// SCAN REPORT

Serac

432 tools. 279 can modify or destroy data without limits.

7 destructive tools with no built-in limits. Policy required.

Last updated:

279 can modify or destroy data
153 read-only
432 tools total

Community server · catalogue entry verified 07/07/2026

How to control Serac ↓

TOOL MAP

What Serac exposes to your agents

Read (153) Write / Execute (272) Destructive / Financial (7)

Running more than one server? Check your whole stack →

MOST DANGEROUS TOOLS
Critical Risk

The most dangerous Serac tools

Financial · Critical snow_create_purchase_order Creating a purchase order is a financial commitment — it binds the organization to pay a vendor for goods or services. Destructive · High snow_delete_attachment This tool irreversibly deletes data (file attachments) from ServiceNow records. Destructive · High snow_inbound_email_action The tool explicitly includes 'delete' as one of its operations, which is irreversible. Destructive · High snow_workflow_transition The tool supports delete actions on workflow transitions, which can irreversibly remove workflow logic in a production ServiceNow environment.

279 of Serac's 432 tools can modify, destroy, or commit something on every call — and an agent calls them with no built-in limits.

POLICY

How to control Serac

PolicyLayer is an MCP gateway — it sits between your AI agents and Serac, and nothing reaches the server without passing your rules. These are the rules we recommend:

Block financial tools by default
{
  "snow_create_purchase_order": {
    "deny_if": [
      {
        "conditions": [],
        "on_deny": "Requires human approval."
      }
    ]
  }
}

Financial tools should be explicitly enabled per use case, not open by default.

Deny destructive operations
{
  "snow_cleanup_test_artifacts": {
    "deny_if": [
      {
        "conditions": [],
        "on_deny": "Blocked by default. Requires approval."
      }
    ]
  }
}

Destructive tools should never be available to autonomous agents without human approval.

Rate limit write operations
{
  "snow_activate_pi_solution": {
    "limits": [
      {
        "counter": "snow_activate_pi_solution_per_hour",
        "window": "hour",
        "max": 30,
        "scope": "grant"
      }
    ]
  }
}

Prevents bulk unintended modifications from agents caught in loops.

Cap read operations
{
  "enterprise_tool_search": {
    "limits": [
      {
        "counter": "enterprise_tool_search_per_minute",
        "window": "minute",
        "max": 60,
        "scope": "grant"
      }
    ]
  }
}

Controls API costs and prevents retry loops from exhausting upstream rate limits.

  1. Create a free account and register Serac — nothing to install.
  2. Add these rules — paste them, or build them visually. Tune the limits to your setup.
  3. Point your MCP client (Claude, Cursor, anything) at your gateway URL.
ENFORCE POLICY ON SERAC →

Instant setup, no code required.

FULL CATALOGUE

All 432 Serac tools

FINANCIAL 1 tools
Financial snow_create_purchase_order Open a purchase order (proc_po) against a vendor, with optional requested_by user and total_cost. Captures the
DESTRUCTIVE 6 tools
Destructive snow_cleanup_test_artifacts Safely cleanup test artifacts from ServiceNow (dry-run enabled by default for safety) Destructive snow_delete_attachment Permanently delete a file attachment by its sys_id via the /api/now/attachment endpoint. Removes the file from Destructive snow_inbound_email_action Manage inbound email actions: list, get, create, update, delete, enable/disable Destructive snow_pa_indicator_manage Unified tool for ServiceNow Performance Analytics indicator definitions and their dimensional breakdowns. Wrap Destructive snow_rollback_deployment Rollback failed deployment by reverting to previous version or deleting artifact Destructive snow_workflow_transition ⚠️ LEGACY: Manage workflow transitions (deprecated - ServiceNow recommends Flow Designer). Actions: create, up
EXECUTE 54 tools
Execute enterprise_tool_execute Execute an enterprise tool by name. Use enterprise_tool_search first to discover available tools. Execute snow_auto_resolve_incident Attempts automated resolution of technical incidents based on known patterns and previous solutions. Includes Execute snow_automate_threat_response Execute a tiered incident response playbook (contain / isolate / eradicate / recover) for a known threat ID. E Execute snow_batch_request Send multiple REST calls in a single round-trip via /api/now/v1/batch. Each entry has method, url, and body — Execute snow_change_manage Unified change management (create, update_state, approve, create_task, schedule_cab) Execute snow_cicd_deploy Trigger CI/CD deployment pipeline Execute snow_collect_metric Sample a defined metric on-demand: runs the platform MetricBaseCollector against a metric_definition sys_id to Execute snow_confirm_script_execution ⚡ Confirms and schedules script after user approval (use after snow_execute_script with requireConfirmation=tr Execute snow_convert_es6_to_es5 Convert ES6+ JavaScript to ES5 for ServiceNow compatibility. Use this when debugging SyntaxErrors. Execute snow_convert_to_es5 Convert modern JavaScript (ES6+) to ES5 for ServiceNow Rhino engine Execute snow_create_mobile_action Creates a mobile action that users can trigger from the mobile app. Actions can navigate, execute scripts, or Execute snow_create_vulnerability_scan Creates vulnerability scanning configurations. Schedules scans, sets severity thresholds, and enables auto-rem Execute snow_custom_api Make an arbitrary REST call to any ServiceNow endpoint with the chosen method (GET/POST/PUT/PATCH/DELETE), pat Execute snow_elevate_role Execute a server-side operation that requires elevated privileges (security_admin scope — ACL modifications, h Execute snow_employee_offboarding Initiate employee offboarding workflow Execute snow_employee_onboarding Trigger employee onboarding workflow Execute snow_execute_atf_test Executes an ATF test or test suite and returns the results. Tests run asynchronously in ServiceNow using sys_a Execute snow_execute_script Execute server-side JavaScript on ServiceNow. Primary: synchronous execution via Scripted REST API (~1-3s). Fa Execute snow_execute_security_playbook Execute automated security response playbook with orchestrated actions Execute snow_execute_transform Execute transform map on import set Execute snow_fluent_build Build a local ServiceNow Fluent (SDK) project with now-sdk build. Compiles .now.ts Fluent sources + metadata X Execute snow_fluent_install Deploy a built ServiceNow Fluent (SDK) project to the connected instance with now-sdk install. Build first wit Execute snow_fluent_transform Convert ServiceNow app metadata XML into Fluent (SDK) TypeScript code with now-sdk transform. Use after snow_f Execute snow_github_deploy Deploy files directly from GitHub to ServiceNow — content never passes through LLM context. Three modes: 1. S Execute snow_graphql_query Run a GraphQL query against /api/now/graphql with optional variables. Use when you need to fetch nested data a Execute snow_handoff_to_agent Initiates handoff from Virtual Agent to a live agent when automated assistance is insufficient. Execute snow_hash_string Hash string using various algorithms Execute snow_install_application Install application from store Execute snow_install_spoke Install and manage IntegrationHub Spokes (Jira, Slack, Azure DevOps, etc.) Execute snow_manage_spoke_connection Manage IntegrationHub spoke connections: configure, test, and troubleshoot Execute snow_ml_predict Make ML prediction using trained model Execute snow_orchestrate_development Orchestrates complex development workflows with intelligent agent coordination, shared memory, and real-time p Execute snow_redeploy_script_endpoint Force-redeploy the Serac scripted REST executor endpoint (/api/snow_flow_exec/execute). Use when snow_execute_ Execute snow_report_manage Unified tool for ServiceNow report lifecycle beyond creation: list, get, run, schedule, share, and export. Wra Execute snow_rest_message_manage Universal REST Message management tool. CRUD operations for: • REST Messages (list, get, create, update, delet Execute snow_rest_message_test_suite Comprehensive testing suite for REST messages including authentication, endpoints, headers, and response valid Execute snow_retry_operation Retry failed operation with backoff Execute snow_run_compliance_scan Run compliance scans against security frameworks (SOX, GDPR, HIPAA, PCI-DSS) Execute snow_run_discovery Queue a CMDB discovery scan against a discovery schedule, optionally narrowed to a target IP/range and a speci Execute snow_scan_vulnerabilities Scan for security vulnerabilities Execute snow_scripted_rest_api Invoke a Scripted REST API resource at /api/<namespace>/<path> with chosen method (GET/POST/PUT/PATCH/DELETE) Execute snow_send_push_notification Sends a push notification to mobile devices. Can target specific users, groups, or all users. Execute snow_send_va_message Sends a message to Virtual Agent and gets the response. Simulates user interaction with the chatbot. Execute snow_sir_playbook_orchestrate Unified tool for orchestrating Security Incident Response (SIR) playbooks on sn_si_playbook and sn_si_playbook Execute snow_sleep Sleep for specified milliseconds Execute snow_source_control Unified tool for the ServiceNow Studio Source Control plugin. Bridges git-style operations against an applicat Execute snow_start_workflow ⚠️ LEGACY: Start a workflow on a record (deprecated - ServiceNow recommends Flow Designer). Workflows run asyn Execute snow_test_integration Test REST/SOAP integrations and external connections with validation Execute snow_test_mid_connectivity Test MID Server connectivity to external endpoints and diagnose network issues Execute snow_train_pi_solution 🎯 Train native ServiceNow Predictive Intelligence solution. Starts ML training INSIDE ServiceNow (requires PI Execute snow_train_va_nlu Trigger training of a Virtual Agent NLU model by model_id via /api/now/v1/va/models/{id}/train. Training runs Execute snow_transform_data Transform data using field mappings Execute snow_trigger_scheduled_job ⚠️ UNRELIABLE: Attempts to trigger a scheduled job via sys_trigger, but CANNOT guarantee execution. The job ru Execute snow_widget_test Executes comprehensive widget testing with multiple data scenarios. Validates client/server scripts, API calls
WRITE 218 tools
Write snow_activate_pi_solution ✅ Activate trained ServiceNow Predictive Intelligence solution for production use. Enables predictions on reco Write snow_add_comment Add comment/work note to record Write snow_add_dashboard_widget Attach a widget to an existing dashboard (sys_dashboard) with a widget type and optional title and position. W Write snow_add_form_field Add a field (element) to a form section by section sys_id, with optional field type and ordering position. Wri Write snow_add_list_column Add a column (field) to the default list layout of a table by writing to sys_ui_list_element, with optional po Write snow_add_schedule_entry Add a span (cmn_schedule_span) to a schedule that either includes or excludes a window of time. Use to model h Write snow_agile_backlog_groom Backlog grooming operations: reprioritize stories, bulk-update story points, move stories between epics, and a Write snow_agile_epic_manage Manage Agile epics: create/update epics, link stories, view progress breakdown. Works with ServiceNow rm_epic Write snow_agile_release_manage Manage Agile releases: create/update releases, link sprints and epics, check release readiness with story comp Write snow_agile_sprint_manage Manage Agile sprints: create new sprints, start/close sprints, update sprint details. Works with ServiceNow Ag Write snow_agile_story_manage Create and update user stories in ServiceNow Agile 2.0. Assign story points, link to sprints/epics, manage acc Write snow_agile_team_manage Manage Scrum teams: create teams, add/remove members with roles (Scrum Master, Product Owner, Developer), list Write snow_apply_template Apply template to create record Write snow_approval_chain_manage Unified tool for ServiceNow approval chains across the sysapproval_approver, sysapproval_group, and sysapprova Write snow_approve_procurement Mark a procurement request (proc_request) as approved, with optional comments. Use after the request has been Write snow_approve_reject Approve or reject approval request Write snow_assign_task Assign task to user or group with workload balancing and skill matching Write snow_attach_file Attach files to ServiceNow records with validation and content type detection Write snow_backup_instance Request a snapshot backup of the current ServiceNow instance under a chosen name, optionally including attachm Write snow_bulk_update Apply the same field updates to every record on a table matching an encoded query, up to a row limit (default Write snow_cache_set Store a string value in the in-memory tool cache under a key, with a TTL in seconds (default 3600). Read back Write snow_calculate_sla_duration Calculate SLA duration with schedule Write snow_callback_handler Create callback handler for async operations Write snow_catalog_item_manager Create, update, or manage service catalog items Write snow_catalog_manage Unified tool for ServiceNow Service Catalog structure: order guides, record producers, categories, and the ite Write snow_clone_instance_artifact Clones artifacts directly between ServiceNow instances (dev→test→prod). Handles authentication, dependency res Write snow_compliance_manage Unified tool for ServiceNow compliance lifecycle beyond rule authoring and scanning: list_exceptions, exceptio Write snow_configure_connection Configure ServiceNow connection alias Write snow_configure_mid_server Configure MID Server settings for on-premise integrations and Discovery Write snow_configure_mobile_app Configure ServiceNow mobile app Write snow_configure_offline_sync Configure offline synchronization settings for mobile applications. Controls which data is available offline. Write snow_configure_uib_data_broker Update data broker configuration including queries, caching, and refresh settings Write snow_create_access_control Create an Access Control List (ACL) entry on a table: grants a role permission to perform an operation (read/w Write snow_create_acl Create Access Control List rule Write snow_create_acl_role Link a role (sys_user_role) to an existing ACL by creating a sys_security_acl_role record. After linking, anyo Write snow_create_alert Create system alert for monitoring Write snow_create_alert_rule Create alert rules for automated monitoring and notifications Write snow_create_application Create a scoped application (sys_app), optionally bootstrapping an Update Set and switching the OAuth service Write snow_create_asset Create hardware/software asset Write snow_create_atf_test Create Automated Test Framework (ATF) test for automated testing Write snow_create_atf_test_step Adds a test step to an existing ATF test. Steps define the actions and assertions for testing using the sys_at Write snow_create_atf_test_suite Creates an ATF test suite to group and run multiple tests together using sys_atf_test_suite table. Write snow_create_audit_rule Configure audit tracking on a table: which events (insert/update/delete) and which fields to log, retention pe Write snow_create_business_rule Create server-side business rule with full configuration options (ES5 only for scripts!) Write snow_create_catalog_client_script Creates client scripts for catalog items to add custom JavaScript behavior to forms. Write snow_create_catalog_item Publish a Service Catalog item (sc_cat_item) with name, short/long descriptions, category, and price. The item Write snow_create_catalog_ui_policy Creates comprehensive UI policies for catalog items with conditions and actions to control form behavior dynam Write snow_create_catalog_variable Add an input variable to a catalog item (item_option_new) with name, question text, and input type (single/mul Write snow_create_choice Create choice list value for field Write snow_create_ci Create Configuration Item in CMDB Write snow_create_ci_relationship Create relationship between Configuration Items Write snow_create_client_script Create client-side script for form with type and field targeting Write snow_create_complete_workspace Create Complete UX Workspace - Executes all steps automatically: Experience (Builder Toolkit) → App Config → P Write snow_create_compliance_rule Creates compliance rules for regulatory frameworks (SOX, GDPR, HIPAA). Defines validation, remediation, and se Write snow_create_configurable_agent_workspace Create Configurable Agent Workspace using UX App architecture (sys_ux_app_route, sys_ux_screen_type). Creates Write snow_create_connection_alias Create connection alias for IntegrationHub/Flow Designer to reference external credentials Write snow_create_credential_alias Create credential alias for secure storage of API keys, passwords, and OAuth tokens Write snow_create_customer_account Create customer account for tracking relationships and entitlements Write snow_create_customer_case Open a Customer Service Management (CSM) case on sn_customerservice_case for a given account, with optional co Write snow_create_dashboard Create a new sys_dashboard with a title, optional description, column count (default 2), and active flag. Widg Write snow_create_data_policy Create a Data Policy (sys_data_policy2) on a table — server-side equivalent of UI Policies, enforced for API/i Write snow_create_data_policy_rule Add a field rule to an existing Data Policy: mark the field as mandatory and/or read-only when the parent poli Write snow_create_devops_change Create automated DevOps change request for deployments Write snow_create_devops_pipeline Create DevOps pipeline for CI/CD automation Write snow_create_email_config Create email server configuration for SMTP, POP3, or IMAP Write snow_create_email_template Create email notification template with HTML/text content and optional SMS alternate Write snow_create_entitlement Create service entitlement for customer Write snow_create_escalation_rule Creates escalation rules for time-based actions. Defines escalation timing, conditions, and automated response Write snow_create_event Create system event for event management Write snow_create_event_rule Creates event-driven automation rules. Triggers scripts based on system events with conditional logic. Write snow_create_field Add a new column to a table by writing to sys_dictionary: column name, label, internal_type (string, integer, Write snow_create_field_map Create field mapping within transform map for data transformation Write snow_create_flow_action Create custom IntegrationHub action for Flow Designer Write snow_create_form_layout Create a form layout (sys_ui_form) for a table and view, with layout type standard / related_list / split. Con Write snow_create_form_section Create a form section (sys_ui_section) on a table/view with an optional caption and ordering position. Section Write snow_create_hr_case Open an HR Service Delivery case on sn_hr_core_case for a given HR service, with subject, opened_for (employee Write snow_create_hr_task Create HR task for case fulfillment Write snow_create_import_set Create import set for data import Write snow_create_knowledge_base Creates a new knowledge base for organizing articles by topic, department, or audience. Write snow_create_list_layout Create a complete list layout with multiple columns for any ServiceNow table Write snow_create_list_view Create a named list view (sys_ui_list) on a table with a comma-joined field list and an optional default filte Write snow_create_menu Create a top-level application menu (sys_app_module) with title, owning application, and display order. Contai Write snow_create_menu_item Add a navigation item (sys_app_module) under a parent menu, opening a list / new record / detail / home view o Write snow_create_metric Define a metric (metric_definition) over a table — count rows, or sum/avg/min/max a numeric field. Stored defi Write snow_create_mobile_layout Creates a custom mobile layout for forms and lists in the mobile app. Write snow_create_notification Configure an event-driven email notification (sysevent_email_action): fires when records on a table match a co Write snow_create_notification_template Create reusable notification template with multi-channel support Write snow_create_oauth_profile Create OAuth 2.0 profile for external API authentication (Jira, Azure, Salesforce, etc.) Write snow_create_pa_dashboard Create a Performance Analytics dashboard with widgets (pa_dashboards table). For Service Portal / classic dash Write snow_create_pi_solution 🤖 Create native ServiceNow Predictive Intelligence solution definition. Builds ML models that run INSIDE Serv Write snow_create_processor Create script processor (ES5 only!) Write snow_create_project Create a PPM project (pm_project) with name, description, planned start/end dates, and a project manager (sys_ Write snow_create_project_task Add a task to an existing PPM project (pm_project_task) with short description, optional assignee, and planned Write snow_create_queue Define an assignment queue (sys_queue) — a saved filter on a table, optionally tied to an assignment group. Wo Write snow_create_related_list Surface a related table under a parent table Write snow_create_report Create a sys_report against a table with a chart type (bar / pie / line / list) and optional encoded-query fil Write snow_create_rest_message Create REST message for external API integration Write snow_create_saved_filter Create a saved filter for any ServiceNow table that appears in the filter dropdown Write snow_create_schedule Define a schedule (cmn_schedule) — weekly/monthly/custom recurrence and a time zone. Used downstream by SLAs, Write snow_create_script_include Create reusable Script Include with client-callable support Write snow_create_security_incident Create security incident with automated threat correlation and priority assignment Write snow_create_security_policy Creates security policies for access control and data protection. Configures enforcement levels, scope, and ru Write snow_create_sla Create Service Level Agreement Write snow_create_sla_definition Creates Service Level Agreement definitions. Sets duration targets, business schedules, and breach conditions. Write snow_create_solution_package Bundle multiple related artifacts into a single deployment package, tracked by a freshly created Update Set sw Write snow_create_sp_page Create a Service Portal page (sp_page) with a stable id, display title, and public flag (anonymous access). Pa Write snow_create_sp_widget Create a Service Portal widget (sp_widget) bundling AngularJS template, client_script, server_script, and CSS Write snow_create_table Create a new table (sys_db_object) with a name and label. Optionally extends a parent table (super_class) for Write snow_create_template Save a record template (sys_template) — a named, reusable set of pre-filled field values for a given table tha Write snow_create_transform_map Create transform map for import sets Write snow_create_ui_action Create UI Action (button, context menu, form link) with client/server scripts Write snow_create_ui_page Create custom UI Page with Jelly/HTML template and processing script Write snow_create_ui_policy Create UI Policy for form field control (visibility, mandatory, readonly) Write snow_create_ui_policy_action Create a UI policy action to control field behavior (visible/mandatory/readonly) when a UI policy condition is Write snow_create_uib_client_script Create client-side JavaScript for UI Builder pages Write snow_create_uib_client_state Create client state for UI Builder pages via Builder Toolkit API. Client state is managed as state_properties Write snow_create_uib_data_broker Create data broker to connect UI Builder pages to ServiceNow data sources Write snow_create_uib_event Create custom events for UI Builder component communication Write snow_create_uib_page_registry Configure URL routing and access control for UI Builder pages Write snow_create_ux_app_config STEP 2: Create UX App Configuration Record (sys_ux_app_config) - Contains workspace settings and links to the Write snow_create_ux_app_route STEP 5: Create Route Record (sys_ux_app_route) - Defines the URL slug that leads to the page. Write snow_create_ux_experience Create UX Experience via Builder Toolkit API - The top-level container for a workspace. Returns experienceID u Write snow_create_ux_page_macroponent STEP 3: Create Page Macroponent Record (sys_ux_macroponent) - Defines the actual page content that will be dis Write snow_create_ux_page_registry STEP 4: Create Page Registry Record (sys_ux_page_registry) - Registers the page for use within the workspace c Write snow_create_va_topic Create Virtual Agent conversation topic Write snow_create_va_topic_block Creates a conversation block within a Virtual Agent topic. Blocks define conversation steps and responses. Write snow_create_variable Add a question variable to a catalog item: name, question text, input type (string, multi_line_text, select_bo Write snow_create_variable_set Create a reusable variable set (item_option_new_set) — a grouping of catalog variables that can be attached to Write snow_create_web_service Create SOAP web service integration from WSDL definition Write snow_create_workflow ⚠️ LEGACY: Create workflow definition (deprecated - ServiceNow recommends Flow Designer). Use for backwards co Write snow_create_workflow_activity ⚠️ LEGACY: Create workflow activity (deprecated - ServiceNow recommends Flow Designer). Configures activity ty Write snow_create_workspace Create complete Agent Workspace with experience, config, routes, and lists via Builder Toolkit API Write snow_csm_communication_manage Unified tool for ServiceNow CSM customer interactions. Wraps the interaction table (emails, chats, calls), int Write snow_csm_contract_manage Wraps ast_contract (asset contract) + service_entitlement + service_offering. CSM (com.sn_customerservice) doe Write snow_dashboard_manage Unified tool for ServiceNow dashboard lifecycle beyond creation: list, get, share, embed, tab_create, tab_list Write snow_define_kpi Define Key Performance Indicators for monitoring Write snow_disable_business_rule Flip a business rule Write snow_edit_by_sysid Updates specific fields of an artifact using sys_id. Provides direct field-level modifications with validation Write snow_email_notification_manage Manage email notifications (sysevent_email_action): list, get, create, update, delete, enable/disable. Support Write snow_email_template_manage Unified tool for ServiceNow email template lifecycle beyond creation: list, preview, send_test, import, export Write snow_emergency_broadcast Send emergency broadcast notification to all users or specific groups Write snow_encode_base64 Encode a UTF-8 string as Base64. Local operation — no ServiceNow call. Handy for embedding binary-ish data in Write snow_ensure_active_update_set Ensure Update Set is active and optionally set as current for user Write snow_error_handler Register a server-side error handler (sys_error_handler) bound to a specific error type. The handler_script ru Write snow_escalate_permissions Escalate user permissions with approval workflow and time-based access controls Write snow_event_handler Register a script action (sysevent_script_action) that runs when a named platform event fires. Script must be Write snow_exception_handler Handle exceptions with logging Write snow_field_mapper Project a source object into a new shape using a target-field → source-field mapping. Useful for shaping data Write snow_file_upload Upload a base64-encoded file as an attachment on a specific record (table + sys_id), with file name and MIME t Write snow_fluent_init Initialize a ServiceNow Fluent (SDK) project in a local directory with now-sdk init. Scaffold a new scoped app Write snow_format_date Format a date string in one of four shapes: ISO date (YYYY-MM-DD), ISO datetime, ISO time, or human-readable r Write snow_format_number Format a number as a decimal, currency (with code prefix), or percent, with a configurable decimal precision ( Write snow_format_text Format text with various transformations Write snow_fsm_parts_manage Unified tool for ServiceNow Field Service Management part requirements. Wraps the sm_part_requirement table in Write snow_fsm_work_order_manage Unified tool for ServiceNow Field Service Management work orders. Wraps the wm_order, wm_task and wm_order_his Write snow_generate_docs Generate documentation for ServiceNow artifacts Write snow_generate_guid Generate a unique identifier in one of three shapes: ServiceNow sys_id (32-char hex, no dashes), uppercase GUI Write snow_generate_records Generate multiple test records Write snow_grc_audit_manage Unified tool for ServiceNow GRC Audit Management: engagements, audits, findings, and evidence. Wraps the sn_au Write snow_grc_issue_manage Unified tool for ServiceNow GRC compliance issues and exceptions beyond control-side authoring. Wraps the sn_c Write snow_grc_policy_manage Unified tool for ServiceNow GRC policy authoring and linkage. Wraps the sn_compliance_policy, sn_compliance_po Write snow_grc_risk_manage Unified tool for ServiceNow GRC Advanced Risk register lifecycle: registering risks, scoring them, attaching t Write snow_grc_vendor_risk_manage Unified tool for ServiceNow GRC Vendor Risk Management: vendor inventory, assessment kick-off, and linkage bac Write snow_hr_lifecycle_event Unified tool for ServiceNow HR Lifecycle Events (LEM): manage lifecycle-event cases (sn_hr_le_case), their act Write snow_hr_profile_manage Unified tool for ServiceNow HR employee profiles (sn_hr_core_profile). Searches join through profile.user refe Write snow_impersonate_user Generate a ServiceNow impersonation deep-link for ACL / role debugging. Verifies the caller has the Write snow_kms_manage Unified tool for the ServiceNow Key Management Framework. Covers KMF modules (sys_kmf_module), cryptographic m Write snow_knowledge_article_manage Unified knowledge article management (create, update, get, publish, retire, search) Write snow_manage_flow Complete Flow Designer lifecycle: create flows/subflows, add/update triggers and actions, list, get details, u Write snow_manage_group_membership Manage group memberships: add/remove users, list members Write snow_manage_mid_capabilities Manage MID Server capabilities for Discovery, Orchestration, and integrations Write snow_manage_oauth_tokens Manage OAuth tokens: view status, refresh tokens, troubleshoot authentication issues Write snow_manage_software_license Manage software licenses with compliance tracking and optimization Write snow_merge_objects Merge an array of objects left-to-right via spread (later keys win). Note: this is a shallow merge despite the Write snow_notification_preferences Manage user notification preferences and routing rules Write snow_oncall_manage Unified tool for ServiceNow On-Call Scheduling. Operates over cmn_rota (rotations), cmn_rota_member (members i Write snow_order_catalog_item Orders a catalog item programmatically, creating a request (RITM) with specified variable values. Write snow_pa_create Unified PA creation (indicator, breakdown, threshold, widget, visualization, scheduled_report) Write snow_pa_operate Unified PA operations (collect_data, export_report, generate_insights, get_scores) Write snow_property_bulk Bulk system property operations (get/set multiple) Write snow_property_io System property I/O operations (import, export, history) Write snow_property_manage Unified tool for system property management (get, set, delete, validate) Write snow_property_manager Enhanced property management with get, set, and validation in one tool Write snow_push_artifact Push locally edited artifact files back to ServiceNow with validation Write snow_random_string Generate a cryptographically-secure random string of a given length (default 16) from an alphanumeric, alpha-o Write snow_rate_limit Apply rate limiting to operations Write snow_recommendation_engine Generate recommendations based on user behavior Write snow_reconcile_ci Reconcile CI data from multiple sources Write snow_request_approval Create a sysapproval_approver record asking a specific user to approve a record on a source table. Sets state Write snow_retire_asset Mark an asset as retired (install_status=7) on alm_asset, optionally recording a retirement date and disposal Write snow_role_group_manage Unified role and group management (create_role, assign_role, create_group) Write snow_schedule_job Create scheduled job with cron expression or repeat interval Write snow_schedule_notification Schedule future notification delivery with advanced scheduling options Write snow_schedule_report_delivery Schedule automated report delivery via email Write snow_scheduled_job_manage Manage scheduled jobs: list, get details, create, update, delete, enable/disable, run now, get history Write snow_send_email Send email notification via sys_email table (supports username, email, or sys_id) Write snow_send_notification Send an ad-hoc email, SMS, or push notification to a list of user sys_ids with subject and message body. For s Write snow_send_push Push a notification (title + body) to one or more registered mobile device IDs via /api/now/v1/push/notificati Write snow_sentiment_analysis Score the sentiment of a free-text string as positive/neutral/negative with a confidence value. Useful for tri Write snow_sir_evidence_manage Unified tool for Security Incident Response (SIR) evidence and forensic artifact chain-of-custody on sn_si_evi Write snow_sir_incident_manage Unified tool for ServiceNow Security Incident Response (SIR) incident lifecycle on sn_si_incident and sn_si_ta Write snow_sir_indicator_manage Unified tool for the Indicator of Compromise (IOC) lifecycle on sn_ti_observable, sn_ti_indicator, and the SIR Write snow_sla_manage Unified tool for ServiceNow SLA and OLA lifecycle beyond view-only status checks: list, update, breach_respons Write snow_sp_page_manage Unified tool for ServiceNow Service Portal page lifecycle beyond creation: list, update, delete, clone, add_wi Write snow_sp_theme_manage Unified tool for ServiceNow Service Portal theming. Operates over sp_theme (theme definitions), sp_brand (per- Write snow_switch_application_scope Switch the current application scope for the OAuth service account by writing to sys_user_preference (name=sys Write snow_trace_execution Set up execution tracing configuration. Creates a trace session that scripts can write to. Use snow_get_script Write snow_track_asset_lifecycle Track complete asset lifecycle from procurement to disposal Write snow_track_deployment Track application deployment through DevOps pipeline Write snow_transfer_asset Transfer asset to user/location Write snow_uib_component_manage Unified UIB component management (create, clone) Write snow_uib_page_manage Unified UIB page management (create via Builder Toolkit, delete, add_element, remove_element) Write snow_update_ci Update Configuration Item attributes Write snow_update_set_manage Unified tool for Update Set management. Actions: create, switch, complete, ignore, export, preview, add_artifa Write snow_update_ux_app_config_landing_page Update App Configuration with Landing Page Route - Sets the default landing page for the workspace. Write snow_upload_attachment Attach a base64-encoded file to a specific record (table_name + table_sys_id) with file name and optional MIME Write snow_user_manage Unified user management (create, deactivate) Write snow_workflow_manage ⚠️ LEGACY: Manage legacy workflows (deprecated - ServiceNow recommends Flow Designer). Use for backwards compa
READ 153 tools
Read enterprise_tool_search Search through 76+ enterprise integration tools (Jira, Azure DevOps, Confluence, GitHub, GitLab, Process Minin Read snow_aggregate_metrics Aggregate over a table via the /api/now/stats endpoint: COUNT, SUM, AVG, MIN, or MAX on a field, optionally gr Read snow_agile_backlog_query Query the product backlog: list stories sorted by priority/rank, filter by epic, theme, state, or assignee. Sh Read snow_agile_capacity_plan Capacity planning: compare team availability against sprint commitment. Shows member allocation, average veloc Read snow_agile_retrospective Generate sprint retrospective data: planned vs completed story points, defect rate, velocity trend, carry-over Read snow_agile_sprint_board Get a sprint board view: stories and tasks grouped by state columns (Draft, Ready, Work In Progress, Testing, Read snow_agile_sprint_burndown Generate burndown and burnup chart data for a sprint. Shows ideal vs actual progress, remaining story points p Read snow_agile_sprint_query Query sprints with burndown data, filter by team/state/date range. Optionally includes story breakdown per spr Read snow_agile_standup_report Generate a daily standup report: what each team member worked on recently, what they are working on now, and a Read snow_agile_velocity_report Generate velocity report: story points committed vs completed per sprint for a team. Shows trends across multi Read snow_ai_classify Classify a piece of text into one of a caller-supplied list of categories, with a confidence score. Use for ro Read snow_analyze_data_quality Analyze data quality including completeness, consistency, and accuracy metrics Read snow_analyze_form Analyze everything that affects a ServiceNow form for a given table: active UI policies, client scripts, data Read snow_analyze_incident Analyzes specific incidents with pattern recognition, similar incident matching, and automated resolution sugg Read snow_analyze_query Analyze and optimize ServiceNow queries for performance Read snow_analyze_requirements Analyzes development requirements to identify dependencies, suggest reusable components, and create implementa Read snow_analyze_threat_intelligence Correlate an indicator of compromise (IOC) — IP, domain, file hash, URL, or email — against threat intel feeds Read snow_analyze_uib_page_performance Analyze UI Builder page performance and get optimization recommendations Read snow_anomaly_detection Detect outliers in a numeric series using a standard-deviation threshold (default 2.0). Returns the points who Read snow_asset_compliance_report Generate comprehensive asset compliance reports for auditing Read snow_asset_discovery Discover and normalize assets from multiple sources Read snow_audit_trail_analysis Analyze the audit trail (sys_audit): aggregates events by user, table, and action, surfaces top activities, an Read snow_auth_diagnostics Performs comprehensive authentication and permission diagnostics. Tests OAuth tokens, API access, table permis Read snow_autocomplete Suggest values for an autocomplete UX: fetches the top N values of a field from a table where the field LIKE t Read snow_blast_radius_apps List all applications/scopes in the instance with configuration summary counts. 📋 USE THIS TO: - Get an over Read snow_blast_radius_artifact_dependencies Forward dependency analysis for a single artifact: what does it read, write, and depend on? Use to understand Read snow_blast_radius_dependents Find every artifact across the instance that uses, calls, or depends on a given artifact. Answers Read snow_blast_radius_field_references Find every artifact that references a specific table.field across the instance. Use to audit references before Read snow_blast_radius_sys_properties Search sys_property records for plain-string references to an artifact name. Closes a recurring blind spot of Read snow_blast_radius_table_configs Find every configuration running on a specific table. Use to inventory artifacts scoped to a table, understand Read snow_blast_radius_update_sets Search pending and committed update sets for references to a given artifact. Closes the Read snow_cache_get Look up a value from the in-memory tool cache by key. Returns null with cached=false on miss. Pairs with snow_ Read snow_catalog_item_search Search service catalog items with filtering options Read snow_change_query Unified change query (get, search, assess_risk) Read snow_check_health Check ServiceNow instance health Read snow_ci_health_check Check CI health and compliance status Read snow_clone_instance Request a sub-prod instance clone from source to target (e.g. prod → test). Optional data_preservers list keep Read snow_cmdb_search Searches Configuration Management Database (CMDB) for configuration items with relationship mapping Read snow_code_search Search for a term across every ServiceNow table that stores scripts (business rules, script includes, client s Read snow_data_convert Unified data conversion (csv_to_json, json_to_csv, json_to_xml, xml_to_json) Read snow_data_export Export table data to CSV/XML/JSON format. Always includes sys_id. Returns records array with full data. Read snow_data_mapper Advanced data mapping with transformations Read snow_date_filter Build an encoded-query fragment that filters a date field by either a relative window (today/yesterday/this-or Read snow_debug_widget_fetch Debug widget data fetching and server communication issues Read snow_decode_base64 Decode a Base64-encoded string back to UTF-8 text. Local operation — no ServiceNow call. Pair with snow_encode Read snow_decode_url URL-decode a percent-encoded string (decodeURIComponent). Local operation — no ServiceNow call. Pair with snow Read snow_deployment_debug Provides detailed debugging information including authentication status, permissions, active sessions, and rec Read snow_deployment_status Retrieves comprehensive deployment status including active deployments, recent history, success rates, and per Read snow_detect_code_patterns Detect code patterns, anti-patterns, and best practices in ServiceNow scripts Read snow_dev_test_connection Developer-only tool for testing ServiceNow connections, OAuth credentials, and table/column accessibility agai Read snow_diff_objects Compare two objects and get differences Read snow_discover_all_workspaces Discover all workspaces (UX Experiences via Builder Toolkit, Agent Workspaces, UI Builder pages) with comprehe Read snow_discover_atf_tests Discovers ATF tests in the instance with filtering and search capabilities. Read snow_discover_automation_jobs Discovers automation jobs (scheduled scripts, executions) in the instance. Read snow_discover_catalogs Discovers available service catalogs and their categories in the ServiceNow instance. Read snow_discover_data_sources Discover available data sources for integration including import sets and REST endpoints Read snow_discover_events Discovers system events registered in the instance. Read snow_discover_integration_endpoints Discover existing integration endpoints (REST, SOAP, LDAP, EMAIL) Read snow_discover_knowledge_bases Discovers available knowledge bases and their categories in the ServiceNow instance. Read snow_discover_mobile_configs Discovers mobile application configurations including layouts, actions, and offline sync settings. Read snow_discover_platform_tables Discover platform development tables by category (ui, script, policy, action, security, system). Optimized for Read snow_discover_schedules Discovers schedules (business hours, maintenance windows) in the instance. Read snow_discover_security_frameworks Discovers security and compliance frameworks available in the instance for policy creation and auditing. Read snow_discover_security_policies Lists existing security policies and rules with filtering by category and active status. Read snow_discover_table_fields Discover table schema with fields, types, relationships, and metadata Read snow_discover_va_topics Discovers available Virtual Agent topics and their configurations. Read snow_duplicate_detection Check whether a candidate record would duplicate existing rows on a table by matching on the given fields. Ret Read snow_encode_url URL-encode a string for safe use in query parameters (encodeURIComponent). Local operation — no ServiceNow cal Read snow_export_to_xml Export records from a table as XML, filtered by an encoded query and optionally a specific view. Returns the r Read snow_field_filter Build an encoded-query fragment matching one field against a list of values, OR-joined. Match type is exact (= Read snow_file_download Download an attachment Read snow_fluent_dependencies Download a Fluent (SDK) project Read snow_fluent_download Download the application Read snow_fluent_explain Read the ServiceNow SDK Read snow_fluent_status Inspect a local ServiceNow Fluent (SDK) project: scope/app identity, SDK version pin and availability, keys.ts Read snow_fsm_dispatch_manage Unified tool for ServiceNow Field Service Management dispatch lookups. Modern ServiceNow FSM does not store di Read snow_fuzzy_search Perform fuzzy search across tables with relevance scoring. Returns sys_id + name + relevance_score for each ma Read snow_get_atf_results Retrieves ATF test execution results including pass/fail status, error details, and execution time from sys_at Read snow_get_attachments List all attachments on a single record (table_name + table_sys_id). Returns each attachment Read snow_get_by_sysid Get any ServiceNow record by sys_id with optional field selection Read snow_get_catalog_item_details Gets detailed information about a catalog item including variables, pricing, and availability. Read snow_get_ci_details Retrieve Configuration Item details including relationships and history Read snow_get_ci_history Get Configuration Item change history Read snow_get_ci_impact Calculate impact analysis for CI outage Read snow_get_ci_relationships Get all relationships for a Configuration Item Read snow_get_current_scope Get the current application scope and active Update Set. 🔍 USE THIS TO: - Verify which scope you Read snow_get_customer_history Retrieve complete customer interaction history Read snow_get_devops_insights Retrieve DevOps metrics and insights Read snow_get_email_logs Retrieve sent/received email logs from sys_email table for monitoring and debugging Read snow_get_event_correlation Get event correlation results showing how events are grouped into alerts Read snow_get_event_queue Get event queue status and pending events Read snow_get_flow_execution_logs Retrieve Flow Designer execution logs for monitoring flow runs, debugging failures, and analyzing performance Read snow_get_inbound_http_logs Retrieve inbound REST API transaction logs for monitoring API usage and debugging incoming requests Read snow_get_instance_info Get ServiceNow instance information Read snow_get_journal_entries Get journal entries for record Read snow_get_logs Retrieve ServiceNow platform logs with filtering by level, source, and time range. Supports four log tables: Read snow_get_mobile_analytics Retrieves mobile application usage analytics including active users, sessions, and feature usage. Read snow_get_outbound_http_logs Retrieve outbound HTTP request logs for monitoring REST/SOAP integrations and external API calls Read snow_get_pending_approvals Get pending approvals for user Read snow_get_queue_items List up to N records (default 50) currently in a queue by sys_id. Reads the queue Read snow_get_scheduled_job_logs Retrieve scheduled job execution history and logs for monitoring automation, identifying failures, and trackin Read snow_get_script_output Retrieve output from previously executed script using execution ID Read snow_get_sla_status List all task_sla rows attached to a task record (incident, request, etc.) by record sys_id. Returns display v Read snow_get_slow_queries Retrieve slow database query logs for identifying performance issues, optimizing GlideRecord queries, and impr Read snow_get_user_roles Get all roles assigned to user Read snow_get_va_conversation Retrieves Virtual Agent conversation history and context for a specific session. Read snow_github_tree Browse GitHub repository structure via enterprise proxy. Returns metadata only (paths, types, sizes) — no file Read snow_impact_analysis Perform impact analysis to identify affected services when a CI changes Read snow_inspect_mutations Inspect what mutations (INSERT/UPDATE/DELETE) occurred on the ServiceNow instance in a time window. Read snow_job_status Unified read-only visibility into ServiceNow background work. Spans sys_trigger (scheduled-job triggers), sys_ Read snow_jwt_decode Decode a JWT into its header and payload (base64-URL → JSON). Does NOT verify the signature — useful for inspe Read snow_list_applications List all scoped applications (sys_app) in the ServiceNow instance. Use to find available scopes before switchi Read snow_list_pi_solutions 📋 List all ServiceNow Predictive Intelligence solutions with status and metrics. Read snow_list_supported_artifacts List all ServiceNow artifact types supported by local sync Read snow_monitor_metrics Monitor system metrics and performance indicators Read snow_monitor_pi_training 📊 Monitor ServiceNow Predictive Intelligence training progress. Shows status, metrics, and completion estimat Read snow_notification_analytics Analyze notification delivery rates, engagement, and effectiveness Read snow_operational_metrics Provides operational metrics and analytics including incident trends, resolution times, and performance indica Read snow_optimize_licenses Analyze license usage and provide optimization recommendations Read snow_pa_discover Unified PA discovery (indicators, report_fields, reporting_tables) Read snow_paginate Calculate pagination parameters Read snow_parse_json Parse a JSON string and validate it: returns the parsed object plus the top-level key count, or an error messa Read snow_pattern_analysis Analyzes patterns across incidents, requests, and problems to identify trends, common issues, and improvement Read snow_predictive_analysis Provides predictive analysis for incident volumes, system failures, and resource issues based on historical pa Read snow_property_query Query system properties (list, search, categories) Read snow_query_filter Build ServiceNow encoded query filter Read snow_query_table Query any ServiceNow table with filtering, pagination, and field selection. Always returns sys_id for each rec Read snow_sanitize_input Escape a user-supplied string against html, sql, or script-injection contexts. Note: prefer parameterized quer Read snow_search_artifacts Search ServiceNow development artifacts (widgets, pages, scripts, flows, UI actions, client scripts). For data Read snow_search_catalog Searches service catalog for items, categories, or catalogs. Returns available items for ordering. Read snow_search_cmdb Search the CMDB for Configuration Items with various filters Read snow_security_dashboard Generate real-time security operations dashboard with key metrics Read snow_security_risk_assessment Perform comprehensive security risk assessment analyzing access controls, vulnerabilities, and security postur Read snow_session_context Dump the current ServiceNow session context for the authenticated user: sys_id, username, email, roles (with i Read snow_sync_status Get status of locally synced artifacts including changes and validation Read snow_table_schema_discovery Discover comprehensive table schema including fields, relationships, ACLs, and business rules Read snow_test_acl Simulate whether a user would be granted a given operation (read/write/create/delete) on a table or specific r Read snow_test_connection Smoke-test the current ServiceNow connection: authenticates and fetches one sys_user row. Returns the resolved Read snow_test_rest_connection Test REST API connection with timeout and response validation Read snow_timestamp Get current timestamp in various formats Read snow_uib_discover Unified UI Builder discovery (pages, components, routes, page_usage) Read snow_update_set_query Query Update Sets (get current or list multiple) Read snow_url_doctor Decode or construct ServiceNow URLs. Mode Read snow_validate_deployment Validate artifact before deployment (ES5, coherence, dependencies, security) Read snow_validate_field Look up a field Read snow_validate_live_connection Validates ServiceNow connection status, authentication tokens, and user permissions. Returns detailed diagnost Read snow_validate_record Validate record against business rules Read snow_validate_sysid Validates sys_id existence and consistency across tables. Maintains artifact tracking for deployment integrity Read snow_validate_widget_coherence Validates widget coherence by analyzing server/client/HTML component communication. Checks data bindings, acti Read snow_validate_workspace_configuration Validate workspace configuration for completeness, best practices, and potential issues across all workspace t Read snow_velocity_tracking Track team velocity and delivery metrics Read snow_vulnerability_risk_assessment Assess vulnerability risk with automated CVSS scoring and remediation planning Read snow_workflow_analyze Analyze workflow executions for performance and errors
EXPLORE

Related servers

Other MCP servers with similar tools — same risk classification, starter policies for each.

Yaver 775 tools
paymentsadminautomation
Binance MCP Server 734 tools
paymentsadminautomation
GoHighLevel MCP Server 566 tools
paymentsadminautomation
GoCreative Agent API 546 tools
paymentsadminautomation
Ruflo 486 tools
paymentsadminautomation
Claude Flow 454 tools
paymentsadminautomation
ServiceTitan MCP Server 454 tools
paymentsadminautomation
CloudStack MCP Server 442 tools
paymentsadminautomation
FAQ

Questions about Serac

Can an AI agent move money through the Serac MCP server? +

Yes. The Serac server exposes 1 financial tools including snow_create_purchase_order. Without a policy, an autonomous agent can call these with no spend caps, no rate limits, and no approval flow. PolicyLayer lets you block financial tools by default, require human approval, or set per-tool rate limits — enforced on every call.

Can an AI agent delete data through the Serac MCP server? +

Yes. The Serac server exposes 6 destructive tools including snow_cleanup_test_artifacts, snow_delete_attachment, snow_inbound_email_action. These permanently remove resources with no undo. PolicyLayer blocks destructive tools by default so they never reach the upstream server.

How do I prevent bulk modifications through Serac? +

The Serac server has 218 write tools including snow_activate_pi_solution, snow_add_comment, snow_add_dashboard_widget. Set a rate limit in your policy -- for example, 10 calls per hour prevents an agent from making more than 10 modifications per hour. PolicyLayer enforces this at the gateway, before calls reach Serac.

How many tools does the Serac MCP server expose? +

432 tools across 5 categories: Destructive, Execute, Financial, Read, Write. 153 are read-only. 279 can modify, create, or delete data.

How do I enforce a policy on Serac? +

Register the Serac MCP server in PolicyLayer, apply the suggested rules above (adjust the limits to your use case), and point your AI client at the PolicyLayer proxy URL instead of the server directly. Your agents keep the same tools; PolicyLayer evaluates every call against policy before it executes. Nothing to install, live in minutes.

Enforce policy on every Serac tool call.

Deterministic rules across all 432 Serac tools. Per-identity grants. Full audit log. Live in minutes. Nothing to install.

ENFORCE POLICY ON SERAC →

Instant setup, no code required.

432 Serac tools catalogued and risk-classified — across an index of 43,000+ MCP servers.

// WHERE THIS COMES FROM

These policies come from Serac's registry record.

The record behind this page: verified identity, auth posture, risk grade, every tool classified, recommended policy — re-checked continuously.

Teams ship this data inside their own products. See what a licence covers →

// GET IN TOUCH

Have a question or want to learn more? Send us a message.

Message sent.

We'll get back to you soon.