SAP MCP Server

Build SAP Escrow V2 Settlement Transaction

sap_escrow_build_settle_transaction

Destructive

Hosted-safe unsigned builder for settle_calls_v2. The agent owner wallet signs locally. DisputeWindow escrows create a pending settlement PDA; CoSigned escrows require the coSigner account when configured. SAP MCP context: Hosted-safe unsigned Escrow V2 builder. The output is not submitted and is not signed by hosted SAP MCP. Preview it, then call local sap_payments_finalize_transaction with submit:true and confirm:true. Never create temporary signing scripts or read keypair JSON.

SAP MCP execution guidance: Intent: hosted unsigned transaction builder. Pricing: paid builder; estimate first, then pay/build and finalize unsigned transactions locally when returned. Routing: hosted-safe builder. If a transaction is returned, preview/sign/submit with sap_payments_finalize_transaction; never create temporary signing scripts. Signer boundary: user-controlled local profile or external signer; OOBE hosted MCP remains non-custodial.

Input Schema

TableJSON Schema

Name	Required	Description
`nonce`	No	Optional escrow nonce as a decimal string. Defaults to 0.
`coSigner`	No	Optional co-signer public key for CoSigned escrows when the escrow account requires it.
`agentWallet`	No	Agent owner wallet public key (base58). This wallet signs locally because settlement releases funds to the serving agent.
`serviceHash`	No	32-byte service/audit hash. Use a stable hash of the fulfilled paid work.
`callsToSettle`	No	Number of served calls to settle as a decimal string.
`depositorWallet`	No	Depositor wallet public key (base58) for the escrow being settled.

Output Schema

TableJSON Schema

Name	Required	Description	Default
`content`	Yes	MCP content blocks returned to the caller.
`isError`	No	True when the tool result represents an application-level error.

Schema Changelog

Changes observed during successful MCP inspections.

Changed2 schema fields changedJul 24, 2026

addedInput schema / description

Added value: +"Build SAP Escrow V2 Settlement Transaction input schema. Intent: hosted unsigned transaction builder. Pricing: paid builder; estimate first, then pay/build and finalize unsigned transactions locally when returned. Routing: hosted-safe builder. If a transaction is returned, preview/sign/submit with sap_payments_finalize_transaction; never create temporary signing scripts. Signer boundary: user-controlled local profile or external signer; OOBE hosted MCP remains non-custodial. Use exact field names from this schema; do not guess aliases or include private key material."

changedInput schema / properties / serviceHash / oneOf

Previous value: -[
-  {
-    "description": "32-byte service/audit hash as byte array.",
-    "items": {
-      "type": "number"
-    },
-    "type": "array"
-  },
-  {
-    "description": "32-byte service/audit hash encoded as 64-char hex or base64 string.",
-    "type": "string"
-  }
-]New value: +[
+  {
+    "description": "32-byte service/audit hash as byte array.",
+    "items": {
+      "description": "Service Hash parameter for Build SAP Escrow V2 Settlement Transaction.",
+      "type": "number"
+    },
+    "type": "array"
+  },
+  {
+    "description": "32-byte service/audit hash encoded as 64-char hex or base64 string.",
+    "type": "string"
+  }
+]

AddedJul 21, 2026

TDQS

A3.9/5.0

Behavior4/5

Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?

Annotations already indicate destructiveHint=true and readOnlyHint=false. Description adds that output is unsigned and not submitted by SAP MCP, clarifying the builder role. No contradiction. Additional context on local signing and signing boundary is provided.

Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.

Conciseness3/5

Is the description appropriately sized, front-loaded, and free of redundancy?

Front-loaded with key purpose, but contains repetitive 'SAP MCP context' blocks that restate similar information. Could be more concise by removing redundancy.

Shorter descriptions cost fewer tokens and are easier for agents to parse. Every sentence should earn its place.

Completeness4/5

Given the tool's complexity, does the description cover enough for an agent to succeed on first attempt?

Covers workflow, parameter context, escrow types, and security warnings. Output schema exists so return values not needed. Adequate for the tool's complexity.

Complex tools with many parameters or behaviors need more documentation. Simple tools need less. This dimension scales expectations accordingly.

Parameters4/5

Does the description clarify parameter syntax, constraints, interactions, or defaults beyond what the schema provides?

Schema coverage is 100%, each parameter described. Description adds extra context: agentWallet signs locally, callsToSettle is count, serviceHash should be stable hash. This goes beyond schema baseline of 3.

Input schemas describe structure but not intent. Descriptions should explain non-obvious parameter relationships and valid value ranges.

Purpose4/5

Does the description clearly state what the tool does and how it differs from similar tools?

Description clearly states it is a 'Hosted-safe unsigned builder for settle_calls_v2'. The name includes 'build_settle_transaction' which directly reflects the action. However, it does not explicitly differentiate from other escrow builders like create, deposit, withdraw, close, finalize, but the context of settling calls is specific.

Agents choose between tools based on descriptions. A clear purpose with a specific verb and resource helps agents select the right tool.

Usage Guidelines4/5

Does the description explain when to use this tool, when not to, or what alternatives exist?

Explicit guidance to preview then use sap_payments_finalize_transaction. Also advises against creating temporary scripts. Mentions estimating before building. Lacks explicit when-not-to-use instructions but the workflow is clear.

Agents often have multiple tools that could apply. Explicit usage guidance like "use X instead of Y when Z" prevents misuse.

All SAP MCP Server tools Inspect

Try in Browser

One endpoint for every MCP toolRayrun runs every MCP server behind one URL and holds the credentials. Each call is decided per client, tool, and argument, then recorded.ray.runAd

Glama MCP Gateway

Add one secure layer between your agents and this server.