Update app.py

app.py

@@ -8,25 +8,26 @@ app = FastAPI()
 # MCP server initialization
 mcp = FastMCP(name="SAP MCP Proxy", version="0.1")
 
-# API key for MCP authentication, must be stored as Hugging Face secret (not hardcoded)
-API_GATEWAY_KEY = os.getenv("API_GATEWAY_KEY")  # e.g., "my_super_secret_token"
+# API key for MCP authentication, set as secret in Hugging Face
+API_GATEWAY_KEY = os.getenv("API_GATEWAY_KEY")
 
-# Authentication middleware: allows "/" and docs endpoints unauthenticated, all else requires X-API-Key
+# Middleware to require API key except on root and docs for health and docs access
 @app.middleware("http")
 async def check_api_key(request: Request, call_next):
-    if request.url.path in ["/", "/docs", "/redoc"]:
-        # Allow unauthenticated health checks and docs access
+    # Allow unauthenticated access to these paths
+    if request.url.path in ["/", "/docs", "/redoc", "/routes"]:
         return await call_next(request)
     token = request.headers.get("X-API-Key")
+    print(f"Received X-API-Key header: {token}")  # Debug log
     if not token or token != API_GATEWAY_KEY:
         raise HTTPException(status_code=401, detail="Invalid or missing API key")
     response = await call_next(request)
     return response
 
-# MCP tool definition: fetch supplier invoices from SAP API
+# MCP Tool definition to wrap SAP invoice API
 @mcp.tool(description="Fetch 50 supplier invoices from SAP S/4HANA OData API")
 async def get_supplier_invoices():
-    api_key = os.getenv("API_KEY")  # Set in Hugging Face secrets!
+    api_key = os.getenv("API_KEY")
     if not api_key:
         return {"error": "SAP API_KEY not configured"}
     url = "https://sandbox.api.sap.com/s4hanacloud/sap/opu/odata/sap/API_SUPPLIERINVOICE_PROCESS_SRV/A_BR_SupplierInvoiceNFDocument?$top=50&$inlinecount=allpages"
@@ -41,10 +42,12 @@ async def get_supplier_invoices():
         else:
             return {"error": resp.status_code, "body": resp.text}
 
-# MCP server registration (routes auto-exposed by FastMCP)
-# (No need to call attach_to_app for latest fastmcp. MCP tools auto-registered.)
-
-# Health check/root endpoint
+# Root endpoint to verify server running
 @app.get("/")
 def root():
     return {"message": "SAP MCP Proxy is running"}
+
+# Debug route to list all registered routes (for discovering MCP endpoint)
+@app.get("/routes")
+def get_routes():
+    return [route.path for route in app.routes]