// SCAN REPORT

ServiceNow MCP Server

58 tools. 38 can modify or destroy data without limits.

3 destructive tools with no built-in limits. Policy required.

Last updated:

38 can modify or destroy data
20 read-only
58 tools total

Community server · catalogue entry verified 03/07/2026

How to control ServiceNow MCP Server ↓

TOOL MAP

What ServiceNow MCP Server exposes to your agents

Read (20) Write / Execute (35) Destructive / Financial (3)

Running more than one server? Check your whole stack →

MOST DANGEROUS TOOLS
Critical Risk

The most dangerous ServiceNow MCP Server tools

Destructive · High delete_script_include This tool permanently removes a script include object from ServiceNow, which is a code artifact that likely supports workflows, automations, or integrations. Destructive · Critical delete_workflow Deletion of workflows is an irreversible operation that destroys data and cannot be undone. Destructive · High remove_group_members Removing group members alters access control by revoking group-based privileges from users. Execute · High commit_changeset Committing a changeset in ServiceNow finalizes and deploys a set of changes (scripts, configurations, updates) to the instance.

38 of ServiceNow MCP Server's 58 tools can modify, destroy, or commit something on every call — and an agent calls them with no built-in limits.

POLICY

How to control ServiceNow MCP Server

PolicyLayer is an MCP gateway — it sits between your AI agents and ServiceNow MCP Server, and nothing reaches the server without passing your rules. These are the rules we recommend:

Deny destructive operations
{
  "delete_script_include": {
    "deny_if": [
      {
        "conditions": [],
        "on_deny": "Blocked by default. Requires approval."
      }
    ]
  }
}

Destructive tools should never be available to autonomous agents without human approval.

Rate limit write operations
{
  "add_change_task": {
    "limits": [
      {
        "counter": "add_change_task_per_hour",
        "window": "hour",
        "max": 30,
        "scope": "grant"
      }
    ]
  }
}

Prevents bulk unintended modifications from agents caught in loops.

Cap read operations
{
  "get_article": {
    "limits": [
      {
        "counter": "get_article_per_minute",
        "window": "minute",
        "max": 60,
        "scope": "grant"
      }
    ]
  }
}

Controls API costs and prevents retry loops from exhausting upstream rate limits.

  1. Create a free account and register ServiceNow MCP Server — nothing to install.
  2. Add these rules — paste them, or build them visually. Tune the limits to your setup.
  3. Point your MCP client (Claude, Cursor, anything) at your gateway URL.
ENFORCE POLICY ON SERVICENOW →

Instant setup, no code required.

FULL CATALOGUE

All 58 ServiceNow MCP Server tools

DESTRUCTIVE 3 tools
Destructive delete_script_include Delete a script include from ServiceNow Destructive delete_workflow Delete a workflow from ServiceNow Destructive remove_group_members Remove members from a group in ServiceNow
EXECUTE 2 tools
Execute commit_changeset Commit a changeset Execute publish_changeset Publish a changeset
WRITE 33 tools
Write add_change_task Add a task to a change request Write add_comment Add a comment to an incident in ServiceNow Write add_file_to_changeset Add a file to a changeset Write add_group_members Add members to a group in ServiceNow Write approve_change Approve a change request Write create_article Create a new knowledge article in ServiceNow Write create_catalog_category Create a new service catalog category in ServiceNow Write create_catalog_item_variable Create a new variable (form field) for a catalog item Write create_category Create a new category in a knowledge base Write create_change_request Create a new change request in ServiceNow Write create_changeset Create a new changeset in ServiceNow Write create_group Create a new group in ServiceNow Write create_incident Create a new incident in ServiceNow Write create_knowledge_base Create a new knowledge base in ServiceNow Write create_script_include Create a new script include in ServiceNow Write create_user Create a new user in ServiceNow Write create_workflow Create a new workflow in ServiceNow Write move_catalog_items Move catalog items between categories in ServiceNow Write publish_article Publish a knowledge article in ServiceNow Write reject_change Reject a change request Write resolve_incident Resolve an incident in ServiceNow Write submit_change_for_approval Submit a change request for approval Write update_article Update an existing knowledge article in ServiceNow Write update_catalog_category Update an existing service catalog category in ServiceNow Write update_catalog_item Update a service catalog item Write update_catalog_item_variable Update an existing variable for a catalog item Write update_change_request Update an existing change request Write update_changeset Update an existing changeset Write update_group Update an existing group in ServiceNow Write update_incident Update an existing incident in ServiceNow Write update_script_include Update an existing script include in ServiceNow Write update_user Update an existing user in ServiceNow Write update_workflow Update an existing workflow in ServiceNow
READ 20 tools
Read get_article Get a specific knowledge article by ID Read get_catalog_item Get a specific service catalog item from ServiceNow Read get_change_request_details Get detailed information about a specific change request Read get_changeset_details Get detailed information about a specific changeset Read get_optimization_recommendations Get recommendations for optimizing the service catalog Read get_script_include Get a specific script include from ServiceNow Read get_user Get a specific user by ID, username, or email Read get_workflow Get a specific workflow from ServiceNow Read list_articles List knowledge articles with filtering options Read list_catalog_categories List service catalog categories from ServiceNow Read list_catalog_item_variables List all variables for a catalog item Read list_catalog_items List service catalog items from ServiceNow Read list_change_requests List change requests with filtering options Read list_changesets List changesets from ServiceNow with filtering options Read list_groups List groups with filtering options Read list_incidents List incidents from ServiceNow Read list_knowledge_bases List knowledge bases with filtering options Read list_script_includes List script includes from ServiceNow Read list_users List users with filtering options Read list_workflows List workflows from ServiceNow
EXPLORE

Related servers

Other MCP servers with similar tools — same risk classification, starter policies for each.

Yaver 1060 tools
admin
Nodebench 824 tools
admin
UnClick 813 tools
admin
Binance MCP Server 734 tools
admin
Pfsense 680 tools
admin
AdButler 622 tools
admin
Fortimanager 584 tools
admin
Crow 573 tools
admin
FAQ

Questions about ServiceNow MCP Server

Can an AI agent delete data through the ServiceNow MCP Server MCP server? +

Yes. The ServiceNow MCP Server server exposes 3 destructive tools including delete_script_include, delete_workflow, remove_group_members. These permanently remove resources with no undo. PolicyLayer blocks destructive tools by default so they never reach the upstream server.

How do I prevent bulk modifications through ServiceNow MCP Server? +

The ServiceNow MCP Server server has 33 write tools including add_change_task, add_comment, add_file_to_changeset. Set a rate limit in your policy -- for example, 10 calls per hour prevents an agent from making more than 10 modifications per hour. PolicyLayer enforces this at the gateway, before calls reach ServiceNow MCP Server.

How many tools does the ServiceNow MCP Server MCP server expose? +

58 tools across 3 categories: Destructive, Read, Write. 20 are read-only. 38 can modify, create, or delete data.

How do I enforce a policy on ServiceNow MCP Server? +

Register the ServiceNow MCP Server MCP server in PolicyLayer, apply the suggested rules above (adjust the limits to your use case), and point your AI client at the PolicyLayer proxy URL instead of the server directly. Your agents keep the same tools; PolicyLayer evaluates every call against policy before it executes. Nothing to install, live in minutes.

Enforce policy on every ServiceNow MCP Server tool call.

Deterministic rules across all 58 ServiceNow MCP Server tools. Per-identity grants. Full audit log. Live in minutes. Nothing to install.

ENFORCE POLICY ON SERVICENOW →

Instant setup, no code required.

58 ServiceNow MCP Server tools catalogued and risk-classified — across an index of 43,000+ MCP servers.

// GET IN TOUCH

Have a question or want to learn more? Send us a message.

Message sent.

We'll get back to you soon.