---
title: "Credentials for Server-Side Agents (Service Broker)"
description: "Register the MDM API service broker once, create an mdm-api instance and a key, and hand the key to SAP Joule Studio or a script; delete the key to cut the integration off."
source: "https://help.rikaiso.com/public-cloud/2026.2/service-broker-credentials"
edition: "public-cloud"
editionLabel: "S/4HANA Public Cloud"
version: "2026.2"
latest: true
language: "en"
section: "Information for Administrators > AI Assistants and Integrations: Enabling Access"
updated: "2026-11-05"
---

# Credentials for Server-Side Agents (Service Broker)

> Register the MDM API service broker once, create an mdm-api instance and a key, and hand the key to SAP Joule Studio or a script; delete the key to cut the integration off.

> **Draft brief for authors.** Replace with the final text; keep the task-page structure.

**Page type:** Task · **Audience:** SAP BTP administrator

**Contains**

1. Register the broker in your subaccount with the user and password the provider issued for this subaccount (they work only here).
2. Create an instance of the service `mdm-api` with the Viewer or the Manager plan of an add-on.
3. Create a service key and hand it to Joule Studio (destination `RIKAISO_MDM_MCP`) or a script.

- A key is a client, never a person: one-hour tokens, the plan's roles, refused for processing a named-user table; delete the key to revoke.

**Related information:** `agents-without-a-person`, `connect-joule-studio`, `ai-client-setup-matrix`.

**Source in the product repository:** customer guide §4 "AI agents and integrations", `docs/joule-integration.md` "Subscriber", `.claude/rules/api-broker-and-joule.md` (D152–D155).