Agent gateway
One MCP endpoint in front of Salesforce and SAP. Agents sign in as a person, reads run as that person in the downstream system, and writes go through a plan that the gateway approves by rule or that a person approves here.
MCP endpoint: https://omarchy.tail8d31ec.ts.net/mcp