BlogBlogtypeA post on somebody's own site or a community platform. Nobody edits it after publication, so it dates from the day it was written.See every one →blog.zeis.de — Marian ZeisPart 3 of 10

Introducing ARC-1: A Secure ADT MCP Server for Enterprise SAP Development

Why ARC-1 exists beside earlier ADT MCP servers such as vibing-steampunk, fr0ster/mcp-abap-adt and dassian-adt: one centrally deployed instance per SAP system instead of a server on each developer laptop, with the MCP client to ARC-1 hop and the ARC-1 to SAP hop authenticated separately. It sets out the restrictive defaults (read-only, no free SQL or named table preview, writes confined to $TMP), the layering in which ARC-1's configuration, the user's role and SAP's own authorisation must all allow an action, Principal Propagation so SAP sees the real user, and audit events to the SAP Audit Log service; that is tool governance as much as agent access to your code. It leaves the BTP setup to the next part, and places ARC-1 beside SAP's ADT MCP Server, which SAP's configuration guide describes as a local HTTP server hosted by the IDE, and beside SAP API Policy 4.2026a, where ARC-1's stated position is to stay close to documented ADT behaviour and ask SAP before production use.

Where it sits

Explains
arc-1ABAParc-1mcp-serverAn MCP server in front of the ADT REST API that runs locally and on Cloud Foundry with twelve tools that read, search, write, activate, lint and transport ABAP objects.Agent access to your codeABAPAgent access to your codecapabilityLetting a coding agent read the project or the system you actually have, reach its model, its objects and its checks, and act on it. In file-based environments that works out of the box; complex systems need dedicated access capabilities. Whatever the environment, the agent also needs project- and framework-specific context, so it understands the thing in front of it rather than guessing from what it remembers of its training data. The transport is incidental: an MCP server, a language server or a CLI answer the same question, and what differs between them is how much of the real thing the agent can see. Distinct from [MCP servers](capability:mcp-servers), which is a protocol adapter on your own running service, and from [agent guidance](capability:agent-guidance), which is knowledge handed over as files rather than read from the thing itself.Tool governanceABAPTool governancecapabilityControlling what an agent may call, with which authorisations, and leaving an audit trail of what it did. The authorisation question that MCP exposure raises but does not answer.
Since then
arc-1 has been through 3 major lines since this was published: 0.8 (2026-05), 0.9 (2026-05), 1 (2026-07)

Who is behind it

Marian ZeisMarian ZeisPersonWrote this
In the atlas: maintains 35, contributes to 86, wrote 25
@marianfoo
author

In this series10

Before you read it

ApplicabilityNew majorsarc-1 has been through 3 major lines since this was published: 0.8 (2026-05), 0.9 (2026-05), 1 (2026-07).

This is a derived prompt to re-check the work, not a claim that the work is wrong. Exact stale statements are recorded separately after editorial review.

Properties

About this work

declared and crawled
Published
declared
Published on
declared

For agent-code-access

on the edge
Applies in
authored
abap

For tool-governance

on the edge
Applies in
authored
abap

More on this37

In topics
The atlas is now in betaTopic, edition 17 entries named

onedevatlas is open for browsing. Find tools for SAP development, compare their documented capabilities, ask your AI assistant, and join a flight during TechEd week.

Group by34 of 34 pieces
Piece, what it offersStill applies
Also explainingAgent access to your code12
AI-assisted SAP development with MCP
YouTube — SAP Developers playlists, Marian Zeis
nothing recorded
ABAP + MCP: Let AI Do Real Development in Your SAP System
SAP Community, Willian_Saez
nothing recorded
ABAP development tools for Visual Studio Code: Version 1.1 released
SAP Community, thomasalexander_ritter
nothing recorded
How to Connect Claude Code to ABAP with Zero-Config MCP
SAP Community, Nibedita
nothing recorded
Using Claude for SAP ABAP development on RFC-only / SAProuter systems (even ECC R/3)
SAP Community, enrico_andreoli
nothing recorded
The Future of ABAP is Here: VS Code ADT, Zero-Config MCP, and AI Co-pilots
SAP Community, lpodile
nothing recorded
Claude ported ABAP functions to new API
SAP Community, jakub_filak
nothing recorded
Claude Code via MCP: Poor man's Joule, or a practical tool?
SAP Community, k1000
nothing recorded
Building an Enterprise-Ready SAP AI Agent with Open Source
blog.zeis.de — Marian Zeis, Marian ZeisThe reasoningRunnable code
nothing recorded
Patterns for using LLMs in ABAP development
Heliconia Labs, Lars HvamThe reasoningA reference
nothing recorded
OData to outcomes—Build AI-enabled SAP Fiori apps using SAP Fiori elements
SAP TechEd — session catalogue, Stefan EngelhardtThe reasoning
nothing recorded
Spec first: The disciplined way to develop ABAP with agents
SAP TechEd — session catalogue, Jon FriesenThe reasoning
nothing recorded
Also byMarian Zeis24
AI-assisted SAP development with MCP
YouTube — SAP Developers playlists, Marian Zeis
nothing recorded
Building an Enterprise-Ready SAP AI Agent with Open Source
blog.zeis.de — Marian Zeis, Marian ZeisThe reasoningRunnable code
nothing recorded
Introducing open-rfc: Calling SAP RFC from Node.js Without the SDK
blog.zeis.de — Marian Zeis, Marian ZeisThe reasoningRunnable code
nothing recorded
ARC-1 1.0: One Deployment, Multiple SAP Systems
blog.zeis.de — Marian Zeis, Marian Zeis, part 10 of 10The reasoning
nothing recorded
UI5 Has Entered the Chat: Building Interactive MCP Apps for SAP
blog.zeis.de — Marian Zeis, Marian ZeisThe reasoningA recipeRunnable code
nothing recorded
Creating an ARC-1 BTP Diagram with Codex and a draw.io Skill
blog.zeis.de — Marian Zeis, Marian ZeisRunnable codeA recipe
nothing recorded
A Clearer View of Your SAP Integrations Under the New API Policy
blog.zeis.de — Marian Zeis, Marian ZeisThe reasoningRunnable code
nothing recorded
Before You Upgrade S/4HANA: Static UI5 Checks with MCP
blog.zeis.de — Marian Zeis, Marian Zeis, part 9 of 10Runnable codeThe reasoning
nothing recorded
ABAP Development Automation with ARC-1 and GitHub Workflows
blog.zeis.de — Marian Zeis, Marian Zeis, part 8 of 10Runnable codeA recipeThe reasoning
nothing recorded
From SEGW and Legacy UI5 to RAP with ARC-1
blog.zeis.de — Marian Zeis, Marian Zeis, part 7 of 10Runnable codeThe reasoning
New majors
ARC-1 with Joule Studio: Bringing Real ABAP System Context into Joule
blog.zeis.de — Marian Zeis, Marian Zeis, part 6 of 10The reasoningRunnable code
New majors
ARC-1 with Copilot Studio: SAP System Context Beyond Developers
blog.zeis.de — Marian Zeis, Marian Zeis, part 5 of 10The reasoningA recipeRunnable code
New majors
ARC-1 on SAP BTP: Secure ABAP Agentic Development Beyond the Laptop
blog.zeis.de — Marian Zeis, Marian Zeis, part 4 of 10The reasoningA recipe
New majors
ABAP and Agentic AI: The Hidden Problem in Real Projects
blog.zeis.de — Marian Zeis, Marian Zeis, part 2 of 10The reasoning
nothing recorded
How I Use AI for Development and Why Context Matters
blog.zeis.de — Marian Zeis, Marian Zeis, part 1 of 10The reasoning
nothing recorded
Finally: An MCP Server for ABAP
blog.zeis.de — Marian Zeis, Marian ZeisThe reasoningA reference
nothing recorded
Don't Wait for SAP: Unlocking MCP Servers in BAS Right Now
SAP Community, Marian ZeisThe reasoningRunnable code
nothing recorded
New tutorial for UI5 Middleware FE Mockserver
SAP Community, Marian Zeis
nothing recorded
Evaluating SAP’s new MCP servers: UI5, CAP, and Fiori tools in practice
SAP Community, Marian ZeisThe reasoningA recipeRunnable code
nothing recorded
The Complete Guide to Calling Actions in UI5 with Custom Code
SAP Community, Marian ZeisThe reasoningRunnable code
nothing recorded
Visualizing Your SAP Bill of Materials Using CAP, Fiori elements, and the UI5 Network Graph
SAP Community, Marian ZeisThe reasoningRunnable code
Core changed
Simple Table Maintenance in SAP Fiori Using UI5 Smart Controls
SAP Community, Marian ZeisThe reasoningRunnable code
nothing recorded
Using the UI5 Mockserver for Client-Specific Data and Testing
SAP Community, Marian Zeis
nothing recorded
Simplifying SAP BTP Authentication in Pipelines with SAP Passport and Playwright
SAP Community, Marian ZeisThe reasoningRunnable code
nothing recorded

Details

Graph7 edges
← POINTS HERE
POINTS OUT →
explainsarc-1artifact
explainsAgent access to your codecapability, core and community
explainsTool governancecapability, core and community
published onblog.zeis.de — Marian Zeispublishing source
Source
Type
blog
Host
blog.zeis.de
First seen
History2
  • explains → applies_to on capability:agent-code-access, capability:tool-governanceDoor scope derived from the artifacts this piece also explains, so a door page lists it only where it holds (docs/concepts/content-on-doors.md).
  • Entered the atlasDiscovered via blog.zeis.de — Marian Zeis.
For your agent
Ref
content:introducing-arc-1-a-secure-adt-mcp-server-for-enterprise-sap-development
JSON
/content/introducing-arc-1-a-secure-adt-mcp-server-for-enterprise-sap-development.json
MCP
Connecting an agent