← Back to search

@coaspe/sap-abap-mcp

GitHub Actions Scanned 20h ago

Headless MCP server for SAP ABAP Development Tools

npm
C
67 / 100

Versions

1.0.0latest
Jul 26, 2026
0.4.15
Jul 20, 2026
0.4.14
Jul 16, 2026
0.4.13
Jul 16, 2026
0.4.12
Jul 16, 2026
+ show 16 moreshow less
0.4.11
Jul 15, 2026
0.4.10
Jul 15, 2026
0.4.9
Jul 15, 2026
0.4.8
Jul 15, 2026
0.4.7
Jul 15, 2026
0.4.6
Jul 15, 2026
0.4.5
Jul 15, 2026
0.4.4
Jul 15, 2026
0.4.3
Jul 15, 2026
0.4.2
Jul 14, 2026
0.4.1
Jul 14, 2026
0.4.0
Jul 14, 2026
0.3.0
Jul 13, 2026
0.2.0
Jul 13, 2026
0.1.1
Jul 13, 2026
0.1.0
Jul 13, 2026
PermissionsTool SafetyAuthAnnotationsCode QualityStabilitySpecVuln HistoryAuthorTransparencyCommunity

Tools 19

sap
annotations: none low

SAP capabilities: name=search, arguments={query}; name=describe, arguments={name}. Invoke the described name with risk, schemaHash and arguments.

sap.capability.search
annotations: none low

Search or page through the complete SAP tool catalog. Use category browsing when keyword search misses.

sap.capability.describe
annotations: none low

Return the exact input schema and schema hash for one capability before invoking it.

sap.repository.inspect
annotations: none low

Read object metadata, optional ADT structure, and a bounded child-node page.

sap.ddic.read
annotations: none low

Read typed Domain/Data Element properties or Table/Structure DDL source with an optimistic fingerprint.

sap.repository.resolve
annotations: none low

Resolve one ABAP object to a canonical ADT Resource.

sap.repository.where_used
annotations: none low

Find bounded where-used references for one ABAP object.

sap.semantic.complete
annotations: none low

Read ABAP completion proposals or element details.

sap.semantic.components
annotations: none low

Browse bounded ABAP class or interface components. Follow childCount using componentPath; type is the ADT kind, not an ABAP signature.

sap.semantic.definition
annotations: none low

Resolve an ABAP definition or implementation.

sap.semantic.documentation
annotations: none low

Read SAP ABAP language documentation.

sap.semantic.format_preview
annotations: none low

Preview SAP ABAP formatter changes.

sap.semantic.hierarchy
annotations: none low

Read a bounded ABAP type hierarchy.

sap.semantic.quick_fixes
annotations: none low

List bounded non-dialog SAP quick fixes.

sap.source.diagnose
annotations: none low

Run bounded SAP syntax diagnostics for ABAP source.

sap.source.read_batch
annotations: none low

Read small source ranges from up to 100 objects: 5,000 requested lines total and 64 KiB combined code. Prefer sap.source.read for large ranges. Retry deferred items unchanged; resume truncated items at their one-based nextLine; use sap.source.read for a single line exceeding this budget.

sap.source.search
annotations: none low

Search literal text or a regular expression in ABAP source.

sap.text_elements.read
annotations: none low

Read one ABAP text-pool category.

sap.ui.object_url
annotations: none low

Build a SAP WebGUI URL for one ABAP object.

Permissions 3

network medium
Server uses network capabilities via: fetch(), http, https
shell high
Server uses shell capabilities via: child_process, spawn(), spawnSync()
env_vars low
Server uses env_vars capabilities via: process.env

Scan Findings 55

low
Tool 'sap' has no annotations annotation_checker · 100%
low
Tool 'sap.capability.search' has no annotations annotation_checker · 100%
info
SBOM generated: 339 components sbom_generator · 100%
low
Tool 'sap.capability.describe' has no annotations annotation_checker · 100%
low
Tool 'sap.repository.inspect' has no annotations annotation_checker · 100%
low
Tool 'sap.ddic.read' has no annotations annotation_checker · 100%
low
Tool 'sap.repository.resolve' has no annotations annotation_checker · 100%
low
Tool 'sap.repository.where_used' has no annotations annotation_checker · 100%
low
Tool 'sap.semantic.complete' has no annotations annotation_checker · 100%
low
Tool 'sap.semantic.components' has no annotations annotation_checker · 100%
low
Tool 'sap.semantic.definition' has no annotations annotation_checker · 100%
low
Tool 'sap.semantic.documentation' has no annotations annotation_checker · 100%
low
Tool 'sap.semantic.format_preview' has no annotations annotation_checker · 100%
low
Tool 'sap.semantic.hierarchy' has no annotations annotation_checker · 100%
low
Tool 'sap.semantic.quick_fixes' has no annotations annotation_checker · 100%
low
Tool 'sap.source.diagnose' has no annotations annotation_checker · 100%
low
Tool 'sap.source.read_batch' has no annotations annotation_checker · 100%
low
Tool 'sap.source.search' has no annotations annotation_checker · 100%
low
Tool 'sap.text_elements.read' has no annotations annotation_checker · 100%
low
Tool 'sap.ui.object_url' has no annotations annotation_checker · 100%
high
Hardcoded OAuth client secret in Coaspe-sap-abap-mcp-aab002f/test/oauth-client-credentials.test.ts auth_checker · 95%
medium
No build provenance detected (SLSA L0) slsa_assessor · 90%
high
Hardcoded OAuth client secret in Coaspe-sap-abap-mcp-aab002f/test/v1-result.test.ts auth_checker · 95%
high
Hardcoded OAuth client secret in Coaspe-sap-abap-mcp-aab002f/test/btp-service-key.test.ts auth_checker · 95%
high
Hardcoded OAuth client secret in Coaspe-sap-abap-mcp-aab002f/test/v1-resources-complete.test.ts auth_checker · 95%
info
Sandbox failed to start for behavioral verification behavioral_verifier · 100%
medium
Buffer.from base64 in Coaspe-sap-abap-mcp-aab002f/src/knowledge-transfer.ts:22 entropy_analyzer · 75%
medium
Buffer.from base64 in Coaspe-sap-abap-mcp-aab002f/test/secret-store.test.ts:19 entropy_analyzer · 75%
medium
Buffer.from base64 in Coaspe-sap-abap-mcp-aab002f/src/http/oidc.ts:71 entropy_analyzer · 75%
info
package.json metadata manifest_parser · 100%
info
Tool: sap manifest_parser · 85%
info
Tool: sap.capability.search manifest_parser · 85%
info
Tool: sap.capability.describe manifest_parser · 85%
info
Tool: sap.repository.inspect manifest_parser · 85%
info
Tool: sap.ddic.read manifest_parser · 85%
info
Tool: sap.repository.resolve manifest_parser · 85%
info
Tool: sap.repository.where_used manifest_parser · 85%
info
Tool: sap.semantic.complete manifest_parser · 85%
info
Tool: sap.semantic.components manifest_parser · 85%
info
Tool: sap.semantic.definition manifest_parser · 85%
info
Tool: sap.semantic.documentation manifest_parser · 85%
info
Tool: sap.semantic.format_preview manifest_parser · 85%
info
Tool: sap.semantic.hierarchy manifest_parser · 85%
info
Tool: sap.semantic.quick_fixes manifest_parser · 85%
info
Tool: sap.source.diagnose manifest_parser · 85%
info
Tool: sap.source.read_batch manifest_parser · 85%
info
Tool: sap.source.search manifest_parser · 85%
info
Tool: sap.text_elements.read manifest_parser · 85%
info
Tool: sap.ui.object_url manifest_parser · 85%
info
Transport: stdio manifest_parser · 90%
info
Required env vars (15) manifest_parser · 80%
info
Sandbox failed to start for output poisoning scan output_poisoning · 100%
medium
Permission: network access detected permission_analyzer · 80%
high
Permission: shell access detected permission_analyzer · 95%
low
Permission: env_vars access detected permission_analyzer · 90%