← Back to search

@rosa-mcp/server

GitHub Actions Scanned 5d ago

ROSA — Released Objects Search Assistant. MCP server and REST API for the SAP Cloudification Repository: search released objects, classic APIs, and successors with Clean Core Level filtering (A/B/C/D).

npm
B
88.8 / 100

Versions

No versions found.

PermissionsTool SafetyAuthAnnotationsCode QualityStabilitySpecVuln HistoryAuthorTransparencyCommunity

Tools 7

sap_search_objects
annotations: verified low

Search for SAP objects (classes, interfaces, CDS views, tables, data elements,

readOnlyHint true openWorldHint false idempotentHint true destructiveHint false
sap_get_object_details
annotations: verified low

Get detailed information about a specific SAP object by its exact type and name.

readOnlyHint true openWorldHint false idempotentHint true destructiveHint false
sap_find_successor
annotations: verified low

Find the released successor(s) of a deprecated or non-released SAP object.

readOnlyHint true openWorldHint false idempotentHint true destructiveHint false
sap_list_object_types
annotations: verified low

List all available TADIR object types in the Cloudification Repository

readOnlyHint true openWorldHint false idempotentHint true destructiveHint false
sap_get_statistics
annotations: verified low

Get overall statistics about the SAP Cloudification Repository:

readOnlyHint true openWorldHint false idempotentHint true destructiveHint false
sap_list_versions
annotations: verified low

List all available S/4HANA PCE versions for Private Cloud and On-Premise systems.

readOnlyHint true openWorldHint false idempotentHint true destructiveHint false
sap_check_clean_core_compliance
annotations: verified low

Check the Clean Core compliance of a list of SAP objects.

readOnlyHint true openWorldHint false idempotentHint true destructiveHint false

Permissions 1

env_vars low
Server uses env_vars capabilities via: process.env

Scan Findings 25

info
Tool 'sap_search_objects' annotations are consistent annotation_checker · 80%
info
Tool 'sap_get_object_details' annotations are consistent annotation_checker · 80%
info
Tool 'sap_find_successor' annotations are consistent annotation_checker · 80%
info
Tool 'sap_list_object_types' annotations are consistent annotation_checker · 80%
info
Tool 'sap_get_statistics' annotations are consistent annotation_checker · 80%
info
Tool 'sap_list_versions' annotations are consistent annotation_checker · 80%
info
Tool 'sap_check_clean_core_compliance' annotations are consistent annotation_checker · 80%
medium
OAuth implementation without PKCE auth_checker · 75%
info
Sandbox failed to start for behavioral verification behavioral_verifier · 100%
medium
Vulnerable dependency: esbuild@0.27.3 (GHSA-g7r4-m6w7-qqqr) dependency_analyzer · 95%
medium
Vulnerable dependency: vitest@3.2.4 (GHSA-5xrq-8626-4rwp) dependency_analyzer · 95%
info
package.json metadata manifest_parser · 100%
info
Tool: sap_search_objects manifest_parser · 85%
info
Tool: sap_get_object_details manifest_parser · 85%
info
Tool: sap_find_successor manifest_parser · 85%
info
Tool: sap_list_object_types manifest_parser · 85%
info
Tool: sap_get_statistics manifest_parser · 85%
info
Tool: sap_list_versions manifest_parser · 85%
info
Tool: sap_check_clean_core_compliance manifest_parser · 85%
info
Transport: stdio manifest_parser · 90%
info
Required env vars (11) manifest_parser · 80%
info
Sandbox failed to start for output poisoning scan output_poisoning · 100%
low
Permission: env_vars access detected permission_analyzer · 90%
info
SBOM generated: 413 components sbom_generator · 100%
medium
No build provenance detected (SLSA L0) slsa_assessor · 90%