ABAP platformoutside the atlasSAP's application server and development platform for ABAP. For the things here it is the system a developer's editor or an agent's tool reaches over ADT, and a program calls over RFC; where it runs is the deployment's, as for SAP BW/4HANA.
ADAMmcp-serverAn MCP server that debugs ABAP on a connected system over ADT, as one-shot captures or an interactive session, over stdio next to the assistant or as a shared server on SAP BTP Cloud Foundry.independent, abap
@arc-mcp/xsuaa-authpackageThe client-to-server authentication stack for an MCP server on SAP BTP: an XSUAA OAuth proxy, dynamic client registration, a chained bearer verifier, and a separate entrypoint for per-user principal propagation.independent, btp
Cloud ConnectorappSAP's on-premises agent that links SAP BTP applications to systems in a customer's own network, as a reverse invoke proxy that exposes only the systems and resources it is configured to allow.sap official, btp
ADT resourcesplatformThe HTTP endpoint an ABAP system exposes as the adt ICF service under /sap/bc/adt, so a client outside the system can reach development objects, delivered with the platform rather than installed.sap official, abap
SAP BTP ABAP environmentserviceSAP's ABAP runtime on BTP: ABAP systems developed in the ABAP Cloud model on SAP HANA Cloud, for cloud apps, OData services and side-by-side extensions of SAP S/4HANA.sap official, btp
SAP Authorization and Trust Management serviceserviceThe OAuth server behind a BTP application: issues the JWT the app checks, holds the scopes and role collections it checks against, and brokers trust to an identity provider. Bound, never installed.sap official, btp
SAP Destination serviceserviceNamed, credentialed addresses of other systems, resolved at runtime — so an application holds no URL and no secret of its own, and the same code reaches a different system in every landscape.sap official, btp
SAP Connectivity serviceserviceThe proxy through which a cloud application reaches an on-premise system behind a Cloud Connector — HTTP, RFC and raw sockets — without that system being exposed.sap official, btp
SAP BTP, Cloud Foundry RuntimeserviceThe Cloud Foundry runtime of SAP BTP: memory for applications in a Cloud Foundry org, run from SAP's Java, Node.js and Python buildpacks or community buildpacks and managed with the standard Cloud Foundry tools.sap official, btp
Your MCP client → ADAMStated in the document, dataClementRingot/ADAM — README, Development, checked 2026-10-26: “src/http-server.ts
(Streamable HTTP with XSUAA/API-key auth), src/server.ts (MCP), src/config.ts, src/index.ts
(entry point, stdio or --http).”
ADAM → ADT resourcesDocumented onlythe ADT resources the server calls on the connected system: it needs a system reachable over HTTP(S) with ADT enabled, and a user with ADT access and debug authorization
ADAM → SAP BTP ABAP environmentDocumented only, under a conditionthe ABAP instance whose service key the server logs on with, opening the browser for the SAP login on the first callIf the SAP system debugged is the SAP BTP ABAP environment, reached with a service key instead of a URL and credentials
ADAM → @arc-mcp/xsuaa-authDocumented only, under a conditionthe authentication stack in front of the /mcp route and the destination lookups behind itIf the server runs in HTTP mode on SAP BTP Cloud Foundry
ADAM → SAP Authorization and Trust Management serviceDocumented only, under a conditionthe sign-in of the MCP clients, with dynamic client registration and the debug scope every tool call needs; the MTA creates the instance from xs-security.jsonIf the server is deployed as a shared server on SAP BTP Cloud Foundry
ADAM → SAP Destination serviceDocumented only, authentication, outbound, under a conditionexchanges the signed-in MCP user's token at the Destination service for the per-user credentials the ADT calls then carry, so the debugger reaches SAP as that person's own SAP userIf the server is deployed as a shared server on SAP BTP Cloud Foundry
ADAM → SAP Connectivity serviceDocumented only, under a conditionthe forward proxy the ADT calls leave through on their way into the customer's networkIf the deployed server reaches an on-premise SAP system behind the Cloud Connector
ADAM → Cloud ConnectorDocumented only, under a conditionthe tunnel into the customer's network and the certificate mapping that turns the propagated user into an SAP logon name; its access control has to expose /sap/bc/adt with all sub-pathsIf the deployed server reaches an on-premise SAP system
ADAM → SAP BTP, Cloud Foundry RuntimeDocumented only, under a conditionthe runtime the MTA is deployed to, at one instance because an interactive session holds the program and its debugger session in the processIf the server is deployed as a shared server on SAP BTP instead of run locally over stdio
ADAM → ABAP platformDocumented only, data, HTTP, outboundarms the external breakpoints, starts the debugger listener, attaches from the application server the program stopped on and reads the position, call stack and variables, all through the ADT REST API that Eclipse ADT uses
Cloud Connector → SAP Connectivity serviceDocumented only, data, outboundRegistering with the Connectivity service of a subaccount and, with it, providing the tunnel through which applications on SAP BTP reach systems in the on-premise network. The connector works as a reverse invoke proxy, and no port is exposed on the on-premise side.