MCP Server

by UI5·io.github.UI5/mcp-server·v0.2.20

MCP server for SAPUI5/OpenUI5 development

A94/100grade A

What users say

No reviews yet

Safety scan

A94/100

Adoption

Established

100 stars58k downloads/wk

Reviews

Nobody has reviewed MCP Server yet.

If you have run it, two minutes of your experience saves the next person an afternoon.

No tool declarations could be read from the package source. They show once the server is installed.

scanner v0.1.5 · 2026-09-19 · same rubric, same numbers if you re-run it

no findings

Code scansource not scanned: tarball over 25MB25/25
–Live reliabilityno gateway calls yet and no remote to proben/a
–Tool poisoningtools not inspected (local package is not executed); not countedn/a
Auth qualitylocal package, no credentials required12/15
Maintenancelast push 1 days ago15/15
Maintainer identityregistry namespace matches repository owner; GitHub account older than a year9/10

Overall 94/100. Components that don't apply are left out of the denominator. Any critical finding is an F.Rubric Appeal a finding JSON

Runs npx -y @ui5/mcp-server on your machine. Read the scan report first; the gateway never runs local packages.

claude mcp add mcp-server -- npx -y @ui5/mcp-server

Is MCP Server safe?: Yes, by our scan: it is graded A (94/100). Read the MCP Server safety report
How do I install MCP Server?: It runs on your machine. Copy the Claude Code, Claude Desktop or Cursor config from the install section.
Does MCP Server need an API key?: No secret keys are declared. It reads 5 settings from the environment.
Is MCP Server maintained?: The last commit was in the last day (2026-09-18). The latest release is v0.2.20.

Local package. It runs on your machine, not through the gateway.

UI5_MCP_SERVER_ALLOWED_DOMAINSA comma-separated list of domains that are allowed to be used in various tools, for example: 'localhost, example.com, sub.example.com'. Set to an empty string to allow any domains. For wildcard subdomains, prefix the domain with a dot: '.example.com'. This will match 'www.example.com' but not 'example.com'.
UI5_MCP_SERVER_RESPONSE_NO_STRUCTURED_CONTENTSet to any value to disable structured content in the MCP server responses.
UI5_MCP_SERVER_RESPONSE_NO_RESOURCESSet to any value to disable resources in the MCP server responses, see https://modelcontextprotocol.io/specification/2025-06-18/server/resource. This is useful for clients that do not support resources, see https://modelcontextprotocol.io/clients, such as Cursor or the Gemini CLI.
UI5_LOG_LVLInternal log level (https://ui5.github.io/cli/stable/pages/Troubleshooting/#changing-the-log-level): 'silent', 'error', 'warn', 'info', 'perf', 'verbose' or 'silly'
UI5_DATA_DIRDirectory where the MCP server stores its data, such as cached API references. Defaults to the '.ui5' directory in the user's home directory.

Claim it to keep the listing current and reply to reviews. Claiming never changes the grade or hides a review.

Shows the safety grade and links back to this page. It updates itself after every scan and review.

[![mcp.market](https://mcp.market/badge/ui5-mcp-server.svg)](https://mcp.market/server/ui5-mcp-server)