SAP MCP Server MCP Server

https://mcp.sap.oobeprotocol.ai/mcp Remote v0.9.82

Published by mcp.sap.oobeprotocol.ai — no publish provenance and no public repository, so the publisher could not be verified and the source cannot be independently located.

Solana-native MCP gateway for SAP, DeFi tools, SNS identity, and x402 payments.

Open the endpoint ↗ Raw report (JSON) ↗

Trust grade

94/100

Last scanned 2026-09-07 get badge →

Trust

A · 94/100

Adoption risk for you: the threat score, then adjusted down for blast radius, publisher verification and how much the scan could see. Deterministic; every point is auditable.

Capability

High

Blast radius if it went rogue — what the server’s tools could reach. Independent of trust.

Coverage

Live

How much the scan could actually inspect. Shallow coverage is stated, never hidden.

A Why this grade threat 100 − adoption risk = 94/100

The grade answers one question — how safe is this server for you to adopt — so it is computed in two auditable stages. Nothing below is an opinion or an LLM's guess; every line is a real term the deterministic engine applied, and the same input always yields the same number.

1. Threat score — 100 − 0 = 100. What the published surface and source actually contain:

The deterministic scan raised no scored threat in the surface it inspected — the threat score stayed at 100. Capability observations and advisory notes are recorded but never lower it.

2. Client adoption risk — 100 − 6 = 94. Three small, subtract-only factors that reflect your risk in adopting it — a clean scan proves less on a powerful, unverified or barely-inspectable package, so the grade says so plainly:

Points	Adoption-risk factor
−6	capability blast radius (high) — client exposure if the model is manipulated

Capability observations and info notes are shown under Findings but never scored. Open any row's finding below for the file, line and evidence behind a deduction.

Findings 7

critical Completed toxic-flow trifecta across toolsMTC-FLOW-002

This server (without client built-ins) exposes a complete data-exfiltration chain: 3land_buyNFT → coingecko_getTokenPrice → bridging_bridgeDeBridge. Untrusted input is ingested, private data is read, and it can be sent to an external sink via the agent composing the tools (→). Static analysis proves the primitive exists, not that a specific run will occur.

Fix: Remove one leg of the trifecta: isolate untrusted-input tools from secret-reading tools and from egress tools, or require human approval between them.

Location: flow 3land_buyNFT → coingecko_getTokenPrice → bridging_bridgeDeBridge

medium Open-world tool "spl-token_getBalance" also reads sensitive dataMTC-CAP-004

Tool "spl-token_getBalance" declares openWorldHint=true — it interacts with entities outside the trust boundary — while also reading sensitive data. That combination is a canonical lethal-trifecta indicator.

Fix: Separate outward-facing tools from sensitive-data reads; require confirmation between them.

Location: tool spl-token_getBalance

medium Open-world tool "coingecko_getTokenPrice" also reads sensitive dataMTC-CAP-004

Tool "coingecko_getTokenPrice" declares openWorldHint=true — it interacts with entities outside the trust boundary — while also reading sensitive data. That combination is a canonical lethal-trifecta indicator.

Fix: Separate outward-facing tools from sensitive-data reads; require confirmation between them.

Location: tool coingecko_getTokenPrice

medium Unconstrained URL/host parameter "uri" on "spl-token_deployToken"MTC-CAP-007

Tool "spl-token_deployToken" takes a URL/host parameter "uri" with no allowlist/pattern. An outbound-request tool with an unbounded destination enables SSRF and cloud-metadata access (e.g. 169.254.169.254).

Fix: Allowlist destinations or constrain the parameter; block private/link-local addresses server-side.

Location: tool spl-token_deployToken · inputSchema.properties.uri

medium Unconstrained URL/host parameter "uri" on "metaplex-nft_deployCollection"MTC-CAP-007

Tool "metaplex-nft_deployCollection" takes a URL/host parameter "uri" with no allowlist/pattern. An outbound-request tool with an unbounded destination enables SSRF and cloud-metadata access (e.g. 169.254.169.254).

Fix: Allowlist destinations or constrain the parameter; block private/link-local addresses server-side.

Location: tool metaplex-nft_deployCollection · inputSchema.properties.uri

medium Unconstrained URL/host parameter "uri" on "metaplex-nft_mintNFT"MTC-CAP-007

Tool "metaplex-nft_mintNFT" takes a URL/host parameter "uri" with no allowlist/pattern. An outbound-request tool with an unbounded destination enables SSRF and cloud-metadata access (e.g. 169.254.169.254).

Fix: Allowlist destinations or constrain the parameter; block private/link-local addresses server-side.

Location: tool metaplex-nft_mintNFT · inputSchema.properties.uri

medium Unconstrained URL/host parameter "uri" on "metaplex-nft_updateMetadata"MTC-CAP-007

Tool "metaplex-nft_updateMetadata" takes a URL/host parameter "uri" with no allowlist/pattern. An outbound-request tool with an unbounded destination enables SSRF and cloud-metadata access (e.g. 169.254.169.254).

Fix: Allowlist destinations or constrain the parameter; block private/link-local addresses server-side.

Location: tool metaplex-nft_updateMetadata · inputSchema.properties.uri

Tools 412

Each tool and what it can reach — enumerated from the running server.

bridging_bridgeDeBridgeingests untrusted inputnetwork egress
bridging_bridgeWormholeingests untrusted inputnetwork egress
jupiter_universal_deposit_quoteingests untrusted inputnetwork egress
metaplex-nft_mintNFTingests untrusted inputnetwork egress
sap_chat_send_messageingests untrusted inputnetwork egress
sap_phoenix_get_cross_chain_quoteingests untrusted inputnetwork egress
sap_premium_close_sessioningests untrusted inputnetwork egress
sap_premium_webhook_registeringests untrusted inputnetwork egress
sap_premium_webhook_relayingests untrusted inputnetwork egress
sap_premium_webhook_unregisteringests untrusted inputnetwork egress

Show 402 more tools ↓

3land_buyNFTingests untrusted input
3land_cancelListingingests untrusted input
3land_createCollectioningests untrusted input
3land_listForSaleingests untrusted input
3land_mintAndListingests untrusted input
adrena_addCollateralingests untrusted input
adrena_closePositioningests untrusted input
adrena_getPositionsingests untrusted input
adrena_openPositioningests untrusted input
adrena_removeCollateralingests untrusted input
blinks_confirmActioningests untrusted input
blinks_executeActioningests untrusted input
blinks_getActioningests untrusted input
blinks_resolveBlinkUrlingests untrusted input
blinks_validateActionsJsoningests untrusted input
bridging_bridgeDeBridgeStatusingests untrusted input
bridging_bridgeWormholeStatusingests untrusted input
coingecko_getOHLCVingests untrusted input
coingecko_getPoolsByTokeningests untrusted input
coingecko_getTokenInfoingests untrusted input
coingecko_getTokenPricereads sensitive data
coingecko_getTopGainersLosersingests untrusted input
coingecko_getTrendingingests untrusted input
das_getAssetingests untrusted input
das_getAssetsByCollectioningests untrusted input
das_getAssetsByCreatoringests untrusted input
das_getAssetsByOwneringests untrusted input
das_searchAssetsingests untrusted input
gibwork_createBountyingests untrusted input
gibwork_listBountiesingests untrusted input
gibwork_submitWorkingests untrusted input
jito_getBundleStatusingests untrusted input
jito_getTipEstimateingests untrusted input
jito_sendBundleingests untrusted input
jupiter_getDCAOrdersingests untrusted input
jupiter_getHoldingsingests untrusted input
jupiter_getLimitOrdersingests untrusted input
jupiter_getQuoteingests untrusted input
jupiter_getTokenInfoingests untrusted input
jupiter_getTokenListingests untrusted input
jupiter_programLabelsingests untrusted input
jupiter_searchTokensingests untrusted input
jupiter_shieldingests untrusted input
jupiter_universal_deposit_chainsingests untrusted input
jupiter_universal_deposit_statusingests untrusted input
lulo_depositingests untrusted input
lulo_getBestRatesingests untrusted input
lulo_getPositionsingests untrusted input
lulo_withdrawingests untrusted input
magicblock_challengeingests untrusted input
magicblock_ensureCrankingests untrusted input
magicblock_getAccountInfoingests untrusted input
magicblock_getBlockhashForAccountsingests untrusted input
magicblock_getDelegationStatusingests untrusted input
magicblock_getIdentityingests untrusted input
magicblock_getRandomnessResultingests untrusted input
magicblock_getSignatureStatusesingests untrusted input
magicblock_healthingests untrusted input
magicblock_isMintInitializedingests untrusted input
magicblock_loginingests untrusted input
magicblock_private_balanceingests untrusted input
magicblock_privateBalanceingests untrusted input
magicblock_swap_quoteingests untrusted input
magicblock_swapQuoteingests untrusted input
manifest_cancelOrderingests untrusted input
manifest_createMarketingests untrusted input
manifest_getOrderbookingests untrusted input
manifest_placeLimitOrderingests untrusted input
metaplex-nft_configureRoyaltiesingests untrusted input
metaplex-nft_delegateAuthorityingests untrusted input
metaplex-nft_deployCollectioningests untrusted input
metaplex-nft_revokeAuthorityingests untrusted input
metaplex-nft_setAndVerifyCollectioningests untrusted input
metaplex-nft_updateMetadataingests untrusted input
metaplex-nft_verifyCollectioningests untrusted input
metaplex-nft_verifyCreatoringests untrusted input
meteora_addDLMMLiquidityingests untrusted input
meteora_createAlphaVaultingests untrusted input
meteora_createDLMMPoolingests untrusted input
meteora_createDynamicPoolingests untrusted input
meteora_removeDLMMLiquidityingests untrusted input
openbook_cancelOrderingests untrusted input
openbook_createMarketingests untrusted input
openbook_placeOrderingests untrusted input
orca_closePositioningests untrusted input
orca_collectFeesingests untrusted input
orca_getWhirlpoolingests untrusted input
orca_openPositioningests untrusted input
pump_launchTokeningests untrusted input
pump_tradeingests untrusted input
pyth_getPriceHistoryingests untrusted input
pyth_listPriceFeedsingests untrusted input
raydium-pools_addLiquidityingests untrusted input
raydium-pools_createAMMv4ingests untrusted input
raydium-pools_createCLMMingests untrusted input
raydium-pools_createCPMMingests untrusted input
raydium-pools_removeLiquidityingests untrusted input
sap_adrena_get_custody_infoingests untrusted input
sap_adrena_get_mutageningests untrusted input
sap_adrena_get_mutagen_leaderboardingests untrusted input
sap_adrena_get_position_statusingests untrusted input
sap_adrena_get_positionsingests untrusted input
sap_adrena_get_pricesingests untrusted input
sap_adrena_get_trader_infoingests untrusted input
sap_adrena_get_trader_leaderboardingests untrusted input
sap_adrena_get_trading_pricesingests untrusted input
sap_adrena_oracle_readinessingests untrusted input
sap_agent_migrate_pricing_menuingests untrusted input
sap_cancel_subscriptioningests untrusted input
sap_chart_long_termingests untrusted input
sap_chart_multi_ohlcingests untrusted input
sap_chart_ohlcingests untrusted input
sap_chat_derive_roomingests untrusted input
sap_chat_publish_manifestingests untrusted input
sap_chat_read_allingests untrusted input
sap_chat_read_latestingests untrusted input
sap_chat_seal_roomingests untrusted input
sap_chat_start_roomingests untrusted input
sap_chat_statusingests untrusted input
sap_close_escrow_v2ingests untrusted input
sap_compact_inscribe_memoryingests untrusted input
sap_complete_unstakeingests untrusted input
sap_create_escrow_v2ingests untrusted input
sap_create_subscriptioningests untrusted input
sap_deposit_escrow_v2ingests untrusted input
sap_discover_agentsingests untrusted input
sap_fairscale_scoreingests untrusted input
sap_fairscale_trust_gateingests untrusted input
sap_fetch_attestationingests untrusted input
sap_fetch_capability_indexingests untrusted input
sap_fetch_disputeingests untrusted input
sap_fetch_epoch_pageingests untrusted input
sap_fetch_escrowingests untrusted input
sap_fetch_escrow_v2ingests untrusted input
sap_fetch_feedbackingests untrusted input
sap_fetch_pending_settlementingests untrusted input
sap_fetch_protocol_indexingests untrusted input
sap_fetch_sessioningests untrusted input
sap_fetch_stakeingests untrusted input
sap_fetch_subscriptioningests untrusted input
sap_fetch_toolingests untrusted input
sap_fetch_tool_category_indexingests untrusted input
sap_fetch_vaultingests untrusted input
sap_finalize_settlement_v2ingests untrusted input
sap_fund_subscriptioningests untrusted input
sap_get_agent_profileingests untrusted input
sap_get_network_overviewingests untrusted input
sap_get_tool_category_summaryingests untrusted input
sap_give_feedbackingests untrusted input
sap_init_stakeingests untrusted input
sap_init_vaultingests untrusted input
sap_inscribe_memoryingests untrusted input
sap_is_agent_activeingests untrusted input
sap_list_agentsingests untrusted input
sap_list_all_agentsingests untrusted input
sap_network_statsingests untrusted input
sap_next_settlement_indexingests untrusted input
sap_open_vault_sessioningests untrusted input
sap_perp_fear_greedingests untrusted input
sap_phoenix_get_candlesingests untrusted input
sap_phoenix_get_deposit_statusingests untrusted input
sap_phoenix_get_exchangeingests untrusted input
sap_phoenix_get_funding_historyingests untrusted input
sap_phoenix_get_marketingests untrusted input
sap_phoenix_get_market_fillsingests untrusted input
sap_phoenix_get_market_statsingests untrusted input
sap_phoenix_get_marketsingests untrusted input
sap_phoenix_get_orderbookingests untrusted input
sap_phoenix_get_supported_chainsingests untrusted input
sap_phoenix_get_traderingests untrusted input
sap_phoenix_get_trader_pnlingests untrusted input
sap_phoenix_get_trader_stateingests untrusted input
sap_premium_activate_sessioningests untrusted input
sap_premium_plugin_templatenetwork egress
sap_premium_stream_flushingests untrusted input
sap_premium_stream_pollingests untrusted input
sap_premium_webhook_statusingests untrusted input
sap_pricing_catalogingests untrusted input
sap_profile_switchingests untrusted input
sap_report_callsingests untrusted input
sap_report_tool_invocationsingests untrusted input
sap_request_unstakeingests untrusted input
sap_revoke_attestationingests untrusted input
sap_revoke_feedbackingests untrusted input
sap_search_toolsingests untrusted input
sap_session_read_latestingests untrusted input
sap_session_startingests untrusted input
sap_session_statusingests untrusted input
sap_settle_escrow_v2ingests untrusted input
sap_skills_check_updatesingests untrusted input
sap_skills_self_updateingests untrusted input
sap_sns_check_ownershipingests untrusted input
sap_sns_get_domain_pdaingests untrusted input
sap_sns_get_domain_recordsingests untrusted input
sap_sns_get_recordingests untrusted input
sap_sns_get_record_pdaingests untrusted input
sap_sns_resolve_domainingests untrusted input
sap_sns_resolve_walletingests untrusted input
sap_webhook_catalognetwork egress
sap_withdraw_escrow_v2ingests untrusted input
sap_x402_build_headers_from_escrowingests untrusted input
sap_x402_build_payment_headersingests untrusted input
sap_x402_calculate_costingests untrusted input
sap_x402_estimate_costingests untrusted input
sap_x402_fetch_escrowingests untrusted input
sap_x402_get_balanceingests untrusted input
sap_x402_has_escrowingests untrusted input
sap_x402_prepare_paymentingests untrusted input
sap_x402_settleingests untrusted input
sap_x402_settle_batchingests untrusted input
send-arcade_listGamesingests untrusted input
send-arcade_playGameingests untrusted input
sol_get_balanceingests untrusted input
spl-token_burningests untrusted input
spl-token_closeAccountingests untrusted input
spl-token_deployTokeningests untrusted input
spl-token_freezeAccountingests untrusted input
spl-token_getBalancereads sensitive data
spl-token_mintToingests untrusted input
spl-token_rugCheckingests untrusted input
spl-token_thawAccountingests untrusted input
spl-token_transferingests untrusted input
spl-token_transferSolingests untrusted input
staking_getStakeAccountsingests untrusted input
staking_stakeJupSOLingests untrusted input
staking_stakeSOLingests untrusted input
staking_stakeSolayeringests untrusted input
staking_unstakeJupSOLingests untrusted input
staking_unstakeSOLingests untrusted input
staking_unstakeSolayeringests untrusted input
alldomains_getOwnedDomainsno sensitive capability
alldomains_registerDomainno sensitive capability
alldomains_resolveDomainno sensitive capability
blinks_buildActionUrlno sensitive capability
jupiter_cancelDCAno sensitive capability
jupiter_cancelLimitOrderno sensitive capability
jupiter_cancelLimitOrdersno sensitive capability
jupiter_createDCAno sensitive capability
jupiter_createLimitOrderno sensitive capability
jupiter_executeDCAno sensitive capability
jupiter_executeOrderno sensitive capability
jupiter_executeTriggerno sensitive capability
jupiter_getOrderno sensitive capability
jupiter_getPriceno sensitive capability
jupiter_smartSwapno sensitive capability
jupiter_swapno sensitive capability
jupiter_swapInstructionsno sensitive capability
magicblock_balanceno sensitive capability
magicblock_depositno sensitive capability
magicblock_getRoutesno sensitive capability
magicblock_initializeMintno sensitive capability
magicblock_requestRandomnessno sensitive capability
magicblock_swapno sensitive capability
magicblock_transferno sensitive capability
magicblock_withdrawno sensitive capability
orca_swapno sensitive capability
pyth_getPriceno sensitive capability
sap_adrena_build_add_limit_orderno sensitive capability
sap_adrena_build_add_liquid_stakeno sensitive capability
sap_adrena_build_add_liquidityno sensitive capability
sap_adrena_build_add_locked_stakeno sensitive capability
sap_adrena_build_cancel_limit_orderno sensitive capability
sap_adrena_build_cancel_stop_lossno sensitive capability
sap_adrena_build_cancel_take_profitno sensitive capability
sap_adrena_build_claim_stakesno sensitive capability
sap_adrena_build_close_commodity_longno sensitive capability
sap_adrena_build_close_commodity_shortno sensitive capability
sap_adrena_build_close_longno sensitive capability
sap_adrena_build_close_shortno sensitive capability
sap_adrena_build_init_user_stakingno sensitive capability
sap_adrena_build_modify_positionno sensitive capability
sap_adrena_build_open_commodity_longno sensitive capability
sap_adrena_build_open_commodity_shortno sensitive capability
sap_adrena_build_open_longno sensitive capability
sap_adrena_build_open_shortno sensitive capability
sap_adrena_build_position_packageno sensitive capability
sap_adrena_build_remove_liquid_stakeno sensitive capability
sap_adrena_build_remove_liquidityno sensitive capability
sap_adrena_build_set_stop_lossno sensitive capability
sap_adrena_build_set_take_profitno sensitive capability
sap_adrena_build_swapno sensitive capability
sap_adrena_build_trailing_stopno sensitive capability
sap_adrena_get_marketsno sensitive capability
sap_adrena_get_pool_infono sensitive capability
sap_adrena_simulate_positionno sensitive capability
sap_adrena_trade_intentno sensitive capability
sap_agent_contextno sensitive capability
sap_agent_identity_planno sensitive capability
sap_agent_next_actionno sensitive capability
sap_agent_runtime_statusno sensitive capability
sap_agent_standard_contextno sensitive capability
sap_agent_startno sensitive capability
sap_audit_queryno sensitive capability
sap_audit_recordno sensitive capability
sap_audit_statsno sensitive capability
sap_build_agent_lifecycle_transactionno sensitive capability
sap_build_agent_register_transactionno sensitive capability
sap_build_agent_report_calls_transactionno sensitive capability
sap_build_agent_update_transactionno sensitive capability
sap_build_sol_transferno sensitive capability
sap_build_spl_transferno sensitive capability
sap_chart_indicatorsno sensitive capability
sap_chart_volume_profileno sensitive capability
sap_close_agentno sensitive capability
sap_create_attestationno sensitive capability
sap_deactivate_agentno sensitive capability
sap_deactivate_toolno sensitive capability
sap_decode_transactionno sensitive capability
sap_deposit_stakeno sensitive capability
sap_escrow_build_close_transactionno sensitive capability
sap_escrow_build_create_transactionno sensitive capability
sap_escrow_build_deposit_transactionno sensitive capability
sap_escrow_build_finalize_transactionno sensitive capability
sap_escrow_build_settle_transactionno sensitive capability
sap_escrow_build_withdraw_transactionno sensitive capability
sap_estimate_tool_costno sensitive capability
sap_export_agent_oasfno sensitive capability
sap_file_dispute_v2no sensitive capability
sap_find_tools_by_categoryno sensitive capability
sap_get_agentno sensitive capability
sap_get_agent_statsno sensitive capability
sap_get_global_stateno sensitive capability
sap_hermes_recentno sensitive capability
sap_hermes_searchno sensitive capability
sap_market_snapshotno sensitive capability
sap_memory_pruneno sensitive capability
sap_memory_recallno sensitive capability
sap_memory_recordno sensitive capability
sap_memory_searchno sensitive capability
sap_memory_summarizeno sensitive capability
sap_payments_fund_prepaidno sensitive capability
sap_payments_prepaid_balanceno sensitive capability
sap_perp_builder_statusno sensitive capability
sap_perp_funding_historyno sensitive capability
sap_perp_liquidation_zonesno sensitive capability
sap_perp_marketsno sensitive capability
sap_perp_portfolio_riskno sensitive capability
sap_perp_position_infono sensitive capability
sap_perp_risk_checkno sensitive capability
sap_perp_signal_scoreno sensitive capability
sap_perp_trade_planno sensitive capability
sap_phoenix_build_cancel_allno sensitive capability
sap_phoenix_build_cancel_ordersno sensitive capability
sap_phoenix_build_cancel_stop_lossno sensitive capability
sap_phoenix_build_depositno sensitive capability
sap_phoenix_build_onboard_traderno sensitive capability
sap_phoenix_build_place_conditional_orderno sensitive capability
sap_phoenix_build_place_limit_orderno sensitive capability
sap_phoenix_build_place_market_orderno sensitive capability
sap_phoenix_build_place_stop_lossno sensitive capability
sap_phoenix_build_register_traderno sensitive capability
sap_phoenix_build_withdrawno sensitive capability
sap_phoenix_submit_onboard_traderno sensitive capability
sap_premium_metricsno sensitive capability
sap_premium_plugin_catalogno sensitive capability
sap_premium_session_startno sensitive capability
sap_premium_session_statusno sensitive capability
sap_premium_validate_plugin_manifestno sensitive capability
sap_premium_webhook_relay_statusno sensitive capability
sap_prepare_actionno sensitive capability
sap_prepare_mandateno sensitive capability
sap_preview_transactionno sensitive capability
sap_profile_currentno sensitive capability
sap_profile_listno sensitive capability
sap_profile_public_keyno sensitive capability
sap_protocol_invariantsno sensitive capability
sap_publish_tool_by_nameno sensitive capability
sap_quick_contextno sensitive capability
sap_reactivate_agentno sensitive capability
sap_reactivate_toolno sensitive capability
sap_register_agentno sensitive capability
sap_runtime_repair_planno sensitive capability
sap_sign_transactionno sensitive capability
sap_skills_bundleno sensitive capability
sap_skills_installno sensitive capability
sap_skills_listno sensitive capability
sap_skills_upgrade_planno sensitive capability
sap_sns_batch_check_domainsno sensitive capability
sap_sns_build_manage_record_transactionno sensitive capability
sap_sns_build_set_primary_domain_transactionno sensitive capability
sap_sns_check_domainno sensitive capability
sap_sns_register_agent_domainno sensitive capability
sap_sns_validate_recordsno sensitive capability
sap_strategy_activateno sensitive capability
sap_strategy_executeno sensitive capability
sap_strategy_listno sensitive capability
sap_strategy_loadno sensitive capability
sap_strategy_saveno sensitive capability
sap_stream_bufferno sensitive capability
sap_stream_catalogno sensitive capability
sap_stream_consumeno sensitive capability
sap_stream_replayno sensitive capability
sap_submit_signed_transactionno sensitive capability
sap_trade_journalno sensitive capability
sap_trade_journal_queryno sensitive capability
sap_update_agentno sensitive capability
sap_update_feedbackno sensitive capability
sap_update_reputation_metricsno sensitive capability
sap_update_toolno sensitive capability
sns_resolveDomainno sensitive capability
sns_reverseLookupno sensitive capability
spl-token_getTokenAccountsno sensitive capability

Toxic flows 1

Cross-tool combinations that form a data-exfiltration primitive (untrusted input → sensitive source → external sink).

Versions 10

Scan history per published version. The engine is deterministic — the same version always yields the same score, so a changed score means the package itself changed.

Version	Score	Findings	Engine	Scanned
`v0.9.82` latest	A 94/100	7	1.13.0	2026-09-07
`v0.9.81`	A 94/100	7	1.13.0	2026-09-01
`v0.9.80`	A 94/100	7	1.13.0	2026-08-30
`v0.9.74`	A 94/100	7	1.12.1	2026-08-18
`v0.9.66`	A 94/100	7	1.12.1	2026-08-06

Show 5 more versions ↓

`v0.9.64`	A 94/100	7	1.12.1	2026-08-05
`v0.9.63`	A 94/100	7	1.12.1	2026-08-04
`v0.9.38`	A 94/100	7	1.12.1	2026-07-28
`v0.9.21`	A 94/100	7	1.10.0	2026-07-25
`v0.9.18`	A 94/100	7	1.10.0	2026-07-24

Embed this score

Show this server's live Trust Score in your README, docs or website. The badge is served straight from the registry and updates automatically after every rescan — no API key needed. It links back to this page, so anyone who sees the grade can also read the findings behind it instead of taking a number on faith.

Markdown (GitHub README)

[![MCP Trust Score](https://mcptrustchecker.com/registry/mcp-sap-oobeprotocol-ai/badge.svg)](https://mcptrustchecker.com/registry/mcp-sap-oobeprotocol-ai)

HTML

<a href="https://mcptrustchecker.com/registry/mcp-sap-oobeprotocol-ai"><img src="https://mcptrustchecker.com/registry/mcp-sap-oobeprotocol-ai/badge.svg" alt="MCP Trust Score" height="20"></a>

Prefer shields.io styling? Point it at https://mcptrustchecker.com/registry/mcp-sap-oobeprotocol-ai/badge.json via https://img.shields.io/endpoint?url=…

Verify this score yourself

The score above is reproducible: the same package version always yields the same result. Run it locally or over the free API — no account, no LLM, fully deterministic.

npx mcptrustchecker scan https://mcp.sap.oobeprotocol.ai/mcp --online

Use the free API → How scoring works

More in Finance & Commerce

1money Source verified npm

@1money/mcp

Finance & Commerce Score 100/100 0 findings 20/wk Cap. Minimal

402oracle Remote

https://402oracle.com/mcp

Signed verification attestations for agent decisions: business, price, freshness, claim checks.

Finance & Commerce Score 100/100 0 findings Cap. Minimal

Actual Source verified npm

actual-mcp

Actual Budget MCP server exposing API functionality

Finance & Commerce Score 100/100 0 findings 185/wk Cap. Minimal

Actual Budget Source verified npm

actual-budget-mcp

MCP server for Actual Budget - query and manage your personal finances through Claude

Finance & Commerce Score 100/100 0 findings 444/wk Cap. Minimal

Adyen Source verified npm

@adyen/mcp

The Adyen Model Context Protocol server allows you to integrate with Adyen APIs through LLMs function calling utilizing various Clients. It currently supports the following tools:

Finance & Commerce Score 100/100 0 findings 560/wk Cap. Minimal

Aegis Remote

https://aegis-mcp.borisinc.com/mcp

Trusted agent-commerce hub: discover, trust-check, and route x402 payments with failover.

Finance & Commerce Score 100/100 0 findings Cap. Minimal