Back to Home
fr0ster icon

mcp-abap-adt

by fr0ster

Overview

MCP server for integrating with SAP ABAP Development Tools (ADT) to perform read, write, and system operations on ABAP objects.

Installation

Run Command
mcp-abap-adt

Environment Variables

  • SAP_URL
  • SAP_CLIENT
  • SAP_AUTH_TYPE
  • SAP_USERNAME
  • SAP_PASSWORD
  • SAP_JWT_TOKEN
  • SAP_REFRESH_TOKEN
  • SAP_UAA_URL
  • SAP_UAA_CLIENT_ID
  • SAP_UAA_CLIENT_SECRET
  • MCP_ENV_PATH
  • MCP_TRANSPORT
  • MCP_HTTP_PORT
  • MCP_HTTP_HOST
  • MCP_HTTP_ENABLE_JSON_RESPONSE
  • MCP_HTTP_ALLOWED_ORIGINS
  • MCP_HTTP_ALLOWED_HOSTS
  • MCP_HTTP_ENABLE_DNS_PROTECTION
  • MCP_SSE_PORT
  • MCP_SSE_HOST
  • MCP_SSE_ALLOWED_ORIGINS
  • MCP_SSE_ALLOWED_HOSTS
  • MCP_SSE_ENABLE_DNS_PROTECTION
  • AUTH_BROKER_PATH
  • MCP_UNSAFE
  • MCP_USE_AUTH_BROKER
  • MCP_BROWSER
  • DEBUG_AUTH_LOG
  • DEBUG_HTTP_REQUESTS
  • DEBUG_CONNECTORS
  • DEBUG_HANDLERS
  • DEBUG_CONNECTION_MANAGER
  • HANDLER_LOG_SILENT

Security Notes

Critical vulnerability: The `writeResultToFile` function has its path validation disabled, allowing arbitrary file writes to any location on the file system where the server is running. This poses a severe risk of system compromise if a handler is invoked with untrusted file paths. Additionally, while configurable, listening on all network interfaces (`0.0.0.0`) requires robust network segmentation and client-side credential management to prevent unauthorized access. The extensive use of `process.env` for sensitive configurations means that the environment must be secured.

Similar Servers

Stats

Interest Score38
Security Score1
Cost ClassLow
Stars8
Forks0
Last Update2026-01-13

Tags

ABAPSAP ADTMCPDevelopment ToolsServer