Update app.py

app.py

@@ -1,11 +1,21 @@
 import os
 import httpx
-from fastapi import FastAPI
+from fastapi import FastAPI, Request, HTTPException
 from fastmcp import FastMCP
 
 app = FastAPI()
 mcp = FastMCP(name="SAP MCP Proxy", version="0.1")
 
+API_GATEWAY_KEY = os.getenv("API_GATEWAY_KEY")  # New key for MCP server auth
+
+@app.middleware("http")
+async def check_api_key(request: Request, call_next):
+    token = request.headers.get("X-API-Key")
+    if not token or token != API_GATEWAY_KEY:
+        raise HTTPException(status_code=401, detail="Invalid or missing API key")
+    response = await call_next(request)
+    return response
+
 @mcp.tool(description="Fetch 50 supplier invoices from SAP API")
 async def get_supplier_invoices():
     api_key = os.getenv("API_KEY")
@@ -23,8 +33,3 @@ async def get_supplier_invoices():
             return resp.json()
         else:
             return {"error": resp.status_code, "body": resp.text}
-
-# No attach_to_app call needed here
-@app.get("/")
-def root():
-    return {"message": "SAP MCP Proxy is running"}