SAP S/4HANA MCP Server
Provides tools for OData interaction with SAP S/4HANA, allowing discovery of services, retrieval of entity metadata and field values, and execution of CRUD queries on SAP entities.
Click on "Deploy Server".
Wait a few minutes for the server to deploy. Once ready, it will show a "Started" state.
In the chat, type
@followed by the MCP server name and your instructions, e.g., "@SAP S/4HANA MCP ServerDiscover available SAP OData services"
That's it! The server will respond to your query, and you can continue using it as needed.
Here is a step-by-step guide with screenshots.
SAP S4 MCP Server
MCP server for SAP S/4HANA OData access. Discover services, query entities, fetch metadata, and manage data — built on the @modelcontextprotocol/sdk TypeScript SDK.
Tools
Tool | Description |
| Discovers available services from the SAP Gateway Service Catalog |
| Fetches and summarizes OData service metadata optimized for LLM consumption |
| Fetches dropdown/value-list values from SAP OData entities |
| Executes OData CRUD operations (GET returns CSV, writes return JSON) |
Related MCP server: SAP OData to MCP Server
Prerequisites
Node.js >= 18.0.0
SAP S/4HANA system with OData services enabled
SAP user with appropriate OData authorizations
Setup
git clone https://github.com/Nidhideep/sap-s4-mcp-server
cd sap-s4-mcp-server
npm install
cp .env.example .env
# Edit .env with your SAP connection details
npm run buildEnvironment Variables
Copy .env.example to .env and fill in the values.
OData Connection (required)
Variable | Description | Example |
| Full SAP S/4HANA URL including scheme and port |
|
| SAP client number |
|
|
|
|
| SAP user (when AUTH_METHOD=basic) |
|
| Password (when AUTH_METHOD=basic) | |
| Bearer token (when AUTH_METHOD=token) |
Operational
Variable | Description | Default |
|
|
|
| When |
|
MCP Client Configuration
Claude Code
claude mcp add sap-s4-mcp-server -- node /absolute/path/to/sap-s4-mcp-server/dist/src/index.jsThen set env vars via .mcp.json (copy from .mcp.example.json).
Claude Desktop / Cline
Copy .mcp.example.json to .mcp.json, fill in real values, and add to your MCP client config:
{
"mcpServers": {
"sap-s4-mcp-server": {
"command": "node",
"args": ["/absolute/path/to/sap-s4-mcp-server/dist/src/index.js"],
"env": {
"S4_ODATA_HOST": "https://your-s4.example.com:44301",
"S4_ODATA_CLIENT": "100",
"AUTH_METHOD": "basic",
"S4_ODATA_USER": "your_user",
"S4_ODATA_PASSWORD": "your_password"
}
}
}
}Recommended Workflow
Discover —
discover_sap_servicesto find the service nameUnderstand —
get_entity_metadatato see entity sets and field namesValidate inputs —
get_field_valuesto look up valid dropdown valuesQuery or write —
execute_odata_querywith the correct service, entity, and fields
Project Structure
src/
index.ts # Server entry point (stdio transport)
server.ts # Tool registration
tools/
s4-discover-services.tool.ts # Gateway catalog discovery
s4-metadata.tool.ts # OData $metadata parser
s4-field-values.tool.ts # Value-list / dropdown fetcher
s4-odata-query.tool.ts # CRUD query executor
config/
env.ts # Zod-validated environment config
auth.ts # Auth headers + CSRF token fetch
policy.ts # DRY_RUN enforcement + audit log
docs/
authentication.md
governance.md
troubleshooting.md
examples/
example-workflow.mdDevelopment
npm run dev # Watch mode with tsx
npm run typecheck # Type-check without building
npm run build # Compile to dist/Governance
DRY_RUN=trueblocks all write operations — safe for read-only environmentsAll write operations are audit-logged to stderr
CSRF tokens are fetched automatically before every write
No credentials are ever committed — use
.env(gitignored) or MCP client env injection
Available Tools
4 toolsdiscover_sap_servicesA
Discovers available OData services from the SAP Gateway Service Catalog. Returns service names, titles, and descriptions. Use this first when you don't know which service name to pass to execute_odata_query or get_entity_metadata.
| Name | Required | Description | Default |
|---|---|---|---|
| search | No | Filter services by name or title substring (case-insensitive) | |
| top | No | Maximum number of services to return (default 50) |
TDQS
Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?
No annotations are provided, so the description must cover behavioral traits. It describes the discovery operation as safe and returns names, titles, and descriptions, but lacks details on limitations (e.g., default top of 50), error handling, or what happens if no results are found.
Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.
Is the description appropriately sized, front-loaded, and free of redundancy?
Two concise sentences: first states purpose, second gives usage guidance. No wasted words, highly efficient.
Shorter descriptions cost fewer tokens and are easier for agents to parse. Every sentence should earn its place.
Given the tool's complexity, does the description cover enough for an agent to succeed on first attempt?
No output schema exists, so the description should compensate by explaining the return structure. It mentions returning names, titles, and descriptions but doesn't specify if it's a list or the format. Also, it could clarify how the output feeds into sibling tools, though it's implied.
Complex tools with many parameters or behaviors need more documentation. Simple tools need less. This dimension scales expectations accordingly.
Does the description clarify parameter syntax, constraints, interactions, or defaults beyond what the schema provides?
Schema coverage is 100% with both parameters described. The description adds no additional meaning beyond the schema, so baseline score of 3 is appropriate.
Input schemas describe structure but not intent. Descriptions should explain non-obvious parameter relationships and valid value ranges.
Does the description clearly state what the tool does and how it differs from similar tools?
The description clearly states the tool discovers OData services from SAP Gateway, returning names, titles, and descriptions. It also distinguishes itself from sibling tools by specifying to use it first when the service name is unknown.
Agents choose between tools based on descriptions. A clear purpose with a specific verb and resource helps agents select the right tool.
Does the description explain when to use this tool, when not to, or what alternatives exist?
The description explicitly states to use this tool first when you don't know the service name to pass to execute_odata_query or get_entity_metadata, providing clear guidance on when to use it vs alternatives.
Agents often have multiple tools that could apply. Explicit usage guidance like "use X instead of Y when Z" prevents misuse.
execute_odata_queryA
Executes OData CRUD operations against SAP S/4HANA. GET requests return data as CSV for easy reading. POST, PATCH, and DELETE return JSON with the operation result. Use discover_sap_services to find service names, get_entity_metadata for field names, and get_field_values for valid input values before writing.
| Name | Required | Description | Default |
|---|---|---|---|
| service | Yes | OData service name, e.g. API_BUSINESS_PARTNER | |
| entity | Yes | Entity set name, e.g. A_BusinessPartner | |
| method | No | HTTP method — GET reads (returns CSV), POST creates, PATCH updates, DELETE removes | GET |
| entityKey | No | Key predicate for a single-record operation, e.g. "'1000001'" or "BusinessPartner='1000001'" | |
| filter | No | OData $filter expression, e.g. "BusinessPartnerCategory eq '1'" | |
| select | No | Fields to return, e.g. ["BusinessPartner", "BusinessPartnerFullName"] | |
| top | No | Maximum rows to return for GET requests (default 100) | |
| skip | No | Rows to skip for GET pagination | |
| orderBy | No | OData $orderby expression, e.g. "BusinessPartner asc" | |
| payload | No | Request body for POST and PATCH operations |
TDQS
Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?
Discloses that GET returns CSV and POST/PATCH/DELETE return JSON, which is valuable beyond schema. However, with no annotations, description carries full burden; it omits side effects, permissions, error handling, or idempotency. Adds some context but incomplete for a CRUD tool.
Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.
Is the description appropriately sized, front-loaded, and free of redundancy?
Two sentences, front-loaded with core purpose, no wasted words. Efficiently conveys return format and usage recommendations.
Shorter descriptions cost fewer tokens and are easier for agents to parse. Every sentence should earn its place.
Given the tool's complexity, does the description cover enough for an agent to succeed on first attempt?
Given tool complexity (10 params, CRUD, no output schema), description is adequate but has gaps: does not mention pagination behavior (top/skip are in schema but not described), single-record vs list retrieval via entityKey, or error handling. Points to siblings for discovery but could be more complete.
Complex tools with many parameters or behaviors need more documentation. Simple tools need less. This dimension scales expectations accordingly.
Does the description clarify parameter syntax, constraints, interactions, or defaults beyond what the schema provides?
Schema description coverage is 100%, so baseline is 3. Description does not add significant meaning beyond schema; it only hints at using sibling tools for valid input values. No parameter-specific enrichment in description.
Input schemas describe structure but not intent. Descriptions should explain non-obvious parameter relationships and valid value ranges.
Does the description clearly state what the tool does and how it differs from similar tools?
Clearly states it executes OData CRUD operations against SAP S/4HANA, with specific verb and resource. Distinguishes from sibling tools discover_sap_services, get_entity_metadata, and get_field_values, which are used for preparation.
Agents choose between tools based on descriptions. A clear purpose with a specific verb and resource helps agents select the right tool.
Does the description explain when to use this tool, when not to, or what alternatives exist?
Explicitly recommends using sibling tools before write operations for discovery of service names, field names, and valid input values. Provides clear context but does not cover all usage scenarios (e.g., when to use GET vs POST is inferred from method parameter).
Agents often have multiple tools that could apply. Explicit usage guidance like "use X instead of Y when Z" prevents misuse.
get_entity_metadataA
Fetches and summarizes OData service metadata from SAP S/4HANA. Returns all entity sets with their key fields, properties, and navigation properties. Use this before calling execute_odata_query to understand the available fields and correct entity names.
| Name | Required | Description | Default |
|---|---|---|---|
| service | Yes | OData service name, e.g. API_BUSINESS_PARTNER |
TDQS
Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?
With no annotations, description explains the tool returns metadata (entity sets, fields, navigation properties) and implies no side effects. Could be more explicit about being read-only or requiring authentication, but sufficient.
Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.
Is the description appropriately sized, front-loaded, and free of redundancy?
Two concise sentences: first states purpose, second gives usage guidance. No unnecessary words.
Shorter descriptions cost fewer tokens and are easier for agents to parse. Every sentence should earn its place.
Given the tool's complexity, does the description cover enough for an agent to succeed on first attempt?
Completeness is high given no output schema: describes return content and provides usage context. Could mention authentication or scope, but not critical for a metadata retrieval tool.
Complex tools with many parameters or behaviors need more documentation. Simple tools need less. This dimension scales expectations accordingly.
Does the description clarify parameter syntax, constraints, interactions, or defaults beyond what the schema provides?
Schema has 100% coverage for the single 'service' parameter, and description provides an example (API_BUSINESS_PARTNER) adding some value beyond the schema description.
Input schemas describe structure but not intent. Descriptions should explain non-obvious parameter relationships and valid value ranges.
Does the description clearly state what the tool does and how it differs from similar tools?
Description clearly states it fetches and summarizes OData service metadata from SAP S/4HANA, returning entity sets with key fields, properties, and navigation properties. This distinguishes it from sibling tools like execute_odata_query.
Agents choose between tools based on descriptions. A clear purpose with a specific verb and resource helps agents select the right tool.
Does the description explain when to use this tool, when not to, or what alternatives exist?
Explicitly says 'Use this before calling execute_odata_query to understand the available fields and correct entity names,' providing clear context and alternative.
Agents often have multiple tools that could apply. Explicit usage guidance like "use X instead of Y when Z" prevents misuse.
get_field_valuesA
Fetches dropdown and value-list options from a SAP S/4HANA OData entity. Use this to discover valid input values before writing data with execute_odata_query. Provide the entity set that acts as the value-help source and the target field name.
| Name | Required | Description | Default |
|---|---|---|---|
| service | Yes | OData service name, e.g. API_BUSINESS_PARTNER | |
| entity | Yes | Entity set that serves as a value-help list, e.g. A_BPContactToFuncAndDept | |
| valueField | Yes | Technical field name whose distinct values you want, e.g. BusinessPartnerCategory | |
| labelField | No | Field that holds the human-readable description for each value | |
| top | No | Maximum number of values to return (default 200) |
TDQS
Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?
With no annotations, the description must fully disclose behavior. It states it fetches options but omits details like read-only nature, distinctness, or error handling. While the input schema covers parameters, the description itself adds minimal behavioral context beyond the core function.
Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.
Is the description appropriately sized, front-loaded, and free of redundancy?
Two sentences efficiently convey the tool's purpose and usage. Every word earns its place; no redundancy or fluff.
Shorter descriptions cost fewer tokens and are easier for agents to parse. Every sentence should earn its place.
Given the tool's complexity, does the description cover enough for an agent to succeed on first attempt?
Given the tool's complexity (5 params, no output schema), the description ties the tool to sibling 'execute_odata_query' and explains the value-help concept. However, it omits the return format (array of value-label pairs) and pagination behavior of the 'top' parameter, leaving some ambiguity for an agent.
Complex tools with many parameters or behaviors need more documentation. Simple tools need less. This dimension scales expectations accordingly.
Does the description clarify parameter syntax, constraints, interactions, or defaults beyond what the schema provides?
All 5 parameters have descriptions in the input schema (100% coverage), so the description's mention of 'entity set that acts as the value-help source and the target field name' adds no new semantic meaning. It restates schema info without deepening parameter understanding.
Input schemas describe structure but not intent. Descriptions should explain non-obvious parameter relationships and valid value ranges.
Does the description clearly state what the tool does and how it differs from similar tools?
The description clearly states the verb ('Fetches') and resource ('dropdown and value-list options from a SAP S/4HANA OData entity'). It effectively distinguishes itself from siblings like 'execute_odata_query' and 'get_entity_metadata' by focusing on value discovery before writing.
Agents choose between tools based on descriptions. A clear purpose with a specific verb and resource helps agents select the right tool.
Does the description explain when to use this tool, when not to, or what alternatives exist?
The description explicitly directs when to use the tool ('before writing data with execute_odata_query') and provides actionable guidance on how to provide the entity set and target field. This fulfills a high standard of usage context.
Agents often have multiple tools that could apply. Explicit usage guidance like "use X instead of Y when Z" prevents misuse.
Tool Schema Changelog
Recent tool additions, removals, and schema changes observed during successful MCP inspections.
4 tool updates
v0.1.0- First observed
discover_sap_services - First observed
execute_odata_query - First observed
get_entity_metadata - First observed
get_field_values
TDQS
Scored across 4 tools
Each tool has a distinct purpose: service discovery, query execution, metadata retrieval, and field values. No overlap, clear differentiation.
All tool names follow a consistent verb_noun pattern in snake_case: discover, execute, get, get. Uniform and predictable.
Four tools cover the essential workflow for interacting with SAP OData services efficiently. Not over- or under-scoped.
The tool set enables a complete cycle: discover services, understand metadata, fetch valid input values, and perform CRUD operations. No critical gaps.
Maintenance
Related MCP Connectors
List datasets, schemas, run APL queries, and use prompts for exploration, anomalies, and monitoring.
Run SOQL queries to explore and retrieve Salesforce data. Access accounts, contacts, opportunities…
Governed data discovery, exact queries, decisions, simulations, and runtime utilities over MCP.
- BasedashOAuthcom.basedash
Governed BI MCP. Ask questions of live company data and list workspace sources via OAuth.
Related MCP Servers
- AlicenseNot gradedqualityCmaintenanceTransforms SAP S/4HANA or ECC systems into conversational AI interfaces by exposing all OData services as dynamic MCP tools. Enables natural language interactions with ERP data for querying, creating, updating, and deleting business entities through SAP BTP integration.26 npm132MIT
- AlicenseNot gradedqualityDmaintenanceTransforms SAP S/4HANA or ECC systems into conversational AI interfaces by exposing OData services as dynamic MCP tools. Enables natural language interactions with ERP data for querying, creating, updating, and deleting business entities.26 npm1MIT
- FlicenseAqualityDmaintenanceEnables AI assistants to integrate with SAP systems via OData REST APIs for querying entity sets, performing CRUD operations, and executing function imports. It features automatic service discovery, CSRF token management, and smart connection handling without requiring the SAP RFC SDK.1112-
- FlicenseNot gradedqualityDmaintenanceEnables interaction with SAP Business One via Service Layer REST API to retrieve and create business data such as partners, orders, invoices, items, and stock levels through natural language.1-