Critical-risk tools in ServiceNow-MCP
9 of the 495 tools in ServiceNow-MCP are classified as critical risk. This page profiles those tools specifically, with recommended policy actions and the attack patterns that target them.
Every operation listed below is an action PolicyLayer recommends controlling at the transport layer. Open any tool to see the full profile, risk score, and YAML policy snippet.
Tools at critical risk
-
cancel_requestDestructiveCancel an open service catalog request (requires WRITE_ENABLED=true)
-
delete_attachmentDestructiveDelete an attachment from a record (requires WRITE_ENABLED=true)
-
delete_system_propertyDestructiveDelete a system property by name. **[Write]**
-
delete_uib_pageDestructiveDelete a UI Builder page. **[Write]**
-
remove_user_from_groupDestructiveRemove a user from a group (requires WRITE_ENABLED=true)
-
restore_archived_recordDestructiveSchedule a one-time standard ServiceNow restore for one archive log entry. The archive row is removed after successful restore. **[Destructive]**
-
rollback_deploymentDestructiveRollback a deployment by reverting an update set. **[Write]**
-
set_cleanup_rule_activeDestructiveActivate or deactivate a Table Cleanup Rule. Activation requires confirmation; matching live records are permanently deleted. **[Destructive]**
-
set_destroy_rule_activeDestructiveActivate or deactivate a destroy rule. Activation requires confirmation; it permanently deletes eligible archived records. **[Destructive]**
Attacks that target this class
Critical-risk tools in any server share these documented attack patterns. Each links to the full case and the defensive policy.