Abap Adt MCP

Name: Abap Adt MCP
Author: williansaez

by williansaezversion 2.8.2i★ –iRuns on your computer

Registry nameio.github.williansaez/abap-adt-mcp

Install

Overview

Description from the maker (original English)

ABAP development from Claude and other MCP hosts: source, transports, tests, ATC, debugger

PopNx MCP’s three pillars

These three are never merged into one score: opinions, measurements and popularity are different things.

User voiceiNo reviews yetReviews open together with accounts in a later step
Our basic checksi1 of 1 passedChecked from public information; code not scanned yet
UsageiEarly↓ 551/wk · ★ –

What you can do with it

We have not written a plain-language summary for this one yet. Below are the facts we read from the registry.

Connection: Runs on your computer
Transport: stdio
Category: Other
You need to fill in: SAP_SYSTEMS, MCP_HTTP_TOKEN, SAP_PASSWORD, SAP_OAUTH_CLIENT_SECRET

Install

Pick the AI app you use, then copy the settings.

Before you install

Basic checks: 1 of 1 passed
Runs on your computer with your user’s permissions (files, network, apps).
You fill in yourself: SAP_SYSTEMS_FILE, SAP_SYSTEMS, SAP_DEFAULT_DESTINATION, SAP_AUTH_TYPE, MCP_HTTP_PORT, MCP_HTTP_HOST, MCP_HTTP_TOKEN, MCP_HTTP_MAX_SESSIONS, MCP_HTTP_MAX_BODY_BYTES, MCP_HTTP_SESSION_TTL_MINUTES, MCP_HTTP_ALLOWED_ORIGINS, MCP_HTTP_ALLOWED_HOSTS, MCP_EXPORT_ROOT, MCP_AUDIT_FILE, MCP_ADT_TRACE_FILE, MCP_READ_ONLY, MCP_ALLOW_DATA_PREVIEW, MCP_ALLOW_FREE_SQL, MCP_TOOLSETS, MCP_DISABLED_TOOLSETS, MCP_MAX_RESPONSE_CHARS, SAP_ALLOW_REENTRANCE_TICKET, SAP_URL, SAP_USER, SAP_PASSWORD, SAP_CLIENT, SAP_LANGUAGE, SAP_BROWSER_PATH, SAP_BROWSER_PROFILE_DIR, SAP_SSO2_COMMAND, SAP_SSO2_ARGS, SAP_SSO2_TIMEOUT_MS, SAP_TLS_INSECURE, SAP_OAUTH_TOKEN_URL, SAP_OAUTH_CLIENT_ID, SAP_OAUTH_CLIENT_SECRET, SAP_OAUTH_SCOPE, MCP_PROFILE_GATE, SAP_REQUEST_TIMEOUT_SECONDS, MCP_SOURCE_CACHE_TTL_SECONDS, MCP_CACHE_DIR, MCP_API_CLASSIFICATION_FILES

Values marked secret are keys to your account. Never share them or paste them into a chat.

You need

npmNode.js installed (for the npx command)

Which app do you use?

ClaudeClaude CodeCursorVS CodeChatGPT

Pick your app above. We remember it, so next time the button says “Install in …”.

Open Claude Desktop → Settings → Developer → Edit Config, and paste this into claude_desktop_config.json

{
  "mcpServers": {
    "abap-adt": {
      "command": "npx",
      "args": [
        "-y",
        "abap-adt-mcp"
      ],
      "env": {
        "SAP_SYSTEMS_FILE": "your-value",
        "SAP_SYSTEMS": "your-value",
        "SAP_DEFAULT_DESTINATION": "your-value",
        "SAP_AUTH_TYPE": "your-value",
        "MCP_HTTP_PORT": "your-value",
        "MCP_HTTP_HOST": "your-value",
        "MCP_HTTP_TOKEN": "your-value",
        "MCP_HTTP_MAX_SESSIONS": "your-value",
        "MCP_HTTP_MAX_BODY_BYTES": "your-value",
        "MCP_HTTP_SESSION_TTL_MINUTES": "your-value",
        "MCP_HTTP_ALLOWED_ORIGINS": "your-value",
        "MCP_HTTP_ALLOWED_HOSTS": "your-value",
        "MCP_EXPORT_ROOT": "your-value",
        "MCP_AUDIT_FILE": "your-value",
        "MCP_ADT_TRACE_FILE": "your-value",
        "MCP_READ_ONLY": "your-value",
        "MCP_ALLOW_DATA_PREVIEW": "your-value",
        "MCP_ALLOW_FREE_SQL": "your-value",
        "MCP_TOOLSETS": "your-value",
        "MCP_DISABLED_TOOLSETS": "your-value",
        "MCP_MAX_RESPONSE_CHARS": "your-value",
        "SAP_ALLOW_REENTRANCE_TICKET": "your-value",
        "SAP_URL": "your-value",
        "SAP_USER": "your-value",
        "SAP_PASSWORD": "your-value",
        "SAP_CLIENT": "your-value",
        "SAP_LANGUAGE": "your-value",
        "SAP_BROWSER_PATH": "your-value",
        "SAP_BROWSER_PROFILE_DIR": "your-value",
        "SAP_SSO2_COMMAND": "your-value",
        "SAP_SSO2_ARGS": "your-value",
        "SAP_SSO2_TIMEOUT_MS": "your-value",
        "SAP_TLS_INSECURE": "your-value",
        "SAP_OAUTH_TOKEN_URL": "your-value",
        "SAP_OAUTH_CLIENT_ID": "your-value",
        "SAP_OAUTH_CLIENT_SECRET": "your-value",
        "SAP_OAUTH_SCOPE": "your-value",
        "MCP_PROFILE_GATE": "your-value",
        "SAP_REQUEST_TIMEOUT_SECONDS": "your-value",
        "MCP_SOURCE_CACHE_TTL_SECONDS": "your-value",
        "MCP_CACHE_DIR": "your-value",
        "MCP_API_CLASSIFICATION_FILES": "your-value"
      }
    }
  }
}

Run this in your terminal

claude mcp add abap-adt --env SAP_SYSTEMS_FILE=your-value --env SAP_SYSTEMS=your-value --env SAP_DEFAULT_DESTINATION=your-value --env SAP_AUTH_TYPE=your-value --env MCP_HTTP_PORT=your-value --env MCP_HTTP_HOST=your-value --env MCP_HTTP_TOKEN=your-value --env MCP_HTTP_MAX_SESSIONS=your-value --env MCP_HTTP_MAX_BODY_BYTES=your-value --env MCP_HTTP_SESSION_TTL_MINUTES=your-value --env MCP_HTTP_ALLOWED_ORIGINS=your-value --env MCP_HTTP_ALLOWED_HOSTS=your-value --env MCP_EXPORT_ROOT=your-value --env MCP_AUDIT_FILE=your-value --env MCP_ADT_TRACE_FILE=your-value --env MCP_READ_ONLY=your-value --env MCP_ALLOW_DATA_PREVIEW=your-value --env MCP_ALLOW_FREE_SQL=your-value --env MCP_TOOLSETS=your-value --env MCP_DISABLED_TOOLSETS=your-value --env MCP_MAX_RESPONSE_CHARS=your-value --env SAP_ALLOW_REENTRANCE_TICKET=your-value --env SAP_URL=your-value --env SAP_USER=your-value --env SAP_PASSWORD=your-value --env SAP_CLIENT=your-value --env SAP_LANGUAGE=your-value --env SAP_BROWSER_PATH=your-value --env SAP_BROWSER_PROFILE_DIR=your-value --env SAP_SSO2_COMMAND=your-value --env SAP_SSO2_ARGS=your-value --env SAP_SSO2_TIMEOUT_MS=your-value --env SAP_TLS_INSECURE=your-value --env SAP_OAUTH_TOKEN_URL=your-value --env SAP_OAUTH_CLIENT_ID=your-value --env SAP_OAUTH_CLIENT_SECRET=your-value --env SAP_OAUTH_SCOPE=your-value --env MCP_PROFILE_GATE=your-value --env SAP_REQUEST_TIMEOUT_SECONDS=your-value --env MCP_SOURCE_CACHE_TTL_SECONDS=your-value --env MCP_CACHE_DIR=your-value --env MCP_API_CLASSIFICATION_FILES=your-value -- npx -y abap-adt-mcp

Fill in the empty values before running it.

Open in Cursor

Or copy the settings yourself

Paste into .cursor/mcp.json in your project, or ~/.cursor/mcp.json

{
  "mcpServers": {
    "abap-adt": {
      "command": "npx",
      "args": [
        "-y",
        "abap-adt-mcp"
      ],
      "env": {
        "SAP_SYSTEMS_FILE": "your-value",
        "SAP_SYSTEMS": "your-value",
        "SAP_DEFAULT_DESTINATION": "your-value",
        "SAP_AUTH_TYPE": "your-value",
        "MCP_HTTP_PORT": "your-value",
        "MCP_HTTP_HOST": "your-value",
        "MCP_HTTP_TOKEN": "your-value",
        "MCP_HTTP_MAX_SESSIONS": "your-value",
        "MCP_HTTP_MAX_BODY_BYTES": "your-value",
        "MCP_HTTP_SESSION_TTL_MINUTES": "your-value",
        "MCP_HTTP_ALLOWED_ORIGINS": "your-value",
        "MCP_HTTP_ALLOWED_HOSTS": "your-value",
        "MCP_EXPORT_ROOT": "your-value",
        "MCP_AUDIT_FILE": "your-value",
        "MCP_ADT_TRACE_FILE": "your-value",
        "MCP_READ_ONLY": "your-value",
        "MCP_ALLOW_DATA_PREVIEW": "your-value",
        "MCP_ALLOW_FREE_SQL": "your-value",
        "MCP_TOOLSETS": "your-value",
        "MCP_DISABLED_TOOLSETS": "your-value",
        "MCP_MAX_RESPONSE_CHARS": "your-value",
        "SAP_ALLOW_REENTRANCE_TICKET": "your-value",
        "SAP_URL": "your-value",
        "SAP_USER": "your-value",
        "SAP_PASSWORD": "your-value",
        "SAP_CLIENT": "your-value",
        "SAP_LANGUAGE": "your-value",
        "SAP_BROWSER_PATH": "your-value",
        "SAP_BROWSER_PROFILE_DIR": "your-value",
        "SAP_SSO2_COMMAND": "your-value",
        "SAP_SSO2_ARGS": "your-value",
        "SAP_SSO2_TIMEOUT_MS": "your-value",
        "SAP_TLS_INSECURE": "your-value",
        "SAP_OAUTH_TOKEN_URL": "your-value",
        "SAP_OAUTH_CLIENT_ID": "your-value",
        "SAP_OAUTH_CLIENT_SECRET": "your-value",
        "SAP_OAUTH_SCOPE": "your-value",
        "MCP_PROFILE_GATE": "your-value",
        "SAP_REQUEST_TIMEOUT_SECONDS": "your-value",
        "MCP_SOURCE_CACHE_TTL_SECONDS": "your-value",
        "MCP_CACHE_DIR": "your-value",
        "MCP_API_CLASSIFICATION_FILES": "your-value"
      }
    }
  }
}

Your browser asks to open the app, then the app shows the settings and asks you to confirm. Key values are left empty for you to fill in.

Open in VS Code

Or copy the settings yourself

Paste into .vscode/mcp.json in your project

{
  "servers": {
    "abap-adt": {
      "type": "stdio",
      "command": "npx",
      "args": [
        "-y",
        "abap-adt-mcp"
      ],
      "env": {
        "SAP_SYSTEMS_FILE": "your-value",
        "SAP_SYSTEMS": "your-value",
        "SAP_DEFAULT_DESTINATION": "your-value",
        "SAP_AUTH_TYPE": "your-value",
        "MCP_HTTP_PORT": "your-value",
        "MCP_HTTP_HOST": "your-value",
        "MCP_HTTP_TOKEN": "your-value",
        "MCP_HTTP_MAX_SESSIONS": "your-value",
        "MCP_HTTP_MAX_BODY_BYTES": "your-value",
        "MCP_HTTP_SESSION_TTL_MINUTES": "your-value",
        "MCP_HTTP_ALLOWED_ORIGINS": "your-value",
        "MCP_HTTP_ALLOWED_HOSTS": "your-value",
        "MCP_EXPORT_ROOT": "your-value",
        "MCP_AUDIT_FILE": "your-value",
        "MCP_ADT_TRACE_FILE": "your-value",
        "MCP_READ_ONLY": "your-value",
        "MCP_ALLOW_DATA_PREVIEW": "your-value",
        "MCP_ALLOW_FREE_SQL": "your-value",
        "MCP_TOOLSETS": "your-value",
        "MCP_DISABLED_TOOLSETS": "your-value",
        "MCP_MAX_RESPONSE_CHARS": "your-value",
        "SAP_ALLOW_REENTRANCE_TICKET": "your-value",
        "SAP_URL": "your-value",
        "SAP_USER": "your-value",
        "SAP_PASSWORD": "your-value",
        "SAP_CLIENT": "your-value",
        "SAP_LANGUAGE": "your-value",
        "SAP_BROWSER_PATH": "your-value",
        "SAP_BROWSER_PROFILE_DIR": "your-value",
        "SAP_SSO2_COMMAND": "your-value",
        "SAP_SSO2_ARGS": "your-value",
        "SAP_SSO2_TIMEOUT_MS": "your-value",
        "SAP_TLS_INSECURE": "your-value",
        "SAP_OAUTH_TOKEN_URL": "your-value",
        "SAP_OAUTH_CLIENT_ID": "your-value",
        "SAP_OAUTH_CLIENT_SECRET": "your-value",
        "SAP_OAUTH_SCOPE": "your-value",
        "MCP_PROFILE_GATE": "your-value",
        "SAP_REQUEST_TIMEOUT_SECONDS": "your-value",
        "MCP_SOURCE_CACHE_TTL_SECONDS": "your-value",
        "MCP_CACHE_DIR": "your-value",
        "MCP_API_CLASSIFICATION_FILES": "your-value"
      }
    }
  }
}

Your browser asks to open the app, then the app shows the settings and asks you to confirm. Key values are left empty for you to fill in.

This one runs on your computer, and ChatGPT can only connect to servers on the internet. Pick another app.

Your choice stays on this device in a cookie; no account needed.

Values you fill in

SAP_SYSTEMS_FILE env
Path to a JSON file mapping destination names to system configs (url, client, authType basic/sso/sso2/oauth, credentials). Recommended; keep the file mode 0600. See systems.example.json
SAP_SYSTEMS secret env
Inline JSON map of destinations (same shape as SAP_SYSTEMS_FILE). Contains credentials — prefer SAP_SYSTEMS_FILE
SAP_DEFAULT_DESTINATION env
Destination name used when a tool call omits `destination` (alternatively mark an entry with "default": true)
SAP_AUTH_TYPE env
Default auth type for entries that don't specify one: sso (default), sso2, basic, or oauth
MCP_HTTP_PORT env
When set (1024-65535), serve Streamable HTTP on http://127.0.0.1: /mcp with bearer-token auth instead of stdio
MCP_HTTP_HOST env
Bind address for the HTTP transport (default 127.0.0.1). Set 0.0.0.0 only inside containers that publish the port
MCP_HTTP_TOKEN secret env
Bearer token for the HTTP transport; auto-generated and written to ~/.abap-adt-mcp/http-token when unset
MCP_HTTP_MAX_SESSIONS env
Maximum concurrent MCP sessions on the HTTP transport (default 16); further initialize requests get 503
MCP_HTTP_MAX_BODY_BYTES env
Largest request body the HTTP transport accepts, in bytes (default 4194304); larger bodies are refused with HTTP 413
MCP_HTTP_SESSION_TTL_MINUTES env
Idle minutes after which an HTTP session (and its SAP sessions/locks) is closed (default 30)
MCP_HTTP_ALLOWED_ORIGINS env
Comma-separated Origin values allowed on the HTTP transport (loopback origins always allowed when bound to loopback; * allows any)
MCP_HTTP_ALLOWED_HOSTS env
Comma-separated Host header values allowed (DNS-rebinding protection; loopback hosts always allowed when bound to loopback)
MCP_EXPORT_ROOT env
When set, exportPackageSources may only write inside this directory
MCP_AUDIT_FILE env
Path of a JSONL audit trail: one record per tool call (tool, destination, duration, outcome ok/error/denied/unavailable, policy gate, redacted argument summary)
MCP_ADT_TRACE_FILE env
Diagnostics: path of a JSONL trace with one line per ADT request (method, URI, status, headers). Cookie, Set-Cookie, Authorization and CSRF values are reduced to name and length; no response body is…
MCP_READ_ONLY env
Set to 1 to make every destination read-only (server-side; only read-only annotated tools plus login/logout run). Per-destination policies live in systems.json
MCP_ALLOW_DATA_PREVIEW env
Set to 1 to let tableContents read table and CDS rows on every destination that does not state policy.allowDataPreview itself (reading table data is off by default)
MCP_ALLOW_FREE_SQL env
Set to 1 to allow runQuery and tableContents with sqlQuery on every destination that does not state policy.allowFreeSql itself (free SQL is off by default; implies table data)
MCP_TOOLSETS env
Toolsets to publish: comma list (core,source,objects,transports,analysis,tests,atc,data,discovery,runtime,refactoring,rap,services,git,debugger,traces) or a preset: all (default) or focused
MCP_DISABLED_TOOLSETS env
Toolsets to hide, comma list (core cannot be disabled)
MCP_MAX_RESPONSE_CHARS env
Character budget for a single tool response before results are paged/truncated (default 40000, minimum 5000). Raise it if your MCP host accepts larger tool outputs
SAP_ALLOW_REENTRANCE_TICKET env
Set to 1 to enable the reentranceTicket tool (disabled by default: it returns a live SAP logon credential into the conversation)
SAP_URL env
Legacy single-system mode: base URL of the SAP system, e.g. https://host:44300
SAP_USER env
Legacy single-system mode: SAP username
SAP_PASSWORD secret env
Legacy single-system mode: SAP password
SAP_CLIENT env
Legacy single-system mode: SAP client number, e.g. 100
SAP_LANGUAGE env
Legacy single-system mode: logon language, e.g. EN
SAP_BROWSER_PATH env
SSO destinations: path to a Chromium/Chrome/Edge binary for the browser login (auto-detected when unset)
SAP_BROWSER_PROFILE_DIR env
SSO destinations: directory of the persistent browser profile that keeps the identity-provider session (default ~/.abap-adt-mcp/sso/ )
SAP_SSO2_COMMAND env
Legacy single-system sso2 mode: absolute path to the trusted local ticket provider
SAP_SSO2_ARGS env
Legacy single-system sso2 mode: JSON array of provider arguments (never put a ticket here)
SAP_SSO2_TIMEOUT_MS env
Legacy single-system sso2 mode: provider timeout in milliseconds (default 30000; range 1000-300000)
SAP_TLS_INSECURE env
Legacy single-system mode: set to 1 to skip TLS certificate verification for that system only (sandboxes with self-signed certificates)
SAP_OAUTH_TOKEN_URL env
Legacy single-system mode with SAP_AUTH_TYPE=oauth: OAuth2 token endpoint (client_credentials)
SAP_OAUTH_CLIENT_ID env
Legacy single-system mode with SAP_AUTH_TYPE=oauth: OAuth2 client id
SAP_OAUTH_CLIENT_SECRET secret env
Legacy single-system mode with SAP_AUTH_TYPE=oauth: OAuth2 client secret
SAP_OAUTH_SCOPE env
Legacy single-system mode with SAP_AUTH_TYPE=oauth: optional OAuth2 scope
MCP_PROFILE_GATE env
Platform gate for toolsets the destination does not expose (debugger, traces, abapGit, ...): enforce (default, refuse before calling SAP), warn (log only) or off
SAP_REQUEST_TIMEOUT_SECONDS env
Seconds an ADT request may receive nothing before it fails as a network error, so a connection that died while the machine slept cannot hang every call (default 600; 0 waits forever)
MCP_SOURCE_CACHE_TTL_SECONDS env
Lifetime of the per-session source cache used by grepPackage, cdsViewInfo and syntaxCheckCode (default 300; 0 keeps entries until logout)
MCP_CACHE_DIR env
Directory for the cached SAP cloudification repository used by apiReleaseState (default ~/.abap-adt-mcp/cache)
MCP_API_CLASSIFICATION_FILES env
Extra classification files for apiReleaseState, comma list: a path inside SAP's cloudification repository (partner/objectClassifications_ACME.json) or an https URL

These settings are generated from the maker’s registry entry. If the README says otherwise, follow the README.

What it can do

Runs on your computer; the tool list appears in your AI app after you install it.

Basic checksi

We check information anyone can see; we have not read the code. Checks that do not apply are left out of the count. · Checked Nov 8, 2026

✓ Pass
Maker matches the repo
The registry name was verified with the GitHub account williansaez, which owns the repo
… Not checked yet
Still maintained
We have not read this repo from GitHub yet
… Not checked yet
Has a licence
We have not read this repo from GitHub yet
– Not applicable
Endpoint responds
This one runs on your computer; there is no internet endpoint
– Not applicable
Sign-in with OAuth
Runs on your computer and uses local settings instead
… Not checked yet
No hidden instructions in tool descriptions
Runs on your computer; we can only read tool lists from internet endpoints

Compared with others in Otheri

More stars than 0% of the other 18474 servers in this category
Published to the registry more recently than 87% of the other 18474 servers in this category
Basic checks equal to or better than 100% of the other 18474 servers in this category

Compared with every active server in this category in the registry. Stars count only when the publisher owns the repo.

Common questions

Is Abap Adt MCP safe?

It passed 1 of 1 applicable basic checks. We have not read the code. Before adding a key or token, see what access the server asks for and use a key with only the permissions you need.

What keys or codes does it need?

You need to fill in: SAP_SYSTEMS, MCP_HTTP_TOKEN, SAP_PASSWORD, SAP_OAUTH_CLIENT_SECRET

Does it run on my computer or in the cloud?

It runs on your computer. Your AI app starts it when needed, and data does not pass through the maker’s servers (unless it calls an online service itself).

Is it still maintained?

The GitHub repo last changed –, and the latest version (2.8.2) reached the registry 5 days ago.

Which apps can use it?

Apps that support MCP, such as Claude Desktop, Claude Code, Cursor and VS Code. You also need Node.js on your computer.

What can I use instead?

In the same category: Spec Driven Development, Remote Desktop Commander, SwarmMemo

Alternatives

Servers in the same category from other makers, sorted by stars.

Reading a card:↓ Downloads per weeki★ GitHub starsiThree pillars: reviews · checks · usageiUpdated = latest version published to the registryi

Spec Driven Development

MCP Server that facilitates spec-driven development workflows, not just Vibe Coding.

by formulahendryEarly↓ 66/wk★ 440Updated 14 months ago

Runs on your computer

Install

Remote Desktop Commander

Remote Desktop Commander: use files, terminal and processes on your own computers from any AI app.

by desktop-commanderGrowing★ 211Updated 3 days ago

Runs in the cloud✓ desktopcommander.app

Install

SwarmMemo

Talk with agent swarms: rooms, private messages and paid tasks for AI agents

by Hugo0Very newUpdated today

Runs in the cloud✓ swarmmemo.com

Install

README from the maker

Open the README

Copied from the maker’s repo as written. PopNx MCP has not reviewed or endorsed it. HTML, images and scripts are removed. Links lead off this site.

abap-adt-mcp

Let Claude read, write, test and check ABAP code on your SAP systems.

English · Português (Brasil) · Deutsch · Project site

You type a sentence in Claude. You get back an activated class, green unit tests and a transport number. abap-adt-mcp is the server in between: a Model Context Protocol server that gives Claude Desktop, Claude Code, VS Code or any other MCP host the same ADT services Eclipse uses, on every SAP system you configure, S/4HANA Cloud and on-prem alike. 173 tools, one process, and guard rails the server enforces itself: a destination marked read-only refuses every write before it reaches SAP, whatever the host approves.

See it in motion. The project site has seven short films, the setup in three steps and what to ask the model.

Before you connect a production system

- The model acts as your SAP user and can do nothing Eclipse would refuse you. What it reads (source, dumps, table rows where you open them) is sent to the model.

- A destination without a policy block is writable in every package your user may edit; table data stays closed until you open it.

- Recommended: development and test systems only. If a production destination must exist, give it the PRD policy of step 4: the server enforces it before any SAP call, whatever the host approves, so a careless prompt cannot write where the policy forbids it (For administrators).

See it work

That is the whole idea. You type a sentence. The model picks the tools, the server locks the object, writes, activates and unlocks it, and the unit tests come back green with a transport number attached. Ask for the same change on a production system and the answer is policyDenied before a single SAP call goes out: the guard rails live in the server, not in the chat window.

Seven short films show this and the single jobs behind it, a short dump traced to its line, an ATC run with its quickfixes, a transport review, a class created with its test, an ABAP Cloud readiness check. They are on the project site.

See it work
Setup
What to ask the model
For administrators
Authentication
S/4HANA Cloud versus on-prem
Other ways to install
Configuration
Tool catalog
Compared with SAP's official ADT MCP Server
SAP API Policy
Troubleshooting
Testing and contributing
Credits
License

Setup

Three prerequisites:

Node.js 22.12 or newer (22 or 24 LTS) from nodejs.org. On a managed laptop the ticket to IT is one line: "Please install Node.js LTS (22 or newer)"; nothing else needs installing.
Access to the SAP system, the same as for Eclipse ADT: on S/4HANA Cloud the developer business role (SAP_BR_DEVELOPER in the standard delivery); on-prem, ask your Basis team for the /sap/bc/adt service in SICF and the usual ADT authorizations.
A Chromium browser (Chrome, Edge or Brave) for the browser login (authType: sso, the default); not needed for basic, oauth or sso2.

1. Describe your SAP systems

Create the folder .abap-adt-mcp in your home directory and the file systems.json inside it, one entry per system (a "destination"):

Windows: the folder is C:\Users\ \.abap-adt-mcp. Paste the JSON into Notepad and in Save As set "Save as type" to "All files" and the name to systems.json, otherwise Notepad saves systems.json.txt and the server finds nothing.
macOS: the folder is /Users/ /.abap-adt-mcp (Finder, Shift-Cmd-G, ~); any editor.

"DEV": { "url": "https://myXXXXXX.s4hana.cloud.sap", "client": "080", "authType": "sso", "default": true, "policy": { "allowedPackages": ["ZFIN"] } } }

DEV is your name for the system and the word you will use in chats; "default": true lets you omit it.
url: the address you open the launchpad or Eclipse with, without a path.
client: the client your SSO session logs on to (About in the launchpad's user menu shows it). A wrong client shows up later as "not authorized" on objects you can open in Eclipse.
authType defaults to sso: a browser window opens once for the login, like Eclipse ADT. Other modes: Authentication.
policy.allowedPackages: the packages the model may write to, exact names or patterns (ZFIN, Z*). Leave it out and every package you can edit in Eclipse is writable; start with one.

Production and on-prem systems come in step 4, after the first successful call.

2. Register the server in your host

The package is on npm as abap-adt-mcp; npx fetches it. Claude Desktop, no terminal: first block. Claude Code: one command. VS Code, Cursor and others: pointer below. Every entry passes the server two settings: SAP_SYSTEMS_FILE (where systems.json is) and MCP_TOOLSETS=focused, which publishes the 114 everyday development tools instead of all 173 so the tool schemas do not eat the chat's context (drop it when you need the debugger, traces, abapGit, RAP or refactoring).

Claude Desktop, no terminal needed:

Settings > Developer > Edit Config opens the folder that holds claude_desktop_config.json; open the file in Notepad or any editor. If Settings has no Developer tab, your Claude Desktop is managed by IT: ask them to add the entry below.
If the file already contains "mcpServers", add only the "abap-adt-mcp" entry inside it; if it is empty, paste the whole block.
Replace with your user name (macOS: /Users/ /.abap-adt-mcp/systems.json). The forward slashes in the Windows path are deliberate: JSON needs \\ for every backslash, forward slashes need nothing.
Quit and reopen the app.

"mcpServers": { "abap-adt-mcp": { "command": "npx", "args": ["-y", "abap-adt-mcp"], "env": { "SAP_SYSTEMS_FILE": "C:/Users/ /.abap-adt-mcp/systems.json", "MCP_TOOLSETS": "focused" } } } }

Claude Code, one line in a terminal (-s user registers the server for every project, not only the current folder):

claude mcp add -s user abap-adt-mcp -e SAP_SYSTEMS_FILE=$HOME/.abap-adt-mcp/systems.json -e MCP_TOOLSETS=focused -- npx -y abap-adt-mcp

The same on Windows PowerShell:

claude mcp add -s user abap-adt-mcp -e SAP_SYSTEMS_FILE=$env:USERPROFILE\.abap-adt-mcp\systems.json -e MCP_TOOLSETS=focused -- npx -y abap-adt-mcp

VS Code with GitHub Copilot: the same entry in .vscode/mcp.json under a top-level servers key instead of mcpServers; docs/HOSTS.md has the file as tested, with ${input:} for secrets.

Cursor, Cline, Windsurf, the Copilot CLI and Eclipse: docs/HOSTS.md.
Keep the key abap-adt-mcp: it is the name the host shows, the prefix of every tool, and what this project's agent skills look for.

3. Say hello

Open a new chat and type (replace DEV with the key you chose; the class is standard SAP, so the prompt is read-only and safe on any system):

List my SAP systems, log in to DEV and show me the source of class CL_ABAP_CHAR_UTILITIES.

A browser window opens for the SSO login (tick "stay signed in" and later logins are silent); the model then calls listSystems, searchObject and getObjectSource, and the reply names your destinations and ends with the class source. The host asks before running a tool you have not approved permanently: that dialog is a courtesy of the host, the policy block is the guarantee. If the server does not appear in the host, Troubleshooting names the log to read.

Two things worth knowing before the first edit:

A write the policy forbids comes back as a refusal, not as a silent no-op: kind: "policyDenied", Policy: setObjectSource blocked on destination PRD (readOnly).
Every change the model makes is on your transport and in the object's version history: objectDiff and revisions show it, and nothing leaves DEV without a transport release you approve.

4. Add production and on-prem systems

The same file with a production entry and an on-prem entry (systems.example.json has every option):

"DEV": { "url": "https://myXXXXXX.s4hana.cloud.sap", "client": "080", "authType": "sso", "default": true, "policy": { "allowedPackages": ["Z*"] } }, "PRD": { "url": "https://myYYYYYY.s4hana.cloud.sap", "client": "100", "authType": "sso", "policy": { "readOnly": true, "allowDataPreview": false, "deniedTools": ["exportPackageSources"] } }, "ONPREM": { "url": "https://sap.example.com:44300", "client": "100", "authType": "basic", "user": "DEVELOPER", "password": "${env:ONPREM_PASSWORD}", "policy": { "allowedPackages": ["Z*", "$*"] }, "tls": { "ca": "/etc/ssl/corp-ca.pem" } } }

If a production destination must exist, PRD is its minimum policy: readOnly refuses every write, whatever the model is asked; allowDataPreview: false keeps table data closed even where the environment opens it for other destinations; deniedTools closes exportPackageSources, the one read that copies whole packages to disk.
${env:VAR} reads a secret from the environment, so it never sits in the file; add the variable where the host starts the server: -e ONPREM_PASSWORD=... on claude mcp add (or export it in the shell that starts Claude Code), a "ONPREM_PASSWORD": "..." line in the env block of Claude Desktop, which does not pass your shell environment on. A file with an inline password must be readable by you only (chmod 600 ~/.abap-adt-mcp/systems.json on macOS and Linux; on Windows your profile folder is already private); an SSO-only file needs nothing.
tls.ca names a corporate CA certificate. Verification can be relaxed per destination only (insecureTls: true, announced at startup), never for the whole process.
An older on-prem system (SAP_BASIS below 7.51, such as SAP ERP 6.0 EHP7 or EHP8) reads fine over HTTP but cannot keep a lock between requests, so writes fail. Give its entry "transport": "rfc" and an rfc block, and install the SAP NetWeaver RFC SDK, which you download from SAP with your own S-user because SAP does not allow it to be bundled. docs/RFC.md has the

Only the beginning is shown; read the rest in the repo

Abap Adt MCP

Overview

PopNx MCP’s three pillars

What you can do with it

Install

Before you install

Values you fill in

What it can do

Basic checksi

Maker matches the repo

Still maintained

Has a licence

Endpoint responds

Sign-in with OAuth

No hidden instructions in tool descriptions

Compared with others in Otheri

Common questions

Alternatives

Spec Driven Development

Remote Desktop Commander

SwarmMemo

README from the maker

abap-adt-mcp

See it work

Table of contents

Setup

1. Describe your SAP systems

2. Register the server in your host

3. Say hello

4. Add production and on-prem systems