High-risk tools in MCP SAP GUI Server

High severity MCP SAP GUI Server MCP Server 28 of 57 tools

28 of the 57 tools in MCP SAP GUI Server are classified as high risk. This page profiles those tools specifically, with recommended policy actions and the attack patterns that target them.

Every operation listed below is an action PolicyLayer recommends controlling at the transport layer. Open any tool to see the full profile, risk score, and YAML policy snippet.

Tools at high risk

sap_execute_transaction Execute

sap_execute_transaction
sap_click_tree_link Execute

Click a hyperlink in a tree node item.
sap_collapse_tree_node Execute

Collapse a folder node in a tree control
sap_connect Execute

sap_connect
sap_connect_existing Execute

Connect to an already open SAP session. Use this when SAP is already logged in.
sap_disconnect Execute

Disconnect from the current SAP session and release the binding.
sap_double_click_cell Execute

Double-click a cell in a table/grid (often opens details or drills down).
sap_double_click_tree_item Execute

Double-click a specific item (column cell) in a tree node row.
sap_double_click_tree_node Execute

Double-click a node in a tree control (often opens details or drills down).
sap_expand_tree_node Execute

Expand a folder node in a tree control to reveal its children.
sap_handle_popup Execute

sap_handle_popup
sap_press_alv_toolbar_button Execute

Press a toolbar button on an ALV grid (e.g., sort, filter, export).
sap_press_button Execute

Press a button on the current SAP screen.
sap_press_column_header Execute

Click a column header in an ALV grid (triggers sort). Does NOT work on GuiTableControl.
sap_scroll_table_control Execute

Scroll a GuiTableControl to a specific row position.
sap_select_all_rows Execute

Select all rows in an ALV grid. Does NOT work on GuiTableControl.
sap_select_alv_context_menu_item Execute

sap_select_alv_context_menu_item
sap_select_checkbox Execute

Select or deselect a checkbox on the current SAP screen.
sap_select_combobox_entry Execute

Select an entry in a combobox/dropdown by its key or display value text.
sap_select_menu Execute

Select a menu item from the menu bar or a submenu.
sap_select_multiple_rows Execute

Select multiple rows at once in an ALV grid or table control.
sap_select_radio_button Execute

Select a radio button on the current SAP screen.
sap_select_tab Execute

Select a tab in a tab strip control.
sap_select_table_row Execute

Select a row in a table/grid.
sap_select_tree_node Execute

Select a node in a tree control.
sap_send_key Execute

Send a keyboard key.
sap_set_current_cell Execute

Set the current (focused) cell in an ALV grid or table control.
sap_set_focus Execute

Set focus to any screen element by its ID.

Attacks that target this class

High-risk tools in any server share these documented attack patterns. Each links to the full case and the defensive policy.

High-risk tools in MCP SAP GUI Server

Tools at high risk

Attacks that target this class

More on MCP SAP GUI Server

Enforce policy on every MCP SAP GUI Server tool call.