
Research
/Security News
OpenAPI React Query Codegen Compromised in Mini Shai-Hulud npm Supply Chain Attack
Ten malicious OpenAPI React Query Codegen versions were published to npm in the Mini Shai-Hulud attack, all with valid provenance.
@ui5/webcomponents-mcp-server
Advanced tools
Model Context Protocol server for UI5 Web Components development assistance
The UI5 Web Components MCP Server improves the developer experience when working with agentic AI and the UI5 Web Components framework.
See Getting Started on how to jumpstart your development and grow as you go with UI5 Web Components.
git clone https://github.com/UI5/webcomponents-mcp-server.git
cd webcomponents-mcp-server
npm install
npm run build
npm install -g .
Add to your MCP client config (e.g., .vscode/mcp.json for GitHub Copilot):
{
"servers": {
"ui5-webc": {
"type": "stdio",
"command": "ui5-webc-mcp"
}
}
}
Then ask your AI assistant:
get_component_apiFetch API docs for any UI5 Web Component (properties, slots, events, methods).
Searches across @ui5/webcomponents, @ui5/webcomponents-fiori, and @ui5/webcomponents-ai packages.
get_guidelinesGet integration guides for React, Angular, or native JavaScript.
Includes installation, imports, and usage examples.
list_docsList all available UI5 Web Components documentation with summaries.
get_docFetch full content of specific documentation files.
npm run build # Build TypeScript
npm run dev # Run locally
npm run test # Run tests
npm run inspector # Debug with MCP inspector
npm run prepare:docs # Fetch latest docs from GitHub
This project is open to feature requests/suggestions, bug reports etc. via GitHub issues. Contribution and feedback are encouraged and always welcome. For more information about how to contribute, the project structure, as well as additional contribution information, see our Contribution Guidelines.
If you find any bug that may be a security problem, please follow our instructions at in our security policy on how to report it. Please do not create GitHub issues for security-related doubts or problems.
We as members, contributors, and leaders pledge to make participation in our community a harassment-free experience for everyone. By participating in this project, you agree to abide by its Code of Conduct at all times.
Copyright 2025 SAP SE or an SAP affiliate company and ui5-web-components-mcp-server contributors. Please see our LICENSE for copyright and license information. Detailed information including third-party components and their licensing/copyright information is available via the REUSE tool.
FAQs
Model Context Protocol server for UI5 Web Components development assistance
The npm package @ui5/webcomponents-mcp-server receives a total of 229 weekly downloads. As such, @ui5/webcomponents-mcp-server popularity was classified as not popular.
We found that @ui5/webcomponents-mcp-server demonstrated a healthy version release cadence and project activity because the last version was released less than a year ago. It has 2 open source maintainers collaborating on the project.

Research
/Security News
Ten malicious OpenAPI React Query Codegen versions were published to npm in the Mini Shai-Hulud attack, all with valid provenance.

Security News
Socket joins more than 100 technology, cybersecurity, and financial organizations calling for a global surge in cyber defense.

Product
Enterprise security teams can now detect malware, credential theft, suspicious network activity, and risky updates across Microsoft Edge extensions.