Back to Home
gavdilabs icon

cap-mcp-plugin

Verified Safe

by gavdilabs

Overview

Integrate SAP CAP services with the Model Context Protocol (MCP) to expose them as AI-accessible resources, tools, and prompts for natural language interaction and automation.

Installation

Run Command
cds serve

Environment Variables

  • npm_package_name
  • npm_package_version
  • NODE_ENV
  • MCP_ENABLE_JSON
  • CDS_MCP_NAME
  • CDS_MCP_VERSION
  • CDS_MCP_AUTH
  • CDS_MCP_CAPABILITIES_TOOLS_LISTCHANGED
  • CDS_MCP_CAPABILITIES_RESOURCES_LISTCHANGED
  • CDS_MCP_CAPABILITIES_RESOURCES_SUBSCRIBE
  • CDS_MCP_CAPABILITIES_PROMPTS_LISTCHANGED
  • CDS_MCP_WRAP_ENTITIES_TO_ACTIONS
  • CDS_MCP_WRAP_ENTITY_MODES
  • CDS_MCP_INSTRUCTIONS_FILE

Security Notes

The server implements robust security measures including input validation (Zod, ODataQueryValidator with forbidden patterns), sanitization of environment variables, and leverages CAP's authentication and authorization system (inheriting roles and restrictions). It uses helmet for HTTP security headers and CORS. OAuth integration relies on @sap/xssec for token validation and exchange. Potential area of concern includes `cds.parse.expr` for OData filters, though it's heavily mitigated by prior validation.

Similar Servers

Stats

Interest Score47
Security Score9
Cost ClassMedium
Avg Tokens1500
Stars52
Forks17
Last Update2026-01-13

Tags

CAPMCPAIIntegrationAPISAP