SAP Business One MCP Beta

Ask your AI assistant about your SAP Business One data โ€” business partners, items, stock and sales orders โ€” read-only, under your own SAP login.

๐Ÿ”’ Per-user SAP sign-in ๐Ÿ‘๏ธ Read-only by design ๐Ÿ”‘ OAuth 2.1 + PKCE ๐Ÿ—‚๏ธ ~335 SAP entities
โš ๏ธ This connector is in Beta The SAP Business One MCP is under active development. Tools, fields and behaviour may change, and you may occasionally hit rough edges. It is read-only โ€” it can never create, edit or delete anything in SAP. Please report anything unexpected via the Support page.

๐Ÿš€ What is the SAP B1 MCP?

The SAP Business One MCP is a Model Context Protocol (MCP) server that connects your AI assistant โ€” such as Claude โ€” directly to your company's SAP Business One system through the official Service Layer REST API. Once connected, you can ask questions about customers, vendors, products, stock levels and sales orders in plain language, and your AI reads the answers live from SAP.

๐Ÿค

Business Partners

Look up any customer or vendor by CardCode.

๐Ÿ“ฆ

Items & Stock

Fetch item master records and current on-hand quantities.

๐Ÿงพ

Sales Orders

Open a specific order or list the most recent ones.

๐Ÿ”Ž

Any Entity

Query any of the ~335 Service Layer entity sets you're authorised for.

Everyone sees only their own data There is no shared service account. When you connect, you sign in with your SAP Business One credentials, and every query runs under your SAP session โ€” so SAP's own per-user authorisation governs exactly what you can see.

๐Ÿ”— How to Connect

Connecting takes under two minutes and works with Claude, or any MCP-compatible AI assistant.

Add the MCP Server to your AI client

In Claude (Desktop or Web), open Settings โ†’ Connectors โ†’ Add custom connector and enter the server URL:

https://sap.mcps.work/mcp

The client discovers the server's OAuth endpoints automatically and prompts you to sign in.

Sign in with your SAP Business One login

A secure login page opens asking for your SAP Business One username and password โ€” the same credentials you use for SAP. These are validated directly against SAP; your password is never stored in any database.

Start asking questions

Once signed in, the SAP tools become available to your assistant. Just describe what you need โ€” for example, "What's the on-hand stock for item A001?" โ€” and your AI queries SAP for you, scoped to what your SAP user is allowed to see.

๐Ÿ’ก Read-only access Every tool is a GET-only query โ€” the connector has no ability to write to SAP whatsoever. You can explore your data with confidence.

๐Ÿ› ๏ธ Tools Reference

Your AI assistant can use the following tools once connected. You never call them by name โ€” just describe what you want in plain language.

๐Ÿค Business Partners

ToolWhat it doesExample prompt
sap_get_business_partnerFetch a customer or vendor by CardCode"Show me business partner C0001"

๐Ÿ“ฆ Items & Stock

ToolWhat it doesExample prompt
sap_get_itemFetch an item / product master record"Get the details for item A001"
sap_get_item_stockCurrent on-hand stock quantity for an item"How many units of A001 are in stock?"

๐Ÿงพ Sales Orders

ToolWhat it doesExample prompt
sap_get_sales_orderOpen a specific sales order by DocEntry"Show sales order 152"
sap_list_recent_sales_ordersList the most recent sales orders"List the last 10 sales orders"

๐Ÿ”Ž General Query

ToolWhat it doesExample prompt
sap_query_entityQuery a curated set of common entities with filters, sorting and paging"Find orders over $10,000 this quarter"
sap_list_entitiesList every Service Layer entity set (~335)"What SAP tables can I query?"
sap_query_anyRead-only OData query against any entity set you're authorised for"Show open A/R invoices from January"
Field allowlist Queries return a curated set of fields by default. Sensitive columns that a raw SAP record might carry (bank details, tax IDs, and the like) are not exposed unfiltered.

๐Ÿ”’ Privacy & Security

๐Ÿ‘ค

Your Login Only

No shared service account. You sign in with your own SAP credentials and only ever see what your SAP user is authorised to.

๐Ÿ‘๏ธ

Read-Only

Every tool is a GET-only query. The connector cannot create, modify or delete anything in SAP โ€” enforced in code.

๐Ÿ”

No Credential Store

Your SAP password lives only inside an encrypted (AES-256-GCM) session token โ€” never in a database, never logged in plaintext.

๐Ÿ›ก๏ธ

HTTPS & PKCE

OAuth 2.1 with PKCE (S256) over TLS. Rate limiting protects the login and token endpoints.

Data Flows

When you use a tool, the sequence is:

  1. Your AI assistant calls the SAP MCP tool with your parameters.
  2. The server opens (or reuses) a SAP session as you and sends a read-only Service Layer query.
  3. SAP returns the data; the server passes it back to your AI assistant.
  4. Nothing is persisted โ€” no SAP data is written to disk or stored on our servers.
Token lifetime Access tokens expire after 1 hour; refresh tokens after 30 days. Reconnecting the connector in your AI client starts a fresh SAP sign-in at any time.

๐Ÿ”ง Troubleshooting

The login page rejects my SAP credentials

Use the exact username and password you use to sign in to SAP Business One, for the company database this connector is configured against. If SAP itself would reject the login (locked account, wrong company), the connector will too. Check with your SAP administrator if in doubt.

A tool returns "Unauthorized" or a session error

Your SAP session may have expired after a period of inactivity. Disconnect and reconnect the connector in your AI client to trigger a fresh SAP sign-in.

A query returns no rows

Either the data genuinely isn't there for your filter, or your SAP user isn't authorised to see it โ€” the connector only returns what your SAP permissions allow. Try broadening the query or a different date range.

Can the connector change anything in SAP?

No. It is strictly read-only โ€” only GET queries exist in the code, so it can never create, update or delete SAP records.

It's in Beta โ€” is it safe to use?

Because access is read-only and scoped to your own SAP permissions, there is no risk of data being altered. "Beta" means tool coverage and field selections are still evolving and you may encounter occasional errors โ€” please report them via Support.