Analytics Legends — SAP Analytics Intelligence

Name: Analytics Legends — SAP Analytics Intelligence
Author: analyticslegends

SAFEgrade B · trust 89/100

Read-only MCP server for the SAP analytics services market — firms, contract radar, day rates, concepts, studies. Hosted, no install.

ai agentsdataspheremcpmodel context protocolsapsap analytics

Overview

From the repository's own README, as read at the audited commit.

<!-- mcp-name: ai.analyticslegends/sap-analytics --># Analytics Legends — SAP Analytics MCP ServerA **read-only** [Model Context Protocol](https://modelcontextprotocol.io) server over acurated corpus of the **SAP analytics services market**: who delivers SAP Datasphere,Business Data Cloud, SAP Analytics Cloud and BW/4HANA work, what the contract marketlooks like, what the day rates are, what the vocabulary means, and what has justhappened.It exists so that an assistant answering an SAP analytics question can **cite a recordinstead of guessing**. Every row carries a `citation_url` on analyticslegends.ai, andevery response carries the size of the population it was drawn from.**Nothing to install.** The server is hosted:```https://analyticslegends.ai/mcp        streamable-http```The public tools need no credential.---## Connect<details open><summary><b>Claude Code</b></summary>```bashclaude mcp add --transport http analytics-legends https://analyticslegends.ai/mcp# with a subscriber key, to open the six gated tools:claude mcp add --transport http analytics-legends https://analyticslegends.ai/mcp \  --header "Authorization: Bearer alk_..."```</details><details><summary><b>Claude web, Desktop and mobile</b> (custom connector)</summary>Add a custom connector pointing at `https://analyticslegends.ai/mcp`. The public trancheanswers immediately, with no credential.To open the paid tranche, use the connector's **request-header authentication** and set`Authorization` to `Bearer alk_...`. The credential is entered once, by whoever adds theconnector, and is shared by that workspace — one key, one daily quota. There is no OAuthconsent flow to walk: this server's unit of access is a personal API key minted on ananalyticslegends.ai account, not a delegated identity.</details><details><summary><b>Claude Desktop / any client reading a JSON config</b></summary>```json{  "mcpServers": {    "analytics-legends": {      "type": "streamable-http",      "url": "https://analyticslegends.ai/m

Details

Source: analyticslegends/analytics-legends-mcp
Transports: streamable-http
Tools: Registered at runtime; the list could not be read from source.
License: MIT
Stars: 0 · pushed 24d ago

Trust audit

Nothing in the source contradicts what it says it does. Grade A is reserved for packages that have also passed the behavioural sandbox.

Layer	What it checks	Result
L0	Provenance & inventory	PASS
L1	Static analysis of the code	NA
L2	Instruction surface (what it tells the agent)	PASS
L3	Class-specific surface	WARN
L4	Behavioural (sandbox)	SKIPPED

What the source does

Filesystem: none-observed
Network: none-observed
Shell: none-observed
Dependencies: pinned
Secrets in source: none-found

Findings (3)

MEDIUMAuth / authz · mcp.remote_no_auth · CWE-287, CWE-862

streamable-http

Why it matters. a network transport with no auth environment variable found

Fix. require a token

LOWPrompt injection · prompt.credential_read · CWE-94, CWE-1427

README.md:47

consent flow to walk: this server's unit of access is a personal API key minted on an

Why it matters. asks the agent to read credentials

LOWInventory / provenance · mcp.no_tools_extracted · CWE-1104

server.json

Why it matters. the tool list is enumerated at runtime by tools/list, not declared in source

Fix. the page says so rather than showing an empty table

Gates applied: no_behavioural_pass.

Audited 2026-09-13 · audit v0.4.0 · source sha da9e165750ed · full audit: observations/trust-audit/mcp-server/analyticslegends__sap-analytics.json · Report an issue or request a re-scan

Audit history

Date	Source	Verdict	Grade	Score	Change
2026-09-13	`da9e165750ed`	SAFE	B	89	source changed, verdict held

Alternatives

Other servers in the same categories, safer ones first.

AgentTrust — Identity & Trust for A2A Agents
12r/6w/1d · CAUTION MCP Agent
45r/6w/0d · BLOCK Magic
0r/0w/0d · SAFE Exa
7r/2w/0d · SAFE AdTest.AI MCP server
0r/1w/0d · SAFE Bareun MCP Server — Korean NLP & Spell/Grammar Checking
0r/0w/0d · SAFE

Questions

What is the Analytics Legends — SAP Analytics Intelligence MCP server?

Read-only MCP server for the SAP analytics services market — firms, contract radar, day rates, concepts, studies. Hosted, no install.

Is Analytics Legends — SAP Analytics Intelligence safe to connect to an agent?

The audit found nothing in the source that contradicts what it says it does, and graded it B (89/100). Grade A is held back for packages that have also passed a sandboxed behavioural run, which is why a clean server reads B.

What credentials does Analytics Legends — SAP Analytics Intelligence need?

No credential environment variables were found in its source, so it appears to need none.

How does Analytics Legends — SAP Analytics Intelligence run?

It speaks streamable-http, so it runs as a service you connect to over the network.

How current is this page?

The grade is for one exact copy of the source (da9e165750ed), read on 2026-09-13. The repository is watched and re-audited when it changes.

Provenance: OBSERVED · read 2026-09-13 · job trust-audit-2026-09-13