Back to Home
JeanmarcoLujan icon

MCP-Server-y-SAP-B1

by JeanmarcoLujan

Overview

Acts as a Smart Connector for SAP Business One (B1) by exposing a subset of its data via the Model Context Protocol (MCP), enabling integration with AI models or other MCP-compatible clients.

Installation

Run Command
node dist/main

Environment Variables

  • HANA_HOST
  • HANA_PORT
  • HANA_USER
  • HANA_PASSWORD
  • HANA_DB_SCHEMA
  • PORT

Security Notes

CRITICAL: Hardcoded SAP HANA database credentials (username and password) found in 'test-hana.js'. This file should not contain sensitive information, especially if it could be accidentally deployed. CRITICAL: 'sslValidateCertificate' is set to 'FALSE' for SAP HANA connections in both the test file and the main HanaService, disabling essential SSL/TLS certificate validation. This makes the database connection highly vulnerable to Man-in-the-Middle (MITM) attacks and should be 'TRUE' in production. Positive: Uses environment variables for main service configuration, and parameterized queries in B1QueryService to prevent SQL injection. The SAP_SCHEMA whitelist is a good security practice for controlled data access.

Similar Servers

Stats

Interest Score0
Security Score3
Cost ClassLow
Avg Tokens500
Stars0
Forks0
Last Update2025-12-01

Tags

NestJSSAP HANAModel Context ProtocolB1ERPAI ConnectorBackend Service