Bw Modeling MCP Server
bw-modeling-mcp
npm
v1.4.1
Published by dnic-dev — no publish provenance, so origin is unverified, but the source is public: the repository link below is self-declared yet readable, so you can inspect the code before adopting it.
MCP server for agentic AI-assisted development in SAP BW/4HANA
The grade answers one question — how safe is this server for you to adopt — so it is computed in two auditable stages. Nothing below is an opinion or an LLM's guess; every line is a real term the deterministic engine applied, and the same input always yields the same number.
1. Threat score — 100 − 0 = 100. What the published surface and source actually contain:
The deterministic scan raised no scored threat in the surface it inspected — the threat score stayed at 100. Capability observations and advisory notes are recorded but never lower it.
2. Client adoption risk — 100 − 4 = 96. Three small, subtract-only factors that reflect your risk in adopting it — a clean scan proves less on a powerful, unverified or barely-inspectable package, so the grade says so plainly:
| Points | Adoption-risk factor |
|---|---|
| −3 | capability blast radius (moderate) — client exposure if the model is manipulated |
| −1 | publisher verification (public source) — no provenance, but the source is public and inspectable |
Capability observations and info notes are shown under Findings but never scored.
Open any row's finding below for the file, line and evidence behind a deduction.
Findings 0
Tools 99
Each tool and what it can reach — statically extracted from the published source.
bw_get_push_schemaingests untrusted inputbw_preview_datasourceingests untrusted inputbw_activateno sensitive capabilitybw_activate_process_chainno sensitive capabilitybw_activate_requestno sensitive capabilitybw_add_process_chain_edgeno sensitive capabilitybw_add_process_chain_error_linksno sensitive capabilitybw_add_process_chain_programno sensitive capabilitybw_append_process_chain_dtpno sensitive capabilitybw_change_datasource_deltano sensitive capability
Show 89 more tools ↓
bw_change_packageno sensitive capabilitybw_create_adsono sensitive capabilitybw_create_aggregation_levelno sensitive capabilitybw_create_composite_providerno sensitive capabilitybw_create_datasourceno sensitive capabilitybw_create_decision_variantno sensitive capabilitybw_create_dtpno sensitive capabilitybw_create_infoareano sensitive capabilitybw_create_infoobjectno sensitive capabilitybw_create_infosourceno sensitive capabilitybw_create_process_chainno sensitive capabilitybw_create_queryno sensitive capabilitybw_create_rkfno sensitive capabilitybw_create_transformationno sensitive capabilitybw_create_transport_taskno sensitive capabilitybw_create_variableno sensitive capabilitybw_deleteno sensitive capabilitybw_delete_transformation_routineno sensitive capabilitybw_get_adsono sensitive capabilitybw_get_aggregation_levelno sensitive capabilitybw_get_ckfno sensitive capabilitybw_get_composite_providerno sensitive capabilitybw_get_dataflowno sensitive capabilitybw_get_datasourceno sensitive capabilitybw_get_dtpno sensitive capabilitybw_get_dtpsno sensitive capabilitybw_get_filter_valuesno sensitive capabilitybw_get_infoareano sensitive capabilitybw_get_infoobjectno sensitive capabilitybw_get_infosourceno sensitive capabilitybw_get_open_hubno sensitive capabilitybw_get_planning_functionno sensitive capabilitybw_get_planning_propertiesno sensitive capabilitybw_get_planning_sequenceno sensitive capabilitybw_get_process_chainno sensitive capabilitybw_get_process_chain_run_detailno sensitive capabilitybw_get_process_variantno sensitive capabilitybw_get_queryno sensitive capabilitybw_get_query_rolesno sensitive capabilitybw_get_remodeling_requestno sensitive capabilitybw_get_requestno sensitive capabilitybw_get_rkfno sensitive capabilitybw_get_role_queriesno sensitive capabilitybw_get_rolesno sensitive capabilitybw_get_source_systemno sensitive capabilitybw_get_structureno sensitive capabilitybw_get_transformationno sensitive capabilitybw_list_changeable_transportsno sensitive capabilitybw_list_contentsno sensitive capabilitybw_list_datasourcesno sensitive capabilitybw_list_process_chain_last_statusno sensitive capabilitybw_list_process_chain_runsno sensitive capabilitybw_list_remodeling_requestsno sensitive capabilitybw_list_remote_entitiesno sensitive capabilitybw_list_requestsno sensitive capabilitybw_list_source_systemsno sensitive capabilitybw_move_objectno sensitive capabilitybw_push_datano sensitive capabilitybw_query_datano sensitive capabilitybw_read_metadata_tablesno sensitive capabilitybw_remove_process_chain_edgeno sensitive capabilitybw_remove_process_chain_stepno sensitive capabilitybw_run_dtpno sensitive capabilitybw_run_remodelingno sensitive capabilitybw_searchno sensitive capabilitybw_set_datasource_fieldsno sensitive capabilitybw_set_dtp_filter_routineno sensitive capabilitybw_set_query_rolesno sensitive capabilitybw_set_transformation_expert_routineno sensitive capabilitybw_set_transformation_routineno sensitive capabilitybw_set_transformation_routine_fieldsno sensitive capabilitybw_set_transformation_runtimeno sensitive capabilitybw_swap_process_chain_dtpno sensitive capabilitybw_system_profileno sensitive capabilitybw_unlockno sensitive capabilitybw_update_adsono sensitive capabilitybw_update_aggregation_levelno sensitive capabilitybw_update_composite_providerno sensitive capabilitybw_update_dtpno sensitive capabilitybw_update_infoobjectno sensitive capabilitybw_update_infosourceno sensitive capabilitybw_update_process_chainno sensitive capabilitybw_update_query_characteristicno sensitive capabilitybw_update_query_filterno sensitive capabilitybw_update_query_key_figuresno sensitive capabilitybw_update_query_layoutno sensitive capabilitybw_update_query_settingsno sensitive capabilitybw_update_transformationno sensitive capabilitybw_xrefno sensitive capability
What this scan could not see
- Tools were statically extracted from the published source (99 recovered), not enumerated from a running server. Tool-poisoning, Unicode-smuggling, capability and toxic-flow analysis ran on this inferred surface, but a mis-parsed registration could be missed or mis-attributed, so tool-derived findings are capped below “confirmed”. To grade the real runtime surface, scan the running server: --command "npx -y <package>".
Versions 7
Scan history per published version. The engine is deterministic — the same version always yields the same score, so a changed score means the package itself changed.
| Version | Score | Findings | Engine | Scanned |
|---|---|---|---|---|
v1.4.1 latest |
A 96/100 | 0 | 1.13.0 | 2026-09-09 |
v1.4.0 |
A 96/100 | 0 | 1.13.0 | 2026-09-06 |
v1.3.0 |
A 96/100 | 0 | 1.12.1 | 2026-08-20 |
v1.2.1 |
A 96/100 | 0 | 1.12.1 | 2026-08-04 |
v1.2.0 |
A 96/100 | 0 | 1.12.1 | 2026-08-03 |
Show 2 more versions ↓
v1.1.0 |
A 96/100 | 0 | 1.12.1 | 2026-07-29 |
v1.0.0 |
A 96/100 | 0 | 1.8.0 | 2026-07-23 |
Embed this score
Show this server's live Trust Score in your README, docs or website. The badge is served straight from the registry and updates automatically after every rescan — no API key needed. It links back to this page, so anyone who sees the grade can also read the findings behind it instead of taking a number on faith.
Verify this score yourself
The score above is reproducible: the same package version always yields the same result. Run it locally or over the free API — no account, no LLM, fully deterministic.
npx mcptrustchecker scan bw-modeling-mcp --onlineMore in Developer Tools
Hotel booking MCP server — 300K+ properties, real confirmation numbers, loyalty programs. Builders monetize every booking via Stripe Connect. The first MCP server that completes real hotel reservations inside AI conversations.
Generates production-ready UI components from natural language, inspired by v0.
Manage AdGuard Home through AI assistants
Read-only Azure DevOps for MCP clients using only your existing browser session — no PAT, no Azure CLI. Browse work items, pull requests, comments, attachments and Artifacts feeds across every project, repo and feed you can access.
MCP server for Adobe Experience Manager Assets integration development
Servidor MCP para el tiempo oficial de España (API pública OpenData de AEMET). Predicción, observación y avisos como herramientas MCP tipadas.