Back to Home
JSalas-RPA icon

mcp-server

by JSalas-RPA

Overview

Automates the end-to-end processing of incoming invoices from document extraction using OCR and LLMs to validation and posting in SAP S/4HANA.

Installation

Run Command
python server.py

Environment Variables

  • SAP_USERNAME
  • SAP_PASSWORD
  • SAP_SUPPLIER_URL
  • SAP_PURCHASE_ORDER_URL
  • SAP_INVOICE_POST_URL
  • SAP_MATERIAL_DOC_URL
  • API_OPENAI_KEY
  • datecKeyCredentials
  • LLAMAPARSE_API_KEY
  • BUCKET_NAME
  • EASYCONTACT_KEY
  • ENVIRONMENT
  • PORT

Security Notes

The code uses `os.getenv` for secrets, which is good practice. However, `image_storage.py` disables SSL certificate verification (`verify=False`) for `requests.get` calls under specific `ENVIRONMENT` conditions, creating a critical Man-in-the-Middle (MITM) vulnerability for network communications. Additionally, GCP credentials (`datecKeyCredentials`) are written to a temporary local file, posing a transient risk of exposure. LLM outputs are parsed as JSON, and while `clean_openai_json` attempts sanitization, complex malicious JSON from the LLM could theoretically be an issue, though less likely with a trusted model.

Similar Servers

Stats

Interest Score0
Security Score5
Cost ClassHigh
Avg Tokens1500
Stars0
Forks1
Last Update2026-01-15

Tags

invoice automationSAP integrationOCRLLMfinancial processing