{"slug": "part-17-build-3a-sap-tools-in-integration-suite-and-sap-as-system-of-record", "title": "Part 17: Build 3a — SAP: tools in Integration Suite and SAP as system of record", "summary": "A developer's documentation-only build examining SAP Integration Suite's MCP Gateway found that when the ERP vendor also hosts the agent tools, tools are generated from existing API definitions and exposed via a Streamable HTTP endpoint, with rate limiting, IP blocking, OIDC authentication and payload protection built in. The analysis, based on SAP's July 2026 Integration Suite update and its April 2026 API Policy, concludes that tools must sit over process APIs rather than raw S/4HANA OData system APIs, since approval checks, duplicate rules and three-way matching require logic in front of the backend.", "body_md": "*Part 17 · One Agent, Five Platforms*\n\nThe third platform is different from the first two. MuleSoft and Boomi sit between the agent and the ERP. With SAP, the vendor that owns the system of record also offers to host the tools. So this part asks one question: **when the ERP vendor hosts the tools, what changes?**\n\nLike [Parts 11](https://dev.to/thasha/part-11-build-1-mulesoft-agent-fabric-the-mcp-connector-and-omni-gateway-477o), [14](https://dev.to/thasha/part-14-build-2a-boomi-hosting-the-tool-contract-37dn) and [15](https://dev.to/thasha/part-15-build-2b-boomi-agentstudio-ai-gateway-and-control-tower-with-scores-1f3e), this build is **documentation-only**. It's based on SAP's own published material as I read it on 5 November 2026: the SAP Architecture Center, the SAP API Policy and SAP's July 2026 Integration Suite update, all linked below. I couldn't confirm product details on the SAP Help Portal for this part, so treat the specifics as \"check before you build\". The agent, the approvals and the scores come in Part 18.\n\nIn the reference architecture from [Part 3](https://dev.to/thasha/part-3-a-platform-neutral-reference-architecture-for-enterprise-agents-26lc), the ERP is a system of record at the bottom of the picture. Here, it's also the vendor of the integration layer, the tool host and the agent platform. Three things follow from that:\n\nSAP's answer for exposing tools is the **MCP Gateway** in SAP Integration Suite. The [July 2026 Integration Suite update](https://assets.dm.ux.sap.com/sap-user-groups/pdfs/260728_sap_integration_suite_monthly_update.pdf) describes it as a place to host and manage MCP servers, and lists three ways to create one:\n\nThe same update says the gateway translates technical specifications \"into MCP schema with natural-language semantics\", and lists security features: rate limiting, IP blocking, OIDC-based authentication and payload protection, plus logs, traces and analytics. The [Copilot Studio reference architecture](https://architecture.learning.sap.com/docs/ref-arch/d2e34e) adds that the gateway exposes a **Streamable HTTP** endpoint.\n\nSo the hosting model is close to Boomi's in [Part 14](https://dev.to/thasha/part-14-build-2a-boomi-hosting-the-tool-contract-37dn): tools are generated from API definitions you already have. The same lesson applies. The Copilot Studio architecture says to write \"precise, action-oriented tool descriptions in the gateway\", because the agent picks tools by them.\n\nFrom the contract in [Part 7](https://dev.to/thasha/part-7-design-the-tools-once-one-tool-contract-every-platform-can-reuse-27gc):\n\n`get_invoice`, `get_purchase_order`, `get_goods_receipt`, `get_supplier_history`, `check_duplicate_invoice`, `run_three_way_match`). The data is in S/4HANA. The four plain reads can be thin API artifacts over published S/4HANA APIs, exposed as MCP tools. The duplicate check and the three-way match need rule logic in front of the data.`request_approval`` post_invoice_adjustment` and `notify_supplier`` approval_id` check from One design point carries over unchanged: tools sit over **process APIs, not system APIs**. A raw S/4HANA OData service is a system API. The approval check, the duplicate rule and the three-way match need logic in front of it. On SAP, that means an integration flow or an API artifact with policies in front of the backend. The July update lists \"API composition\" to combine backend APIs into one MCP endpoint. Composing resources from several API artifacts into one MCP server is on the roadmap.\n\nThis is the biggest change from the first two builds. The [SAP API Policy](https://assets.dm.ux.sap.com/sap-user-groups/pdfs/260530_sap_api_policy_overview.pdf), published 27 April 2026, says:\n\nThe July update lists MCP Gateway as an endorsed path for agents reaching SAP systems, both for third-party agents and for agents built on SAP BTP.\n\nWhat this means for the invoice agent:\n\nTwo open points, the same as on the other platforms:\n\n`isError` is set. The `GR_MISSING` and `PERIOD_CLOSED` have to be produced by the process layer either way, because S/4HANA's own error messages aren't the contract.\nSAP's hosting story is strong where the data is: tools next to the system of record, a gateway with security built in, and a clear policy on how agents get in. The trade-off is that the vendor's rules now shape the architecture, not just the integration team's.\n\nPart 18 builds the agent in Joule Studio, looks at approvals in the ERP workflow and A2A through Agent Gateway, and gives SAP its provisional scores.\n\nSAP teams: inside or outside SAP for agent tools?\n\n*This series describes a reference build on a fictional company. This part is based only on SAP's published material as of 5 November 2026; no hands-on build has been run yet. Views are my own. Check current docs before you build.*", "url": "https://wpnews.pro/news/part-17-build-3a-sap-tools-in-integration-suite-and-sap-as-system-of-record", "canonical_source": "https://dev.to/thasha/part-17-build-3a-sap-tools-in-integration-suite-and-sap-as-system-of-record-3bl8", "published_at": "2026-11-06 03:45:17+00:00", "updated_at": "2026-11-06 03:53:14.432301+00:00", "lang": "en", "topics": ["ai-agents", "agent-protocols", "ai-tools", "artificial-intelligence"], "entities": ["SAP", "SAP Integration Suite", "MCP Gateway", "S/4HANA", "Boomi", "MuleSoft", "Copilot Studio", "SAP Business Technology Platform"], "also_reported_by": [], "alternates": {"html": "https://wpnews.pro/news/part-17-build-3a-sap-tools-in-integration-suite-and-sap-as-system-of-record", "markdown": "https://wpnews.pro/news/part-17-build-3a-sap-tools-in-integration-suite-and-sap-as-system-of-record.md", "text": "https://wpnews.pro/news/part-17-build-3a-sap-tools-in-integration-suite-and-sap-as-system-of-record.txt", "jsonld": "https://wpnews.pro/news/part-17-build-3a-sap-tools-in-integration-suite-and-sap-as-system-of-record.jsonld"}}