SyntaAI ERP Security MCP Server

AI-powered security analysis for SAP systems via the Model Context Protocol (MCP).

Server URL: https://mcp.syntaai.com/mcp

Features

• 19 Tools — User management, security analysis, compliance auditing, role & authorization review (all read-only)

• 5 Resources — System info, security overview, compliance frameworks, security controls, user summary

• 8 Prompts — Pre-built workflows for security audits, SOX compliance, SoD analysis, and more

• OAuth 2.0 — Full RFC 8414/9728 compliant authentication with PKCE and Dynamic Client Registration

Related MCP server: Phantom MCP

Example Interactions

Example 1: Security Audit

User prompt: "Are there any users with SAP_ALL profile?"

What happens:

• Server scans all user profiles for dangerous authorizations

• Returns list of users with SAP_ALL, SAP_NEW, S_A.SYSTEM

• Provides risk assessment and remediation recommendations

Tool used: check_critical_authorizations

Example 2: Compliance Check

User prompt: "Generate a SOX compliance report"

What happens:

• Server runs SOX assessment across access controls, SoD, password policy

• Returns overall compliance score with findings

• Lists critical gaps with specific framework control references

Tool used: generate_compliance_report

Example 3: User Access Review

User prompt: "Find all users who haven't logged in for 90 days and check if any have critical roles"

What happens:

• Server identifies inactive users past the threshold

• Cross-references with privileged access and role assignments

• Recommends lock/disable actions prioritized by risk

Tools used: find_inactive_users, list_privileged_users

Tools Reference

User Management

Security Analysis

Compliance & Audit

Role & Authorization

Authentication

OAuth 2.0 with PKCE. Discovery endpoints:

• GET /.well-known/oauth-authorization-server (RFC 8414)

• GET /.well-known/oauth-protected-resource (RFC 9728)

Supports Dynamic Client Registration (RFC 7591) and token revocation (RFC 7009).

Deployment

# Install
cd /opt/mcp-server
python -m venv venv
source venv/bin/activate
pip install -r requirements.txt

# Run
python server.py                    # with OAuth (production)
MCP_NO_AUTH=1 python server.py      # without OAuth (development)

License

Apache License 2.0 — see LICENSE for details.