← Back to search Server uses network capabilities via: fetch(), http Server uses filesystem capabilities via: fs, fs sync ops, fs.promises, path Server uses shell capabilities via: child_process, execSync(), spawn(), spawnSync() Server uses env_vars capabilities via: process.env
SAP HANA CLI
150+ SAP HANA database tools as MCP tools for AI assistants
? Not scanned yet
Versions
No versions found.
Tools 0
No tools indexed yet.
Permissions 4
network medium filesystem low shell high env_vars low Scan Findings 46
info
Sandbox failed to start for behavioral verification
medium
Excessive dependency count: 72 direct dependencies
medium
Vulnerable dependency: body-parser@2.2.2 (GHSA-v422-hmwv-36x6)
medium
Vulnerable dependency: js-yaml@5.2.1 (GHSA-pm4m-ph32-ghv5)
medium
Vulnerable dependency: multer@2.1.1 (GHSA-3p4h-7m6x-2hcm)
medium
Vulnerable dependency: multer@2.1.1 (GHSA-72gw-mp4g-v24j)
medium
Vulnerable dependency: ws@8.20.0 (GHSA-58qx-3vcg-4xpx)
medium
Vulnerable dependency: ws@8.20.0 (GHSA-96hv-2xvq-fx4p)
medium
Vulnerable dependency: mermaid@11.14.0 (GHSA-2v8p-3f2j-5mp7)
medium
Vulnerable dependency: mermaid@11.14.0 (GHSA-3rrr-jr9j-h3q3)
medium
Vulnerable dependency: mermaid@11.14.0 (GHSA-6m6c-36f7-fhxh)
medium
Vulnerable dependency: mermaid@11.14.0 (GHSA-6x64-9x62-f2gx)
medium
Vulnerable dependency: mermaid@11.14.0 (GHSA-87f9-hvmw-gh4p)
medium
Vulnerable dependency: mermaid@11.14.0 (GHSA-c4c3-pg64-4m4v)
medium
Vulnerable dependency: mermaid@11.14.0 (GHSA-ghcm-xqfw-q4vr)
medium
Vulnerable dependency: mermaid@11.14.0 (GHSA-rhh3-jpg6-66xh)
medium
Vulnerable dependency: mermaid@11.14.0 (GHSA-xcj9-5m2h-648r)
medium
Vulnerable dependency: mermaid@11.15.0 (GHSA-2v8p-3f2j-5mp7)
medium
Vulnerable dependency: mermaid@11.15.0 (GHSA-3rrr-jr9j-h3q3)
medium
Vulnerable dependency: mermaid@11.15.0 (GHSA-6x64-9x62-f2gx)
medium
Vulnerable dependency: mermaid@11.15.0 (GHSA-c4c3-pg64-4m4v)
medium
Vulnerable dependency: mermaid@11.15.0 (GHSA-rhh3-jpg6-66xh)
medium
Vulnerable dependency: fast-xml-parser@5.10.0 (GHSA-8r6m-32jq-jx6q)
medium
Vulnerable dependency: xlsx@https://cdn.sheetjs.com/xlsx-0.20.3/xlsx-0.20.3.tgz (GHSA-3x9f-74h4-2fqr)
medium
Vulnerable dependency: xlsx@https://cdn.sheetjs.com/xlsx-0.20.3/xlsx-0.20.3.tgz (GHSA-4r6h-8v6p-xvw6)
medium
Vulnerable dependency: xlsx@https://cdn.sheetjs.com/xlsx-0.20.3/xlsx-0.20.3.tgz (GHSA-5pgg-2g8v-p4x9)
medium
Vulnerable dependency: xlsx@https://cdn.sheetjs.com/xlsx-0.20.3/xlsx-0.20.3.tgz (GHSA-8vcr-vxm8-293m)
medium
Vulnerable dependency: xlsx@https://cdn.sheetjs.com/xlsx-0.20.3/xlsx-0.20.3.tgz (GHSA-g973-978j-2c3p)
info
package.json metadata
info
Transport: stdio
info
Required env vars (23)
info
Sandbox failed to start for output poisoning scan
medium
Permission: network access detected
low
Permission: filesystem access detected
high
Permission: shell access detected
low
Permission: env_vars access detected
info
SBOM generated: 1025 components
critical
AWS Access Key ID found in SAP-samples-hana-developer-cli-tool-example-48cc1e9/npm-shrinkwrap.json
high
Hardcoded Password found in SAP-samples-hana-developer-cli-tool-example-48cc1e9/utils/config-loader.js
high
Hardcoded Password found in SAP-samples-hana-developer-cli-tool-example-48cc1e9/docs/01-getting-started/configuration.md
high
Hardcoded Password found in SAP-samples-hana-developer-cli-tool-example-48cc1e9/docs/01-getting-started/environments.md
high
Hardcoded Password found in SAP-samples-hana-developer-cli-tool-example-48cc1e9/docs/03-features/mcp/implementation-guide.md
high
Hardcoded Password found in SAP-samples-hana-developer-cli-tool-example-48cc1e9/docs/03-features/mcp/implementation-complete.md
high
Hardcoded Password found in SAP-samples-hana-developer-cli-tool-example-48cc1e9/docs/05-development/mcp-server/setup-and-configuration.md
critical
RSA Private Key found in SAP-samples-hana-developer-cli-tool-example-48cc1e9/mcp-server/src/prompts.ts
medium
No build provenance detected (SLSA L0)