BrowseSAPUI5 and OpenUI5
Everything in UI5
3 of 323
Type
Domain
Origin
Signals: 2
Content
More
Group by: Capability
EntryBySignalsLast activity
Generative UIUnmapped
UI5con_2026_MCPAppsUI5con_2026_MCPAppsFive runnable MCP servers whose tools return a prebuilt UI beside their text result, from plain HTML through UI5 Web Components and UI Integration Cards to a UI5 linter workflow and an ARC-1 transport review.independent, ui5
Five MCP servers whose tools return a prebuilt UI
Neither the package manifest nor the repository tree declares a licence.
UI5 Has Entered the Chat: Building Interactive MCP Apps for SAPUI5 Has Entered the Chat: Building Interactive MCP Apps for SAPMCP Apps let an MCP tool point at a ui:// resource that a compatible host renders in a sandboxed iframe, and the post walks through the five samples of UI5con_2026_MCPApps, built with Mike Zaschka for UI5con, from a plain HTML time tool through UI5 Web Components and UI Integration Cards to UI5 lint findings from @ui5/mcp-server and an ARC-1 transport review. In the samples the model selects the tool and does not generate the interface, the prebuilt kind of generative UI, and the subject is the server side of MCP servers: register the resource, link it from the tool's _meta.ui.resourceUri, return text content as a fallback beside structuredContent, call callServerTool() only for tools of the server that owns the app, and send a message to the host when another server such as ARC-1 has to act. It stops at the host, whose support differs by client and whose iframe sandbox is not a complete security model, and Joule support for MCP Apps could not be verified at the time of writing.published 2026-07-13
Vulnerability scanningUnmapped
audit-summaryaudit-summaryA command line that summarises npm audit results by root dependency, with severity counts, current against latest versions and thresholds that exit with code 1.independent, general
Groups npm audit findings by root dependency, with failing thresholds
It audits through npm: a project that resolves its dependencies with another package manager, or has no `package.json`, has nothing for it to run. What it reports is what `npm audit` knows, so a vulnerability outside the npm advisory data is not in its table.