Abap Adt MCP server

by williansaez·io.github.williansaez/abap-adt-mcp·v2.8.2·14 stars

No reviews yet

ABAP development from Claude and other MCP hosts: source, transports, tests, ATC, debugger

B75/100grade B

Write a review Install

What users say

No reviews yet

Be the first

Safety scan

B75/100

not scanned yet

Adoption

Growing

14 stars405 downloads/wk

Reviews

Write one

Nobody has reviewed Abap Adt yet.

If you have run it, two minutes of your experience saves the next person an afternoon.

Abap Adt tools

No tool declarations could be read from the package source. They show once the server is installed.

Not scanned yet. New listings are scanned within a day or two of arriving.

How Abap Adt compares

Against every graded MCP server, from our own scans and uptime checks. Updated after each scan run.

Safety score: 75/100; higher than 45% of 48,243 servers
GitHub stars: 14; more than 90% of 28,706 servers
Downloads a week: 405; more than 85% of 12,306 servers with a package

Release history: 6 versions in the registry since 2026-09-08, latest 2026-11-02, typically one every 10 days.

Install Abap Adt in Claude Code, Cursor or VS Code

Runs npx -y abap-adt-mcp on your machine. Read the scan report first; the gateway never runs local packages.

claude mcp add abap-adt-mcp -- npx -y abap-adt-mcp

Add to Cursor

What the publisher says

From the Abap Adt repository's README, as published. We do not edit it. Read it on GitHub

abap-adt-mcp

Let Claude read, write, test and check ABAP code on your SAP systems.

English · Português (Brasil) · Deutsch

abap-adt-mcp is a Model Context Protocol server. Run it next to Claude Desktop, Claude Code or any other MCP host, point it at one or more SAP systems, and the model gets the same ADT REST endpoints Eclipse uses: search objects, read and edit source, create transports, activate, run ABAP Unit and ATC, read short dumps, query tables. One server exposes 173 tools over as many SAP systems as you configure, S/4HANA Cloud and on-prem alike.

Use it deliberately, and prefer development systems. A destination without a policy block is fully writable within your SAP authorizations. Per-destination guard rails (read-only, allowed packages, denied tables) are enforced by the server itself, whatever the host approves, so a careless prompt cannot reach the wrong system.

What is new in 2.0.0
Setup
What to ask the model
Workflows in detail
Built-in prompts
Other ways to install
Authentication
Keeping it safe
Audit log
S/4HANA Cloud versus on-prem
Configuration reference
HTTP transport (optional)

What is new in 2.0.0

Released 2026-09-08. The full list is in CHANGELOG.md; what matters when you upgrade:

Shortened. The full README is on GitHub.

Nothing above is checked by us. What we check is on the safety report.

Abap Adt: common questions

Is Abap Adt MCP server safe?: Mostly: it is graded B (75/100). Read the Abap Adt safety report
How do I install Abap Adt?: It runs on your machine. Copy the Claude Code, Cursor, VS Code or Claude Desktop config from the install section.
Does Abap Adt need an API key?: Yes. The registry entry asks for SAP_SYSTEMS, MCP_HTTP_TOKEN, SAP_PASSWORD, SAP_OAUTH_CLIENT_SECRET.
Is Abap Adt maintained?: The last commit was 21 days ago (2026-10-15). The latest release is v2.8.2.
What can I use instead of Abap Adt?: Servers from other publishers that do the same job: MCP Appium - Mobile Development and Automation Server MCP server.
How does Abap Adt compare with other MCP servers?: safety score 75/100 (higher than 45% of 48,243 servers); github stars 14 (more than 90% of 28,706 servers); downloads a week 405 (more than 85% of 12,306 servers with a package). Full comparison.

Alternatives to Abap Adt

Same job from other publishers: the closest match first, then the best rated.

MCP Appium - Mobile Development and Automation Server
MCP server for Appium mobile automation on iOS and Android devices with test creation tools.
not reviewed
Established
A

Run it through the gateway

Local package. It runs on your machine, not through the gateway.

Rating: —
Safety grade: B · 75/100
Stars: 14
Downloads/wk: 405
Price: Free
Licence: MIT
Transport: Local · npm
Version: 2.8.2
Category: Everything else
Last release: 2026-10-15

Credentials it needs

SAP_SYSTEMS_FILEPath to a JSON file mapping destination names to system configs (url, client, authType basic/sso/sso2/oauth, credentials). Recommended; keep the file mode 0600. See systems.example.json
SAP_SYSTEMSsecretInline JSON map of destinations (same shape as SAP_SYSTEMS_FILE). Contains credentials — prefer SAP_SYSTEMS_FILE
SAP_DEFAULT_DESTINATIONDestination name used when a tool call omits `destination` (alternatively mark an entry with "default": true)
SAP_AUTH_TYPEDefault auth type for entries that don't specify one: sso (default), sso2, basic, or oauth
MCP_HTTP_PORTWhen set (1024-65535), serve Streamable HTTP on http://127.0.0.1:<port>/mcp with bearer-token auth instead of stdio
MCP_HTTP_HOSTBind address for the HTTP transport (default 127.0.0.1). Set 0.0.0.0 only inside containers that publish the port
MCP_HTTP_TOKENsecretBearer token for the HTTP transport; auto-generated and written to ~/.abap-adt-mcp/http-token when unset
MCP_HTTP_MAX_SESSIONSMaximum concurrent MCP sessions on the HTTP transport (default 16); further initialize requests get 503
MCP_HTTP_MAX_BODY_BYTESLargest request body the HTTP transport accepts, in bytes (default 4194304); larger bodies are refused with HTTP 413
MCP_HTTP_SESSION_TTL_MINUTESIdle minutes after which an HTTP session (and its SAP sessions/locks) is closed (default 30)
MCP_HTTP_ALLOWED_ORIGINSComma-separated Origin values allowed on the HTTP transport (loopback origins always allowed when bound to loopback; * allows any)
MCP_HTTP_ALLOWED_HOSTSComma-separated Host header values allowed (DNS-rebinding protection; loopback hosts always allowed when bound to loopback)
MCP_EXPORT_ROOTWhen set, exportPackageSources may only write inside this directory
MCP_AUDIT_FILEPath of a JSONL audit trail: one record per tool call (tool, destination, duration, outcome ok/error/denied/unavailable, policy gate, redacted argument summary)
MCP_ADT_TRACE_FILEDiagnostics: path of a JSONL trace with one line per ADT request (method, URI, status, headers). Cookie, Set-Cookie, Authorization and CSRF values are reduced to name and length; no response body is kept, error lines carry the first 300 characters of the redacted error text. Off when unset.
MCP_READ_ONLYSet to 1 to make every destination read-only (server-side; only read-only annotated tools plus login/logout run). Per-destination policies live in systems.json
MCP_ALLOW_DATA_PREVIEWSet to 1 to let tableContents read table and CDS rows on every destination that does not state policy.allowDataPreview itself (reading table data is off by default)
MCP_ALLOW_FREE_SQLSet to 1 to allow runQuery and tableContents with sqlQuery on every destination that does not state policy.allowFreeSql itself (free SQL is off by default; implies table data)
MCP_TOOLSETSToolsets to publish: comma list (core,source,objects,transports,analysis,tests,atc,data,discovery,runtime,refactoring,rap,services,git,debugger,traces) or a preset: all (default) or focused
MCP_DISABLED_TOOLSETSToolsets to hide, comma list (core cannot be disabled)
MCP_MAX_RESPONSE_CHARSCharacter budget for a single tool response before results are paged/truncated (default 40000, minimum 5000). Raise it if your MCP host accepts larger tool outputs
SAP_ALLOW_REENTRANCE_TICKETSet to 1 to enable the reentranceTicket tool (disabled by default: it returns a live SAP logon credential into the conversation)
SAP_URLLegacy single-system mode: base URL of the SAP system, e.g. https://host:44300
SAP_USERLegacy single-system mode: SAP username
SAP_PASSWORDsecretLegacy single-system mode: SAP password
SAP_CLIENTLegacy single-system mode: SAP client number, e.g. 100
SAP_LANGUAGELegacy single-system mode: logon language, e.g. EN
SAP_BROWSER_PATHSSO destinations: path to a Chromium/Chrome/Edge binary for the browser login (auto-detected when unset)
SAP_BROWSER_PROFILE_DIRSSO destinations: directory of the persistent browser profile that keeps the identity-provider session (default ~/.abap-adt-mcp/sso/<host>)
SAP_SSO2_COMMANDLegacy single-system sso2 mode: absolute path to the trusted local ticket provider
SAP_SSO2_ARGSLegacy single-system sso2 mode: JSON array of provider arguments (never put a ticket here)
SAP_SSO2_TIMEOUT_MSLegacy single-system sso2 mode: provider timeout in milliseconds (default 30000; range 1000-300000)
SAP_TLS_INSECURELegacy single-system mode: set to 1 to skip TLS certificate verification for that system only (sandboxes with self-signed certificates)
SAP_OAUTH_TOKEN_URLLegacy single-system mode with SAP_AUTH_TYPE=oauth: OAuth2 token endpoint (client_credentials)
SAP_OAUTH_CLIENT_IDLegacy single-system mode with SAP_AUTH_TYPE=oauth: OAuth2 client id
SAP_OAUTH_CLIENT_SECRETsecretLegacy single-system mode with SAP_AUTH_TYPE=oauth: OAuth2 client secret
SAP_OAUTH_SCOPELegacy single-system mode with SAP_AUTH_TYPE=oauth: optional OAuth2 scope
MCP_PROFILE_GATEPlatform gate for toolsets the destination does not expose (debugger, traces, abapGit, ...): enforce (default, refuse before calling SAP), warn (log only) or off
SAP_REQUEST_TIMEOUT_SECONDSSeconds an ADT request may receive nothing before it fails as a network error, so a connection that died while the machine slept cannot hang every call (default 600; 0 waits forever)
MCP_SOURCE_CACHE_TTL_SECONDSLifetime of the per-session source cache used by grepPackage, cdsViewInfo and syntaxCheckCode (default 300; 0 keeps entries until logout)
MCP_CACHE_DIRDirectory for the cached SAP cloudification repository used by apiReleaseState (default ~/.abap-adt-mcp/cache)
MCP_API_CLASSIFICATION_FILESExtra classification files for apiReleaseState, comma list: a path inside SAP's cloudification repository (partner/objectClassifications_ACME.json) or an https URL

Own this server?

Claim it to keep the listing current and reply to reviews. Claiming never changes the grade or hides a review.

Claim listing

Badge for your README

Shows the safety grade and links back to this page. It updates itself after every scan and review.

[![mcp.market](https://mcp.market/badge/williansaez-abap-adt-mcp.svg)](https://mcp.market/server/williansaez-abap-adt-mcp)

How the badge works