Btp Sap Odata To MCP Server

by lemaiwo• 143•• Scanned•Claim this listing•Request removal

BTP CloudFoundry Node.js MCP server for SAP OData services integration

Btp Sap Odata To MCP Server is an open-source mcp server by lemaiwo, written mainly in TypeScript, with 143 GitHub stars and the MIT license. Its code was last updated May 22, 2026.

Scan summary: scanned Nov 5, 2026 at commit 9ae49cf. Seen able to connect to the internet. Scan policy

Scanned
Full scan at 9ae49cf · Nov 5, 2026
Scanned Builds
Static code scanpass
Secrets scanpass
Dependency audit119 known vulnerabilitiesfail
Manifestnonewarn
Buildpass
Boot & handshakefail
Network egressfail
Reproducible (×3)n/a

Findings (31)

  • high
    dependencies issue
    Details are available to the maintainer after claiming this listing.
  • medium
    @modelcontextprotocol/sdk@1.17.2: 8 known vulnerabilities
    GHSA-345p-7cg4-v4c7, GHSA-46jr-4wx8-v453, GHSA-6prh-2h8m-c8cw, GHSA-6qxp-vccf-f47h, GHSA-8r9q-7v3j-jr4g +3 more
    package-lock.json
  • medium
    @xmldom/xmldom@0.9.8: 17 known vulnerabilities
    GHSA-27p8-2357-5qqv, GHSA-2v35-w6hq-6mfw, GHSA-3px3-54cx-rmw9, GHSA-4w3w-2rp5-g8jm, GHSA-6gmq-8vp8-gcm6 +12 more
    package-lock.json
  • medium
    axios@1.12.0: 32 known vulnerabilities
    GHSA-35jp-ww65-95wh, GHSA-3g43-6gmg-66jw, GHSA-3p68-rc4w-qgx5, GHSA-3w6x-2g7m-8v23, GHSA-42h9-826w-cgv3 +27 more
    package-lock.json
  • medium
    body-parser@1.20.3: 2 known vulnerabilities
    GHSA-27r3-jxmh-p828, GHSA-v422-hmwv-36x6
    package-lock.json
  • medium
    body-parser@2.2.0: 3 known vulnerabilities
    GHSA-27r3-jxmh-p828, GHSA-v422-hmwv-36x6, GHSA-wqch-xfxh-vrr4
    package-lock.json
  • medium
    brace-expansion@1.1.12: 7 known vulnerabilities
    GHSA-3jxr-9vmj-r5cp, GHSA-6j4f-fj2g-mc7p, GHSA-f886-m6hf-6m8v, GHSA-mh99-v99m-4gvg, GHSA-q2hr-2g5m-vwhr +2 more
    package-lock.json
  • medium
    brace-expansion@2.0.2: 7 known vulnerabilities
    GHSA-3jxr-9vmj-r5cp, GHSA-6j4f-fj2g-mc7p, GHSA-f886-m6hf-6m8v, GHSA-mh99-v99m-4gvg, GHSA-q2hr-2g5m-vwhr +2 more
    package-lock.json
  • medium
    flatted@3.3.3: 2 known vulnerabilities
    GHSA-25h7-pfq9-p65f, GHSA-rf6f-7fwh-wjgh
    package-lock.json
  • medium
    form-data@4.0.4: 1 known vulnerability
    GHSA-hmw2-7cc7-3qxx
    package-lock.json
  • medium
    js-yaml@4.1.0: 5 known vulnerabilities
    GHSA-2883-xcg3-v3hh, GHSA-52cp-r559-cp3m, GHSA-5p4m-2wfm-xmqj, GHSA-h67p-54hq-rp68, GHSA-mh29-5h37-fv8m
    package-lock.json
  • medium
    jws@3.2.2: 1 known vulnerability
    GHSA-869p-cjfg-cm3x
    package-lock.json
  • medium
    lodash@4.17.21: 2 known vulnerabilities
    GHSA-r5fr-rjxr-66jc, GHSA-xxjr-mmjv-4gpg
    package-lock.json
  • medium
    minimatch@3.1.2: 3 known vulnerabilities
    GHSA-23c5-xmqv-rm74, GHSA-3ppc-4f35-3m26, GHSA-7r86-cg39-jmmj
    package-lock.json
  • medium
    minimatch@9.0.5: 4 known vulnerabilities
    GHSA-23c5-xmqv-rm74, GHSA-3ppc-4f35-3m26, GHSA-7r86-cg39-jmmj, GHSA-g3hv-75wg-m249
    package-lock.json
  • medium
    path-to-regexp@0.1.12: 1 known vulnerability
    GHSA-37ch-88jc-xwx2
    package-lock.json
  • medium
    path-to-regexp@8.2.0: 2 known vulnerabilities
    GHSA-27v5-c462-wpq7, GHSA-j3q9-mxjg-w52f
    package-lock.json
  • medium
    picomatch@2.3.1: 2 known vulnerabilities
    GHSA-3v7f-55p6-f55p, GHSA-c2c7-rcm5-vvqj
    package-lock.json
  • medium
    uuid@11.1.0: 1 known vulnerability
    GHSA-w5hq-g745-h8pq
    package-lock.json
  • medium
    ws@8.18.3: 2 known vulnerabilities
    GHSA-58qx-3vcg-4xpx, GHSA-96hv-2xvq-fx4p
    package-lock.json
  • medium
    zod@3.25.76: 1 known vulnerability
    GHSA-mrhx-c7xc-m3w5
    package-lock.json
  • medium
    MCP server didn't complete the protocol handshake
    server exited early with code 1
  • low
    @humanfs/node@0.16.6: 1 known vulnerability
    GHSA-p498-v437-472g
    package-lock.json
  • low
    ajv@6.12.6: 1 known vulnerability
    GHSA-2g4f-4pwh-qvx6
    package-lock.json
  • low
    follow-redirects@1.15.11: 1 known vulnerability
    GHSA-r4q5-vmmm-2653
    package-lock.json
  • low
    moment@2.29.4: 1 known vulnerability
    GHSA-4p3w-j4w9-5jqw
    package-lock.json
  • low
    moment@2.30.1: 1 known vulnerability
    GHSA-4p3w-j4w9-5jqw
    package-lock.json
  • low
    qs@6.13.0: 5 known vulnerabilities
    GHSA-4mjr-xmp4-gh2g, GHSA-6pq8-jhm2-2vcw, GHSA-6rw7-vpxm-498p, GHSA-q8mj-m7cp-5q26, GHSA-w7fw-mjwx-w883
    package-lock.json
  • low
    qs@6.14.0: 5 known vulnerabilities
    GHSA-4mjr-xmp4-gh2g, GHSA-6pq8-jhm2-2vcw, GHSA-6rw7-vpxm-498p, GHSA-q8mj-m7cp-5q26, GHSA-w7fw-mjwx-w883
    package-lock.json
  • low
    No manifest declaring network access and environment variables (agent.json)
  • low
    Contacted these domains while starting up (no manifest to compare against)
    registry.npmjs.org

Network activity

During install
registry.npmjs.org
While running
Not run — the code wasn't started in this scan

Automated result for the commit shown. See our scan policy. View the scan log

Maintainers can claim the listing to rescan, or dispute a result.

Btp Sap Odata To MCP Server alternatives

View more →

Similar mcp servers in Other, ranked by GitHub stars. Compare licence, recent activity and scan status before you choose.

NameStarsLicenceLast updatedScan
Btp Sap Odata To MCP Server (this page)
lemaiwo
143MITMay 22, 2026Scanned, no flagged issues
Github MCP Server
github
34kMITOct 30, 2026Scanned, no flagged issues
Fastapi MCP
tadata-org
12kMITNov 24, 2025Scanned, no flagged issues
GhidraMCP
LaurieWired
12kApache-2.0Oct 10, 2026Scanned, no flagged issues
MCP Go
mark3labs
9.2kMITOct 30, 2026Scanned, no flagged issues
Git MCP
idosal
8.5kApache-2.0May 8, 2026Scanned, no flagged issues