sapctl

One command for S/4HANA, BTP, Datasphere, Joule, Ariba, Concur, SuccessFactors, Integration Suite, SAC, Signavio, LeanIX, Cloud ALM. Agent-native output. Air-gap capable. Signed binaries ready for the EU CRA.

Install Quickstart View on GitHub

Why sapctl

One CLI, all SAP

Single binary, single auth model, single command tree across the SAP portfolio. Stop maintaining glue code per migration.

Agent-native

Every command is exposed as an MCP tool over sapctl mcp serve. No SDK porting required for AI agents.

CRA / DORA evidence by default

Every run emits a hash-chained, ed25519-signed audit event. Recipes (SOX, DORA, AI Act, CRA) generate auditor-ready bundles.

Air-gap ready

sapctl bundle export produces in-toto-signed tarballs verifiable on disconnected machines.

Independent open-source project. Not affiliated with SAP SE.