// SCAN REPORT

Sap Analytics Cloud

90 tools. 31 can modify or destroy data without limits.

7 destructive tools with no built-in limits. Policy required.

Last updated: 12 Jun 2026

31 can modify or destroy data

59 read-only

90 tools total

Community server · catalogue entry verified 12/06/2026

How to control Sap Analytics Cloud ↓

TOOL MAP

What Sap Analytics Cloud exposes to your agents

Read (59) Write / Execute (24) Destructive / Financial (7)

Running more than one server? Check your whole stack →

MOST DANGEROUS TOOLS

Critical Risk

The most dangerous Sap Analytics Cloud tools

Destructive · High sac_stories_delete Deletion of stories (likely dashboards, reports, or analytical artifacts) is permanent and cannot be undone. Destructive · High sac_transport_delete_content This tool performs an irreversible deletion operation on analytics content. Destructive · Critical sac_users_bulk This tool supports bulk deletion of users and groups, which is irreversible. Destructive · High sac_users_delete User deletion is a destructive operation that cannot be undone without administrative restoration.

31 of Sap Analytics Cloud's 90 tools can modify, destroy, or commit something on every call — and an agent calls them with no built-in limits.

POLICY

How to control Sap Analytics Cloud

PolicyLayer is an MCP gateway — it sits between your AI agents and Sap Analytics Cloud, and nothing reaches the server without passing your rules. These are the rules we recommend:

Deny destructive operations

{
  "sac_stories_delete": {
    "deny_if": [
      {
        "conditions": [],
        "on_deny": "Blocked by default. Requires approval."
      }
    ]
  }
}

Destructive tools should never be available to autonomous agents without human approval.

Rate limit write operations

{
  "sac_calendar_copy_event": {
    "limits": [
      {
        "counter": "sac_calendar_copy_event_per_hour",
        "window": "hour",
        "max": 30,
        "scope": "grant"
      }
    ]
  }
}

Prevents bulk unintended modifications from agents caught in loops.

Cap read operations

{
  "sac_calendar_get_event": {
    "limits": [
      {
        "counter": "sac_calendar_get_event_per_minute",
        "window": "minute",
        "max": 60,
        "scope": "grant"
      }
    ]
  }
}

Controls API costs and prevents retry loops from exhausting upstream rate limits.

Create a free account and register Sap Analytics Cloud — nothing to install.
Add these rules — paste them, or build them visually. Tune the limits to your setup.
Point your MCP client (Claude, Cursor, anything) at your gateway URL.

ENFORCE POLICY ON SAP ANALYTICS CLOUD →

Free to start. No card required.

FULL CATALOGUE

All 90 Sap Analytics Cloud tools

DESTRUCTIVE 7 tools

Destructive sac_stories_delete Delete a story. Destructive sac_transport_delete_content Delete a content item. Destructive sac_users_bulk Bulk SCIM operations (create/update/delete multiple users/groups). Destructive sac_users_delete Delete a user. Destructive sac_export_delete_subscription Delete data export subscription(s). Destructive sac_import_delete_job Delete an import job. Destructive sac_schedule_delete Delete a publication schedule.

EXECUTE 3 tools

Execute sac_multi_action_execute Execute a multi action. ID format: <packageId>:<objectId>. Body requires parameterValues array (empty if none) Execute smart_query Execute a SQL-like query against SAC. Auto-selects OData vs Widget Query based on query type. Execute sac_import_run_job Execute validated import job.

WRITE 21 tools

Write sac_calendar_copy_event Copy/create a calendar event. Write sac_calendar_update_event Update a calendar event (partial). Write sac_export_create_subscription Create data export subscription for delta tracking. Write sac_import_create_currency_conversion_job Create import job for a currency conversion table. Write sac_import_create_job Create import job for a model. Returns JobID/JobURL. Write sac_import_create_public_dimension_job Create import job for a public dimension. Write sac_import_create_unit_conversion_job Create import job for a unit conversion table. Write sac_import_oneclick One-click: create job, upload, validate, run in one request. Write sac_import_upload_data Upload data to an import job. Returns upserted/failed row counts. Write sac_schedule_create Create a publication schedule. Write sac_schedule_update Update a publication schedule (partial). Write sac_stories_copy Copy a story. Write sac_stories_rename Rename a story. Write sac_teams_create Create a team/group (SCIM v2). Write sac_teams_patch Partial update of a team/group (SCIM v2 PATCH). Write sac_transport_create_export_job Create a content transport export job. Write sac_transport_create_import_job Create a content transport import job. Write sac_transport_move_item Move a content item to a target location. Write sac_users_create Create a user (SCIM v2). Write sac_users_patch Partial update of a user (SCIM v2 PATCH). Write sac_users_update Full replace of a user (SCIM v2 PUT).

READ 59 tools

EXPLORE

Related servers

Other MCP servers with similar tools — same risk classification, starter policies for each.

FAQ

Questions about Sap Analytics Cloud

Can an AI agent delete data through the Sap Analytics Cloud MCP server? +

Yes. The Sap Analytics Cloud server exposes 7 destructive tools including sac_stories_delete, sac_transport_delete_content, sac_users_bulk. These permanently remove resources with no undo. PolicyLayer blocks destructive tools by default so they never reach the upstream server.

How do I prevent bulk modifications through Sap Analytics Cloud? +

The Sap Analytics Cloud server has 21 write tools including sac_calendar_copy_event, sac_calendar_update_event, sac_export_create_subscription. Set a rate limit in your policy -- for example, 10 calls per hour prevents an agent from making more than 10 modifications per hour. PolicyLayer enforces this at the gateway, before calls reach Sap Analytics Cloud.

How many tools does the Sap Analytics Cloud MCP server expose? +

90 tools across 4 categories: Destructive, Execute, Read, Write. 59 are read-only. 31 can modify, create, or delete data.

How do I enforce a policy on Sap Analytics Cloud? +

Register the Sap Analytics Cloud MCP server in PolicyLayer, apply the suggested rules above (adjust the limits to your use case), and point your AI client at the PolicyLayer proxy URL instead of the server directly. Your agents keep the same tools; PolicyLayer evaluates every call against policy before it executes. Nothing to install, live in minutes.

Enforce policy on every Sap Analytics Cloud tool call.

Deterministic rules across all 90 Sap Analytics Cloud tools. Per-identity grants. Full audit log. Live in minutes. Nothing to install.

ENFORCE POLICY ON SAP ANALYTICS CLOUD →

Free to start. No card required.

90 Sap Analytics Cloud tools catalogued and risk-classified — across an index of 43,000+ MCP servers.