	adminClient, err := instance.NewInstanceAdminClient(ctx)
+	if err != nil {
+		t.Fatalf("unable to create Spanner instance admin client: %s", err)
+	}
+	defer adminClient.Close()
+
+	// Teardown function
+	defer func() {
+		err := adminClient.DeleteInstance(ctx, &instancepb.DeleteInstanceRequest{
+			Name: fmt.Sprintf("projects/%s/instances/%s", SpannerProject, instanceId),
+		})
+		if err != nil {
+			// If it fails, it might not have been created, log it but don't fail if it's "not found"
+			t.Logf("cleanup: failed to delete instance %s: %s", instanceId, err)
+		} else {
+			t.Logf("cleanup: deleted instance %s", instanceId)
+		}
+	}()
+
+	// Construct Tools Config
+
+	toolsConfig := map[string]any{
+		"sources": map[string]any{
+			"my-spanner-admin": sourceConfig,
+		},
+		"tools": map[string]any{
+			"create-instance-tool": map[string]any{
+				"kind":        "spanner-create-instance",
+				"source":      "my-spanner-admin",
+				"description": "Creates a Spanner instance.",
+			},
+		},
+	}
+
+	// Start Toolbox Server
+	cmd, cleanup, err := tests.StartCmd(ctx, toolsConfig)
+	if err != nil {
+		t.Fatalf("command initialization returned an error: %s", err)
+	}
+	defer cleanup()
+
+	waitCtx, cancelWait := context.WithTimeout(ctx, 10*time.Second)
+	defer cancelWait()
+	out, err := testutils.WaitForString(waitCtx, regexp.MustCompile(`Server ready to serve`), cmd.Out)
+	if err != nil {
+		t.Logf("toolbox command logs: \n%s", out)
+		t.Fatalf("toolbox didn't start successfully: %s", err)
+	}
+
+	// Prepare Invocation Payload
+
+	payload := map[string]any{
+		"project":         SpannerProject,
+		"instanceId":      instanceId,
+		"displayName":     displayName,
+		"config":          instanceConfig,
+		"nodeCount":       nodeCount,
+		"edition":         edition,
+		"processingUnits": 0,
+	}
+
+	payloadBytes, err := json.Marshal(payload)
+	if err != nil {
+		t.Fatalf("failed to marshal payload: %s", err)
+	}
+
+	// Invoke Tool
+	invokeUrl := "http://127.0.0.1:5000/api/tool/create-instance-tool/invoke"
+	req, err := http.NewRequest(http.MethodPost, invokeUrl, bytes.NewBuffer(payloadBytes))
+	if err != nil {
+		t.Fatalf("unable to create request: %s", err)
+	}
+	req.Header.Add("Content-type", "application/json")
+
+	t.Logf("Invoking create-instance-tool for instance: %s", instanceId)
+	resp, err := http.DefaultClient.Do(req)
+	if err != nil {
+		t.Fatalf("unable to send request: %s", err)
+	}
+	defer resp.Body.Close()
+
+	if resp.StatusCode != http.StatusOK {
+		bodyBytes, _ := io.ReadAll(resp.Body)
+		t.Fatalf("response status code is not 200, got %d: %s", resp.StatusCode, string(bodyBytes))
+	}
+
+	// Check Response
+	var body map[string]interface{}
+	err = json.NewDecoder(resp.Body).Decode(&body)
+	if err != nil {
+		t.Fatalf("error parsing response body")
+	}
+
+	// Verify Instance Exists via Admin Client
+	t.Logf("Verifying instance %s exists...", instanceId)
+	instanceName := fmt.Sprintf("projects/%s/instances/%s", SpannerProject, instanceId)
+	gotInstance, err := adminClient.GetInstance(ctx, &instancepb.GetInstanceRequest{
+		Name: instanceName,
+	})
+	if err != nil {
+		t.Fatalf("failed to get instance from admin client: %s", err)
+	}
+
+	if gotInstance.Name != instanceName {
+		t.Errorf("expected instance name %s, got %s", instanceName, gotInstance.Name)
+	}
+	if gotInstance.DisplayName != displayName {
+		t.Errorf("expected display name %s, got %s", displayName, gotInstance.DisplayName)
+	}
+	if gotInstance.NodeCount != int32(nodeCount) {
+		t.Errorf("expected node count %d, got %d", nodeCount, gotInstance.NodeCount)
+	}
+}