Back to Home
gavdilabs icon

cap-mcp-plugin

Verified Safe

by gavdilabs

Overview

Integrate SAP CAP services with AI agents using the Model Context Protocol (MCP) by automatically generating MCP servers from annotated CAP services, enabling AI-native data access, intelligent automation, and business intelligence.

Installation

Run Command
cds serve

Environment Variables

  • NODE_ENV
  • npm_package_name
  • npm_package_version
  • VCAP_APPLICATION
  • MCP_ENABLE_JSON
  • CDS_MCP_NAME
  • CDS_MCP_VERSION
  • CDS_MCP_AUTH
  • CDS_MCP_INSTRUCTIONS
  • CDS_MCP_CAPABILITIES_TOOLS_LISTCHANGED
  • CDS_MCP_CAPABILITIES_RESOURCES_LISTCHANGED
  • CDS_MCP_CAPABILITIES_RESOURCES_SUBSCRIBE
  • CDS_MCP_CAPABILITIES_PROMPTS_LISTCHANGED
  • CDS_MCP_WRAP_ENTITIES_TO_ACTIONS
  • CDS_MCP_WRAP_ENTITY_MODES

Security Notes

The server demonstrates strong security awareness through multiple layers of input validation (Zod for schemas, `ODataQueryValidator` with regex for forbidden patterns like SQL/JS injection), robust integration with CAP's authentication and authorization (`@sap/xssec` for OAuth/JWT, `cds.context.user`, `@restrict`), environment variable sanitization, and use of `helmet` for HTTP security headers. Custom URI template implementation, while a workaround for an SDK bug, includes explicit security checks. Sensitive fields can be omitted from output using `@mcp.omit` for data privacy, though these fields can still be provided as inputs for create/update operations. A `SECURITY.md` file is provided for vulnerability reporting, indicating proactive security posture.

Similar Servers

Stats

Interest Score48
Security Score9
Cost ClassLow
Avg Tokens100
Stars49
Forks14
Last Update2025-12-03

Tags

MCPCAPpluginSAPAIODataLLM