Serve your application over MCP
On BTP, serving an application over MCP can be configured as an MCP server artifact in API ManagementAPI ManagementAPI proxies in front of backend services, with security and traffic management policies attached to them, and Developer Hub where consumers subscribe.sap official, btp, deployed on Integration Cell within SAP Integration SuiteSAP Integration SuiteSAP's integration service on BTP: Cloud Integration for orchestration, API Management in front of it, and an MCP gateway that serves a managed API to agents.sap official, btp. The documented source paths start from an API artifact, a classic API proxy, an HTTP endpoint with OpenAPI or an RFC backend.
Overview
API ManagementAPI ManagementAPI proxies in front of backend services, with security and traffic management policies attached to them, and Developer Hub where consumers subscribe.sap official, btp creates MCP server artifacts from API artifacts, API proxies, HTTP/OpenAPI endpoints or RFC backends and runs them through the Integration Suite MCP gateway. Servers can expose tools, URI-addressed resources and parameterised prompts.
Not covered: Availability depends on the Integration Suite service plan, with API ManagementAPI ManagementAPI proxies in front of backend services, with security and traffic management policies attached to them, and Developer Hub where consumers subscribe.sap official, btp and Integration Cell activation required for the assessed creation paths. The HTTP/OpenAPI path accepts OpenAPI 3.0.0–3.0.3. The API-artifact path accepts only OAuth-authenticated source APIs; MCP client access requires OAuth and mandatory Authentication and Authorization policies.
The API-artifact and HTTP creation guides state a 30-tool limit; the live HTTP configuration page states 50. The applicable limit for a deployment needs confirmation.
btp-cf-mcpbtp-cf-mcpAn MCP server over an SAP BTP account and its Cloud Foundry runtime that acts as the person who logged in, so their own global-account and space roles decide what an agent can see.independent, btp is a server that exposes an SAP BTP account and its Cloud Foundry runtime to an agent as read and write tools under the caller's own identity.
Policy
PolicySAP API Policy 4.2026a§ 1.1, 1.2, 2.2.2AlwaysAn MCP server exposes an SAP API, or uses SAP APIs to supply tools, resources or data to an agent.
- § 1.1 Published APIs. Published APIs are made available for the documented purposes identified by SAP, including integration, extensions and data exchange.
- § 1.2 Non-Published APIs. Customer and third-party applications must not access non-published APIs except where documentation permits it or SAP otherwise authorizes it.
- § 2.2.2 AI call sequences and data extraction. Outside SAP-endorsed architectures, data services or expressly identified pathways, the policy prohibits specified agentic API use and systematic or large-scale extraction.
MCP does not replace the API's documented-use boundary. Check that every endpoint is published for the intended use and whether the policy's AI-call or extraction provisions apply to the design.
SAP API Policy 4.2026a →Sources
Artifacts
Tasks
Change application records from an agent
Create or update application records through an MCP client. Active-record changes through business actions or entity write tools; draft lifecycle is assessed separately.
API ManagementAPI Management, on the assessed HTTP/OpenAPI source path, exposes selected API write operations as MCP tools.
Conditions: Activate API Management and the Integration Cell runtime; assign PI_Integration_Developer and create an integration package. The selected Integration Suite service plan must include this feature. For the assessed HTTP source path, supply OpenAPI 3.0.0–3.0.3 and a reachable custom application endpoint or supported destination.
Remaining work: Select the source API operations, configure the destination, tools/resources/prompts and security policies, deploy on Integration Cell and arrange client access.
Expose an application service to an AI agent
Let an MCP client discover and query application data and invoke selected business operations. Application-service exposure to MCP clients. Development-assistance tools and SAP application API gateway scenarios are outside this task.
API ManagementAPI Management, on the assessed HTTP/OpenAPI source path, creates an MCP server from a custom application HTTP endpoint and its OpenAPI specification.
Conditions: Activate API Management and the Integration Cell runtime; assign PI_Integration_Developer and create an integration package. The selected Integration Suite service plan must include this feature. For the assessed HTTP source path, supply OpenAPI 3.0.0–3.0.3 and a reachable custom application endpoint or supported destination. MCP client access uses OAuth. Authentication and Authorization policies are mandatory and cannot be deleted; Authentication must be first in the request flow.
Remaining work: Select the source API operations, configure the destination, tools/resources/prompts and security policies, deploy on Integration Cell and arrange client access.
Invoke a business operation from an agent
Invoke a selected application business operation through an MCP tool. Calling application operations; generating business logic or orchestrating a complete multi-system process is outside this task.
API ManagementAPI Management, on the assessed HTTP/OpenAPI source path, exposes selected application API operations as MCP tools.
Conditions: Activate API Management and the Integration Cell runtime; assign PI_Integration_Developer and create an integration package. The selected Integration Suite service plan must include this feature. For the assessed HTTP source path, supply OpenAPI 3.0.0–3.0.3 and a reachable custom application endpoint or supported destination.
Remaining work: Select the source API operations, configure the destination, tools/resources/prompts and security policies, deploy on Integration Cell and arrange client access.
Provide application context as MCP resources
Let an MCP client retrieve application data or schema context through resource URIs. The MCP resources primitive; a tool returning text or a document merely mentioning MCP is not a resource implementation.
API ManagementAPI Management, on the assessed HTTP/OpenAPI source path, supports URI-addressed resources for application data and context.
Conditions: Activate API Management and the Integration Cell runtime; assign PI_Integration_Developer and create an integration package. The selected Integration Suite service plan must include this feature. For the assessed HTTP source path, supply OpenAPI 3.0.0–3.0.3 and a reachable custom application endpoint or supported destination. Only GET API resources can be listed as MCP resources; the HTTP configuration guide states a limit of 15 resources per server. MCP client access uses OAuth. Authentication and Authorization policies are mandatory and cannot be deleted; Authentication is first in the request flow.
Remaining work: Choose eligible GET resources, configure their URI templates and schemas, secure access and deploy the MCP server on Integration Cell.
Publish reusable MCP prompts
Let an MCP client discover and retrieve reusable, parameterized interaction templates. Server-published MCP prompts; arbitrary application instructions and complete automated workflows are separate concerns.
API ManagementAPI Management, on the assessed HTTP/OpenAPI source path, supports parameterized MCP prompt templates.
Conditions: Activate API Management and the Integration Cell runtime; assign PI_Integration_Developer and create an integration package. The selected Integration Suite service plan must include this feature. For the assessed HTTP source path, supply OpenAPI 3.0.0–3.0.3 and a reachable custom application endpoint or supported destination.
Remaining work: Select the source API operations, configure the destination, tools/resources/prompts and security policies, deploy on Integration Cell and arrange client access.
Query application data from an agent
Retrieve selected application records through MCP without changing those records. Querying application data; exposing other write tools and granting write permissions are separate requirements.
API ManagementAPI Management, on the assessed HTTP/OpenAPI source path, exposes selected application API retrieval operations as MCP tools.
Conditions: Activate API Management and the Integration Cell runtime; assign PI_Integration_Developer and create an integration package. The selected Integration Suite service plan must include this feature. For the assessed HTTP source path, supply OpenAPI 3.0.0–3.0.3 and a reachable custom application endpoint or supported destination.
Remaining work: Select the source API operations, configure the destination, tools/resources/prompts and security policies, deploy on Integration Cell and arrange client access.
Content
Show 25 more
Show 7 more
Seen working
Details
Coverage
Designs that place it
Comparison properties
These are the questions used to compare what the artifacts do. Values come from their documentation and may apply to a particular ecosystem or runtime. Each recorded value in the comparison opens its statement and sources.
For your agent
- Ref
capability:mcp-servers- JSON
- /capabilities/mcp-servers.json
- MCP
- Connecting an agent