// SCAN REPORT

Snow

88 tools. 54 can modify or destroy data without limits.

4 destructive tools with no built-in limits. Policy required.

Last updated: 12 Jun 2026

54 can modify or destroy data

34 read-only

88 tools total

Community server · catalogue entry verified 12/06/2026

How to control Snow ↓

TOOL MAP

What Snow exposes to your agents

Read (34) Write / Execute (50) Destructive / Financial (4)

Running more than one server? Check your whole stack →

MOST DANGEROUS TOOLS

Critical Risk

The most dangerous Snow tools

Destructive · High delete_script_include Deleting a Script Include is a destructive action that cannot be easily undone. Destructive · High delete_story_dependency This tool performs an irreversible deletion operation that cannot be easily undone. Destructive · High delete_workflow Deleting a workflow definition is an irreversible action that removes automation logic from the ServiceNow system. Destructive · High remove_group_members Removing users from a group revokes their access permissions and group memberships.

54 of Snow's 88 tools can modify, destroy, or commit something on every call — and an agent calls them with no built-in limits.

POLICY

How to control Snow

PolicyLayer is an MCP gateway — it sits between your AI agents and Snow, and nothing reaches the server without passing your rules. These are the rules we recommend:

Deny destructive operations

{
  "delete_script_include": {
    "deny_if": [
      {
        "conditions": [],
        "on_deny": "Blocked by default. Requires approval."
      }
    ]
  }
}

Destructive tools should never be available to autonomous agents without human approval.

Rate limit write operations

{
  "add_change_task": {
    "limits": [
      {
        "counter": "add_change_task_per_hour",
        "window": "hour",
        "max": 30,
        "scope": "grant"
      }
    ]
  }
}

Prevents bulk unintended modifications from agents caught in loops.

Cap read operations

{
  "get_aggregate_data": {
    "limits": [
      {
        "counter": "get_aggregate_data_per_minute",
        "window": "minute",
        "max": 60,
        "scope": "grant"
      }
    ]
  }
}

Controls API costs and prevents retry loops from exhausting upstream rate limits.

Create a free account and register Snow — nothing to install.
Add these rules — paste them, or build them visually. Tune the limits to your setup.
Point your MCP client (Claude, Cursor, anything) at your gateway URL.

ENFORCE POLICY ON SNOW →

Free to start. No card required.

FULL CATALOGUE

All 88 Snow tools

DESTRUCTIVE 4 tools

Destructive delete_script_include Delete a Script Include from ServiceNow. Destructive delete_story_dependency Deletes an existing dependency relationship between user stories. Destructive delete_workflow Delete a workflow definition from ServiceNow. Destructive remove_group_members Remove multiple users from a group.

EXECUTE 1 tools

Execute publish_changeset Publish a completed changeset so it can be retrieved from the remote instance.

WRITE 49 tools

Write add_change_task Adds a new task to an existing change request. Write add_comment_to_incident Adds a customer-visible comment (updates the 'comments' field) to an existing incident. Write add_comment_to_request Adds a customer-visible comment to a request ticket (REQ). Write add_file_to_changeset Add (track) a configuration record inside the specified changeset. Write add_group_members Add multiple users to a group. Write add_work_notes_to_incident Adds internal work notes (updates the 'work_notes' field) to an existing incident. Write approve_change Approves a change request. This finds the current user's approval record Write attach_file_to_record Attaches a file to any record in ServiceNow. The file content must be Base64 encoded. Write commit_changeset Mark a changeset as complete (state = 'complete'). Write create_article Create a new knowledge article. Write create_catalog Creates a new, top-level service catalog. Write create_catalog_category Creates a new category within a specified Service Catalog. Write create_catalog_item_variable Creates a new variable (question/field) on a service catalog item's form. Write create_category Create a new category inside a Knowledge Base. Write create_change_request Creates a new Normal, Standard, or Emergency change request. Write create_changeset Create a new local Update Set (changeset). Write create_epic Creates a new epic in the Agile Development 2.0 module. Write create_group Create a new group. Write create_incident Creates a new incident. Credentials must be provided in the params object. Write create_knowledge_base Creates a new Knowledge Base. Write create_project Creates a new project. Write create_request_ticket Creates a new, simple service request ticket (sc_request). Write create_script_include Create a new Script Include in ServiceNow. Write create_scrum_task Creates a new scrum task and associates it with a parent story. Write create_story Creates a new user story in the Agile Development 2.0 module. Write create_story_dependency Creates a dependency relationship between two user stories. Write create_ui_policy Creates a new UI Policy. Write create_ui_policy_action Creates a UI Policy Action that controls the state of a catalog variable. Write create_user Creates a new user record. Write create_workflow Create a new workflow definition. Write move_catalog_items Moves one or more service catalog items to a new category. Write publish_article Publish a knowledge article (sets workflow_state to 'published'). Write reject_change Rejects a change request. This finds the current user's approval record Write resolve_incident Resolves an incident by setting its state to 'Resolved' and adding resolution notes. Write submit_change_for_approval Submits a change request for approval by setting its state to 'Assess'. Write update_article Update an existing knowledge article. Write update_catalog_category Updates an existing service catalog category's title or description. Write update_catalog_item_variable Updates an existing variable on a service catalog item's form. Write update_change_request Updates one or more fields on an existing change request. Write update_changeset Update an existing changeset (name or description). Write update_epic Updates an existing epic in the Agile Development 2.0 module. Write update_group Update an existing group. Write update_incident Updates an existing incident with new information like work notes, state, or priority. Write update_project Updates an existing project in ServiceNow. Write update_script_include Update an existing Script Include in ServiceNow. Write update_scrum_task Updates an existing scrum task in ServiceNow. Write update_story Updates an existing user story in the Agile Development 2.0 module. Write update_user Update an existing user record. Write update_workflow Update an existing workflow definition.

READ 34 tools

EXPLORE

Related servers

Other MCP servers with similar tools — same risk classification, starter policies for each.

FAQ

Questions about Snow

Can an AI agent delete data through the Snow MCP server? +

Yes. The Snow server exposes 4 destructive tools including delete_script_include, delete_story_dependency, delete_workflow. These permanently remove resources with no undo. PolicyLayer blocks destructive tools by default so they never reach the upstream server.

How do I prevent bulk modifications through Snow? +

The Snow server has 49 write tools including add_change_task, add_comment_to_incident, add_comment_to_request. Set a rate limit in your policy -- for example, 10 calls per hour prevents an agent from making more than 10 modifications per hour. PolicyLayer enforces this at the gateway, before calls reach Snow.

How many tools does the Snow MCP server expose? +

88 tools across 3 categories: Destructive, Read, Write. 34 are read-only. 54 can modify, create, or delete data.

How do I enforce a policy on Snow? +

Register the Snow MCP server in PolicyLayer, apply the suggested rules above (adjust the limits to your use case), and point your AI client at the PolicyLayer proxy URL instead of the server directly. Your agents keep the same tools; PolicyLayer evaluates every call against policy before it executes. Nothing to install, live in minutes.

Enforce policy on every Snow tool call.

Deterministic rules across all 88 Snow tools. Per-identity grants. Full audit log. Live in minutes. Nothing to install.

ENFORCE POLICY ON SNOW →

Free to start. No card required.

88 Snow tools catalogued and risk-classified — across an index of 43,000+ MCP servers.