add skip token retrieval for getting dest properties

Author: NicoleMGomes

src/sap_cloud_sdk/agentgateway/_lob.py

@@ -118,7 +118,8 @@ def get_ias_client_id_lob() -> str:
     """Read the IAS client ID from the IAS destination properties (LoB flow).
 
     Fetches the IAS destination (``sap-managed-runtime-ias-{landscape}``)
-    at provider subaccount level and returns the ``clientId`` property.
+    at provider subaccount level with ``$skipTokenRetrieval=true`` so only
+    destination properties are returned — no auth token exchange is performed.
 
     Returns:
         The IAS client ID string, or ``""`` if the destination is not found
@@ -133,6 +134,7 @@ def get_ias_client_id_lob() -> str:
     dest = client.get_destination(
         dest_name,
         level=ConsumptionLevel.PROVIDER_SUBACCOUNT,
+        options=ConsumptionOptions(skip_token_retrieval=True),
     )
     if not dest:
         logger.warning(

src/sap_cloud_sdk/destination/_models.py

@@ -510,6 +510,10 @@ class ConsumptionOptions:
         chain_vars: Key-value pairs for destination chain variables (X-chain-var-<name>).
             Each entry is sent as a separate "X-chain-var-<key>" header. Only applicable
             when chain_name is provided.
+        skip_token_retrieval: When True, instructs the Destination Service to skip the
+            OAuth2 token exchange and return only the destination configuration properties
+            ($skipTokenRetrieval query parameter). Useful when only destination metadata
+            is needed and token retrieval would be wasteful or cause unnecessary errors.
 
     Example:
         ```python
@@ -560,6 +564,7 @@ class ConsumptionOptions:
     code_verifier: Optional[str] = None
     chain_name: Optional[str] = None
     chain_vars: Optional[dict] = None
+    skip_token_retrieval: bool = False
 
 
 @dataclass

src/sap_cloud_sdk/destination/client.py

@@ -4,7 +4,7 @@
 
 import logging
 import warnings
-from typing import List, Optional, Callable, TypeVar
+from typing import Any, Dict, List, Optional, Callable, TypeVar
 
 from sap_cloud_sdk.core.telemetry import Module, Operation, record_metrics
 from sap_cloud_sdk.destination._http import DestinationHttp, API_V1, API_V2
@@ -430,7 +430,11 @@ def get_destination(
                 else f"{API_V2}/destinations/{name}"
             )
 
-            resp = self._http.get(path, headers=headers, tenant_subdomain=tenant)
+            params: Dict[str, Any] = {}
+            if options and options.skip_token_retrieval:
+                params["$skipTokenRetrieval"] = "true"
+
+            resp = self._http.get(path, headers=headers, tenant_subdomain=tenant, params=params or None)
             data = resp.json()
 
             # Parse v2 response: destinationConfiguration + authTokens + certificates

tests/agentgateway/integration/agw_auth.feature

@@ -55,3 +55,7 @@ Feature: Agent Gateway Auth Integration
     When I call list_mcp_tools
     And I call call_mcp_tool with the sample MCP tool and the user token
     Then the tool result should be a non-empty string
+
+  Scenario: Get IAS client ID returns a non-empty string
+    When I call get_ias_client_id
+    Then the ias_client_id should be a non-empty string

tests/agentgateway/integration/test_agw_bdd.py

@@ -54,6 +54,7 @@ def __init__(self):
         self.tools: Optional[list[MCPTool]] = None
         self.tool_result: Optional[str] = None
         self.sample_mcp_tool_name: Optional[str] = None
+        self.ias_client_id: Optional[str] = None
 
 
 @pytest.fixture
@@ -266,3 +267,17 @@ def tool_result_is_non_empty_string(context: ScenarioContext):
     assert context.tool_result is not None
     assert isinstance(context.tool_result, str)
     assert context.tool_result.strip(), "Expected a non-empty tool result"
+
+
+@when("I call get_ias_client_id")
+def call_get_ias_client_id(context: ScenarioContext, agw_client: AgentGatewayClient):
+    """Call get_ias_client_id and store the result."""
+    context.ias_client_id = agw_client.get_ias_client_id()
+
+
+@then("the ias_client_id should be a non-empty string")
+def ias_client_id_non_empty(context: ScenarioContext):
+    """Verify the IAS client ID is a non-empty string."""
+    assert context.ias_client_id is not None
+    assert isinstance(context.ias_client_id, str)
+    assert context.ias_client_id.strip(), "Expected a non-empty IAS client ID"

tests/agentgateway/unit/test_lob.py

@@ -28,6 +28,7 @@
 from sap_cloud_sdk.agentgateway._models import Agent, AgentCard, MCPTool
 from sap_cloud_sdk.agentgateway._token_cache import _GatewayUrlCache, _TokenCache
 from sap_cloud_sdk.agentgateway.config import ClientConfig
+from sap_cloud_sdk.destination import ConsumptionOptions, ConsumptionLevel
 from sap_cloud_sdk.agentgateway.exceptions import AgentGatewaySDKError, MCPServerNotFoundError
 from sap_cloud_sdk.destination import ConsumptionLevel
 
@@ -1032,7 +1033,8 @@ def test_returns_client_id_from_destination_properties(self):
         assert result == "lob-client-id"
         mock_dest_client.get_destination.assert_called_once_with(
             "sap-managed-runtime-ias-eu10",
-            level=mock_dest_client.get_destination.call_args[1]["level"],
+            level=ConsumptionLevel.PROVIDER_SUBACCOUNT,
+            options=ConsumptionOptions(skip_token_retrieval=True),
         )
 
     def test_returns_empty_string_when_destination_not_found(self):

tests/destination/unit/test_client.py

@@ -1173,6 +1173,52 @@ def test_get_destination_default_proxy_disabled(self, mock_load_proxy):
         # HTTP should be called since proxy is disabled by default
         mock_http.get.assert_called_once()
 
+    def test_get_destination_skip_token_retrieval_sends_query_param(self):
+        """Test that skip_token_retrieval=True sends $skipTokenRetrieval=true query param."""
+        mock_http = MagicMock()
+        resp = MagicMock(spec=Response)
+        resp.status_code = 200
+        resp.json.return_value = {
+            "destinationConfiguration": {
+                "name": "my-api",
+                "type": "HTTP",
+                "url": "https://api.example.com",
+                "clientId": "my-client-id",
+            },
+            "authTokens": [],
+            "certificates": [],
+        }
+        mock_http.get.return_value = resp
+
+        client = DestinationClient(mock_http)
+        result = client.get_destination(
+            "my-api",
+            options=ConsumptionOptions(skip_token_retrieval=True),
+        )
+
+        assert isinstance(result, Destination)
+        assert result.properties.get("clientId") == "my-client-id"
+        _, kwargs = mock_http.get.call_args
+        assert kwargs.get("params") == {"$skipTokenRetrieval": "true"}
+
+    def test_get_destination_no_skip_token_retrieval_by_default(self):
+        """Test that skip_token_retrieval=False (default) sends no $skipTokenRetrieval param."""
+        mock_http = MagicMock()
+        resp = MagicMock(spec=Response)
+        resp.status_code = 200
+        resp.json.return_value = {
+            "destinationConfiguration": {"name": "my-api", "type": "HTTP", "url": "https://api.example.com"},
+            "authTokens": [],
+            "certificates": [],
+        }
+        mock_http.get.return_value = resp
+
+        client = DestinationClient(mock_http)
+        client.get_destination("my-api")
+
+        _, kwargs = mock_http.get.call_args
+        assert kwargs.get("params") is None
+
 
 class TestDestinationClientWriteOperations: