Back to MCP Trust Indexm8ven
54
/ 100
1 month ago
glama

ABAP MCP Server

A standalone MCP server for agentic ABAP development with 67 tools via ADT REST API, featuring a forced clean ABAP workflow, pre-coding DDIC validation, and four network routing modes.

→ jackxiong11894/dimidr-abap-mcp· listed on glama
Is this your MCP?

Claim it to get a verified publisher badge, a free copy of our full audit findings, and direct contact for any high-priority issues we find.

Install from

Glama

M8ven verifies MCPs across every public registry — install directly from whichever one you prefer.

// key findings
⚠️
Known vulnerabilities in dependencies: 3 high
Affects packages this MCP installs at runtime. Upgrade or remove the affected dependency.
⚠️
Tests do not pass
Either the test suite is broken or the code regressed. Either way the published behaviour can’t be verified by the publisher’s own tests.
✅
No credential exfiltration, no sensitive file access, no obfuscation
Static analysis found nothing flowing your secrets to unexpected places.
🔐
You'll be asked for 1 credential: SAP_PASSWORD
These are read from process.env at runtime. Make sure you trust where they’ll be sent.
// known CVEs in dependencies3 high

Disclosed vulnerabilities in this server's declared npm dependencies (via OSV). Whether each is reachable depends on the installed versions.

high@modelcontextprotocol/sdk@1.10.1GHSA-345p-7cg4-v4c7

@modelcontextprotocol/sdk has cross-client data leak via shared server/transport instance reuse

high@modelcontextprotocol/sdk@1.10.1GHSA-8r9q-7v3j-jr4g

Anthropic's MCP TypeScript SDK has a ReDoS vulnerability

high@modelcontextprotocol/sdk@1.10.1GHSA-w48q-cv73-mx4w

Model Context Protocol (MCP) TypeScript SDK does not enable DNS rebinding protection by default

Depend on this server? Get alerted when its CVEs change.Watch this server free →
// required environment variables
This server reads these from process.env. You'll be asked to provide them before it can run.
configCF_HOME— Der Server gibt eine präzise Fehlermeldung mit cf-Befehl-Vorschlag aus. Üblicherweise reicht: =<projekt> cf login --sso.
configSAP_ALLOW_UNAUTHORIZED— "": "true",
configSAP_BTP_CF_HOME— /abs/path/<project> # optional, projekteigene cf-Session
configSAP_BTP_CONNECTIVITY_LOCATION_ID— leer = Default-CC; ggf. mit dem Diagnose-Tool ermitteln
configSAP_BTP_CONNECTIVITY_LOCATION_ID_BASE64
configSAP_BTP_CONNECTIVITY_PROXY
configSAP_BTP_DESTINATION_CDS_BIND_FILE
configSAP_BTP_DESTINATION_CDS_BIND_NAME
configSAP_BTP_DESTINATION_CREDS_FILE
configSAP_CLIENT— "": "<CLIENT>",
🔐 secretSAP_PASSWORD— .env öffnen und SAP_URL, SAP_USER, eintragen
configSAP_URL— .env öffnen und , SAP_USER, SAP_PASSWORD eintragen
configSAP_USER— .env öffnen und SAP_URL, , SAP_PASSWORD eintragen
configSOURCE_CACHE_TTL_MS— ⚡ Source-Cache — TTL-Cache für getObjectSource (, Default 30 s); wiederholte Reads treffen den Cache, Writes/Deletes invalidieren automatisch — nie veralteter Quelltext nach einer Mutation.
// full audit trail
The full breakdown of what we checked, the deductions that landed, the network hosts, the dependency advisories, and concrete fix guidance is available to verified publishers.
// improvement guidance — verified publishers only
We have 4 concrete improvements we can share with the publisher of this MCP. Each comes with specific guidance to raise the trust score.
// embed badge in your README
[![M8ven Score](https://m8ven.ai/badge/mcp/jackxiong11894-dimidr-abap-mcp-k36zry)](https://m8ven.ai/mcp/jackxiong11894-dimidr-abap-mcp-k36zry)
commit: f58d4521aa3b12643b8ead2ed5894ceeecc6d220
code hash: c6044560c7a812a943e63d7dc12137c8c3617871822beb6cfd95595c74ded3a6
verified: 6/14/2026, 9:58:46 AM
view raw JSON →