Joule Studio (BTP)  →  MCP Server (CF)  →  SuccessFactors OData API
       ↑
  Claude / LLM

cp .env.example .env
# Edite .env com suas credenciais SFSF

SFSF_COMPANY=SFSALES010674
SFSF_CLIENT_ID=<oauth-client-id-do-admin-center>
SFSF_LOGIN_URL=https://hcm-us10-sales.hr.cloud.sap
SFSF_API_URL=https://apisalesdemo8.successfactors.com
SFSF_KEY_B64=<chave-privada-rsa-em-base64>
SFSF_CERT_B64=<certificado-x509-em-base64>

# Gerar chave RSA e certificado autoassinado
openssl req -x509 -newkey rsa:2048 -keyout sfsf_poc.key -out sfsf_poc.crt \
  -days 365 -nodes -subj "/CN=joule-mcp/O=MyOrg"

# Exportar em base64 para as env vars
export SFSF_KEY_B64=$(cat sfsf_poc.key | base64 | tr -d '\n')
export SFSF_CERT_B64=$(cat sfsf_poc.crt | base64 | tr -d '\n')

pip install -r requirements.txt
MODE=sfsf SFSF_CLIENT_ID=xxx SFSF_KEY_B64=xxx SFSF_CERT_B64=xxx \
  python mcp_server_sfsf.py

{
  "mcpServers": {
    "joule-sfsf": {
      "command": "python3",
      "args": ["mcp_server_sfsf.py"],
      "env": { "MODE": "sfsf" }
    }
  }
}

# 1. Login
cf login --sso

# 2. Push sem iniciar
cf push joule-sfsf-mcp -f manifest-mcp.yml --no-start

# 3. Injetar credenciais
cf set-env joule-sfsf-mcp SFSF_CLIENT_ID "<oauth-client-id>"
cf set-env joule-sfsf-mcp SFSF_KEY_B64   "$(cat sfsf_poc.key | base64 | tr -d '\n')"
cf set-env joule-sfsf-mcp SFSF_CERT_B64  "$(cat sfsf_poc.crt | base64 | tr -d '\n')"
cf set-env joule-sfsf-mcp MCP_AUTH_TOKEN "$(python3 -c 'import uuid; print(uuid.uuid4())')"

# 4. Iniciar
cf start joule-sfsf-mcp

https://joule-sfsf-mcp.cfapps.us10.hana.ondemand.com/mcp

├── mcp_server_cf.py     # MCP Server para Cloud Foundry (Streamable HTTP)
├── mcp_server_sfsf.py   # MCP Server local para desenvolvimento (stdio)
├── manifest-mcp.yml     # Manifest CF
├── requirements.txt     # Dependências Python
└── .env.example         # Variáveis de ambiente necessárias