b1-mcp-server for SAP B1

b1-mcp-server

A secure Model Context Protocol server that gives an AI client (e.g. Claude Code) guarded access to SAP Business One via both the database (HANA / MS SQL) and the Service Layer OData API.

Features

(GET), executeservicelayerwrite (PATCH / POST / DELETE), executeservicelayerwriteunattended (the same writes without approval, development profiles only), getschemainfo, checkconnection.

• 7 MCP tools: connectdatabase, executesql, executeservicelayer

connection profiles. No restart needed.

• Multi-environment: switch between client databases at runtime via named

INSERT/UPDATE/DELETE/DROP/CREATE/ALTER/EXEC is blocked server-side with no confirmation bypass — writes are handed to a human to run in a real DB client.

• Read-only by design: the SQL path executes only SELECT. Every

through the same validation whether the user or the AI wrote it. Anonymous DO BEGIN..END blocks are classified by the most dangerous statement inside them, so a write hidden behind a trailing SELECT is still a write.

• Server-side guardrails: all raw SQL submitted to execute_sql goes

Layer calls that reach policy or execution are recorded as JSON Lines, including policy denials.

• Audit trail: selected-profile connection attempts and database/Service

• Rate limiting per tool with sliding window.

Install

Requires Node.js 20 or newer.

npx b1-mcp-server

Or add to your Claude Code MCP config:

{
  "mcpServers": {
    "b1-db": {
      "command": "npx",
      "args": ["-y", "b1-mcp-server"]
    }
  }
}

Dependencies

Five runtime dependencies: @modelcontextprotocol/sdk, zod, @sap/hana-client and mssql (plus generic-pool, which backs the HANA connection pool). Database access is a local driver — src/db/directDb.ts — built directly on the HANA and MS SQL clients; Service Layer traffic goes through the strict-TLS adapter in src/sl/serviceLayerAdapter.ts using Node's own fetch and https. No HTTP framework, no axios, no PostgreSQL driver.

A clean install audits at found 0 vulnerabilities with no overrides block, which also means npx -y b1-mcp-server is clean — overrides never applied there, since npx runs without a root package.json.

Connection profiles

The server starts unconnected. Connections are loaded from ~/.claude/connections.json (one profile per environment) and selected at runtime by the AI via the connect_database tool.

Profile matching behavior in connect_database:

• Exact match by id or dbName is preferred.
• Partial matches are accepted only when they resolve to a single profile.
• Ambiguous partial matches are rejected with a list of candidates.

Example ~/.claude/connections.json:

Shortened. The full README is on GitHub.