SAP HANA MCP server — Enterprise Model Context Protocol server for SAP HANA. Use with Claude Code, VS Code. npm: hana-mcp-server
Claim it to get a verified publisher badge, a free copy of our full audit findings, and direct contact for any high-priority issues we find.
Install from
M8ven verifies MCPs across every public registry — install directly from whichever one you prefer.
Disclosed vulnerabilities in this server's declared npm dependencies (via OSV). Whether each is reachable depends on the installed versions.
axios Vulnerable to Full Man-in-the-Middle via Prototype Pollution Gadget in `config.proxy`
axios Vulnerable to Credential Theft and Response Hijacking via Prototype Pollution Gadget in Config Merge
Axios is Vulnerable to Denial of Service via __proto__ Key in mergeConfig
Axios: Header Injection via Prototype Pollution
Allocation of Resources Without Limits or Throttling in Axios
process.env. You'll be asked to provide them before it can run.ENABLE_CONSOLE_LOGGING— "": "false"ENABLE_FILE_LOGGING— "": "true",HANA_ALLOW_DELETE— DML guard — INSERT / UPDATE / DELETE / TRUNCATE blocked by default; opt-in individually via HANA_ALLOW_INSERT / HANA_ALLOW_UPDATE /HANA_ALLOW_INSERT— DML guard — INSERT / UPDATE / DELETE / TRUNCATE blocked by default; opt-in individually via / HANA_ALLOW_UPDATE / HANA_ALLOW_DELETEHANA_ALLOW_UPDATE— DML guard — INSERT / UPDATE / DELETE / TRUNCATE blocked by default; opt-in individually via HANA_ALLOW_INSERT / / HANA_ALLOW_DELETEHANA_AUDIT_ENABLEDHANA_AUDIT_LOG_FILEHANA_CONNECTION_POOL_SIZE— 3 HANA connection pool size (1–20)HANA_CONNECTION_TYPE— "": "auto",HANA_DATABASE_NAME— "": "HQQ",HANA_ENCRYPT— "": "true",HANA_HOST— "": "your-hana-host.com",HANA_INSTANCE_NUMBER— MDC instance id (e.g. 10)HANA_LIST_DEFAULT_LIMIT— 200 List tools: default and max page sizeHANA_LIVE_DISTINCT_COLUMNHANA_LIVE_SAMPLE_SCHEMAHANA_LIVE_SAMPLE_TABLEHANA_LIVE_STRICTHANA_LIVE_TABLE_REFHANA_LIVE_TIMEOUT_MSHANA_LIVE_TOOL_SCHEMAHANA_LIVE_TOOL_TABLEHANA_LIVE_TRY_REAL_TABLEHANA_MAX_CELL_CHARS— 200 Truncate long cell text (active when limits enabled)HANA_MAX_RESULT_COLS— 50 Max columns per row returned (active when limits enabled)HANA_MAX_RESULT_ROWS— 50 Max rows per hana_execute_query page (active when limits enabled)HANA_METADATA_CATALOG_DATABASEHANA_PASSWORD— "": "your-password",HANA_PORT— "": "443",HANA_QUERY_DEFAULT_OFFSET— 0 Default offset (active when limits enabled)HANA_QUERY_LIMITS_ENABLED— false Set to true to enable automatic row/column/cell caps. When false, user-provided maxRows, offset, and includeTotal still work.HANA_QUERY_SNAPSHOT_TTL_MS— 300000 Snapshot id lifetime for query pagingHANA_QUERY_TIMEOUT_MS— 0 Statement timeout (ms); 0 = disabled. Per-call timeout_ms overrides.HANA_RESOURCE_LIST_MAX_ITEMS— 500 Cap embedded names in hana:/// payloadsHANA_RUN_QUERY_TIMEOUT_MSHANA_SCHEMA— "": "your-schema",HANA_SEMANTICS_PATH— File path to dictionary JSON (wins over URL)HANA_SEMANTICS_TTL_MS— 60000 Cache / reload behaviorHANA_SEMANTICS_URL— HTTPS URL to same formatHANA_SSL— "": "true",HANA_USER— "": "your-username",HANA_VALIDATE_CERT— "": "true",LOG_LEVEL— "": "info",MCP_HTTP_ALLOWED_ORIGINS— CORS — [ENVIRONMENT.md §7](docs/ENVIRONMENT.md#7-http-transport-npm-run-starthttp)MCP_HTTP_AUTH_ENABLED— true → require Authorization: Bearer <token> on POST /mcpMCP_HTTP_HOST— Tuning , MCP_HTTP_PORTMCP_HTTP_JWT_AUDIENCE— Optional expected audMCP_HTTP_JWT_ISSUER— Issuer / JWKS (omit on SAP BTP with bound XSUAA)MCP_HTTP_JWT_SCOPES_REQUIRED— Optional scope listMCP_HTTP_PORT— Tuning MCP_HTTP_HOST,PORTVCAP_SERVICES[](https://m8ven.ai/mcp/hatrigt-hana-mcp-server-j4q08s)