Azure API Management gateway for Salesforce Hosted MCP Server (sobject-reads), exposing read-only Salesforce data to Power BI and Copilot Studio agents with Entra ID authentication. ``` Power BI / Copilot Studio ↓ (Entra JWT: api://sfdc-read-mcp-reader) Azure APIM (d02/p02) ↓ (Salesforce OAuth: mcp_api scope)