simplifier-mcp (simplifier-ag/simplifier-mcp) is an MCP server listed on the M8ven Trust Index. It scores 58 out of 100, grade D. It declares 35 tools. No publisher has claimed this listing.
Caution. Specific findings reduced this grade. They are listed on the page. Grades reflect the full trust pyramid: code, verification depth, and reputation. New projects cap at C until adoption is earned.
How we verified
Verified is a snapshot. Live keeps it current, and builds your track record.
⚡ Connect GitHub → continuous verification on every pushwhy connect →Who stands behind it
simplifier-ag
Source: ModelScope
Claim it to get a verified publisher badge, a free copy of our full audit findings, and direct contact for any high-priority issues we find. Or connect your repo for our deepest verification, Live Monitored: read-only, revoke anytime. What we access →
Install from
The grade above is for the source repository. Registries can serve a different version, so we mark the ones we were not able to read.
These names and descriptions are the publisher's own, read from the source code. We print them as written. Our assessment is the findings above, not this list.
businessobject-list# List all server-side Business Objects Returns the names of every Business Object on the connected Simplifier instance. Equivalent to reading the `simplifier://businessobjects` resource; prefer the resource in clients that support MCP Resources.
businessobject-get# Get details of a single Business Object Returns metadata, dependencies, tags, project assignments and the list of function names of a Business Object. Equivalent to reading the `simplifier://businessobject/{name}` resource; prefer the resource in clients that support MCP Resources.
businessobject-function-get# Get details of a single Business Object function Returns parameter metadata (names, data types, aliases) and the JavaScript source code of the function. Equivalent to reading the `simplifier://businessobject/{objectName}/function/{functionName}` resource; prefer the resource in clients that suppo…
businessobject-updatebusinessobject-function-updatebusinessobject-function-testbusinessobject-delete# Delete an existing Business Object
businessobject-function-delete# Delete an existing Business Object Function
datatype-list# List data types Returns the names, ids and categories of all data types, optionally filtered by namespace. When a `namespace` is given, only data types in that namespace are returned; otherwise root-namespace data types (including base types) are returned. Equivalent to reading the `simplifier:/…
datatype-get# Get details of a single data type Returns complete information (fields, category, description, tags, project assignments) for a data type identified by its fully qualified name. For types in the root namespace, pass just the name; for types in a namespace, pass `namespace/name` (e.g. `bo/MyBO/MyS…
datatype-updatedatatype-deleteserver-instance-list# List configured server instances Returns all server instances known to the connected Simplifier server, including which one is active. Useful when choosing the value for `endpoint.endpoint` in connector endpoint configurations.
server-active-instance-get# Get the currently active server instance Returns the active Simplifier server instance. Use its `name` as the endpoint name when creating connector endpoint configurations for the server you are currently connected to. Equivalent to reading the `simplifier://server-active-instance` resource; pre…
connector-list# List all Connectors Returns names, descriptions, types, active status and call counts for every Connector on the Simplifier instance. Equivalent to reading the `simplifier://connectors` resource; prefer the resource in clients that support MCP Resources.
connector-get# Get details of a single Connector Returns full connector configuration including endpoints, login method and metadata. Equivalent to reading the `simplifier://connector/{name}` resource; prefer the resource in clients that support MCP Resources.
connector-call-list# List all calls of a Connector Returns the names, descriptions, parameter counts and executable flag for every call of the given Connector. Equivalent to reading the `simplifier://connector/{name}/calls` resource; prefer the resource in clients that support MCP Resources.
connector-call-get# Get details of a single Connector call Returns full parameter information (names, data types, aliases, optionality, constant values). Equivalent to reading the `simplifier://connector/{connectorName}/call/{callName}` resource; prefer the resource in clients that support MCP Resources.
connector-updateconnector-call-updateconnector-wizard-rfc-create# Create one or more calls for an RFC connector using the wizard The RFC connector requires calls to refer to existing functions on the remote SAP system. To find available functions, use the resource template `simplifier://connector-wizard/{connectorName}/search/{term}/{page}`. Select the desired …
connector-call-testconnector-call-delete# Delete a Connector call
connector-delete# Delete a Connector
connector-wizard-rfc-searchdocumentation-getlogging-listloginmethod-list# List all Login Methods Returns names, descriptions, types and supported connectors for every Login Method. Equivalent to reading the `simplifier://loginmethods` resource; prefer the resource in clients that support MCP Resources.
loginmethod-get# Get details of a single Login Method Returns full configuration (type, source, target, method-specific settings) for a Login Method. Equivalent to reading the `simplifier://loginmethod/{name}` resource; prefer the resource in clients that support MCP Resources.
oauthclient-list# List all OAuth2 Clients Returns names, descriptions and mechanism information for all OAuth2 clients configured on the instance. Use the returned `name` values as `oauth2ClientName` when creating OAuth2 Login Methods via `loginmethod-update`. Equivalent to reading the `simplifier://oauthclients`…
loginmethod-updatesap-system-updatesap-system-delete# Delete an existing SAP system
sap-system-list# List all SAP systems Returns all SAP systems configured on the connected Simplifier instance, including their instance restrictions and system type. Equivalent to reading the `simplifier://sap-systems` resource; prefer the resource in clients that support MCP Resources.
sap-system-get# Get details of a single SAP system Returns full configuration (system id, client, application server, SNC settings, etc.) for a SAP system. SNC Quality of Protection is returned as its string form for convenience. Equivalent to reading the `simplifier://sap-system/{name}` resource; prefer the re…
Disclosed vulnerabilities in this server's declared npm dependencies (via OSV). Whether each is reachable depends on the installed versions.
@modelcontextprotocol/sdk has cross-client data leak via shared server/transport instance reuse
Anthropic's MCP TypeScript SDK has a ReDoS vulnerability
Model Context Protocol (MCP) TypeScript SDK does not enable DNS rebinding protection by default
Vercel’s AI SDK's filetype whitelists can be bypassed when uploading files
HTTP_REQUEST_LOG_FILERUNNING_IN_DOCKERSIMPLIFIER_BASE_URLclaude mcp add simplifier npx @simplifierag/simplifier-mcp@latest --env SIMPLIFIER_TOKEN=<your current simplifier token> --env =https://<yourinstance>-dev.simplifier.cloudSIMPLIFIER_CREDENTIALS_FILESIMPLIFIER_SKIP_CONNECTION_TESTSIMPLIFIER_TOKENclaude mcp add simplifier npx @simplifierag/simplifier-mcp@latest --env =<your current simplifier token> --env SIMPLIFIER_BASE_URL=https://<yourinstance>-dev.simplifier.cloudTool inputs are validated
28/35 tool handlers declare input schemas (80%)
Declare an inputSchema with zod/joi/yup on every tool definition.
Production dependencies are patched
0 critical, 3 high severity in production deps — @modelcontextprotocol/sdk@1.18.1 (high), @modelcontextprotocol/sdk@1.18.1 (high)
Run npm audit fix, or upgrade the affected packages to a non-vulnerable version.
Domain consistency
npm scope @simplifierag doesn't match GitHub owner simplifier-ag
Use the same org name across GitHub, npm, and your homepage so users can verify the publisher.
Claim the listing to review these findings one by one and send us a correction where you disagree, straight to the team. Claiming also means we tell you when the grade moves, and reach you first if we find anything urgent.
[](https://m8ven.ai/mcp/simplifier-ag/simplifier-mcp)?variant=verified from the URL.Vetting this one by hand? Tool Check is an MCP that scores other MCPs. Add it once and ask Claude, ChatGPT, or any MCP client to grade a server, surface CVEs, check the publisher, and suggest safer alternatives — before you install.
https://m8ven.ai/api/mcp/tool-check