High-risk tools in ServiceNow-MCP

High severity ServiceNow-MCP MCP Server 28 of 412 tools

28 of the 412 tools in ServiceNow-MCP are classified as high risk. This page profiles those tools specifically, with recommended policy actions and the attack patterns that target them.

Every operation listed below is an action PolicyLayer recommends controlling at the transport layer. Open any tool to see the full profile, risk score, and YAML policy snippet.

Tools at high risk

commit_changeset Execute

Commit an update set (requires SCRIPTING_ENABLED=true)
create_business_rule Execute

Create a new business rule (requires SCRIPTING_ENABLED=true). ServiceNow supports ES2021 async/await in scripts.
create_client_script Execute

Create a new client script (onLoad, onChange, onSubmit, onCellEdit) (requires SCRIPTING_ENABLED=true)
create_flow_action Execute

Create a custom Flow Designer action. **[Scripting]**
create_scheduled_job Execute

Create a new scheduled script execution job (requires WRITE_ENABLED=true)
create_script_include Execute

Create a new script include (requires SCRIPTING_ENABLED=true)
execute_background_script Execute

Execute a background script on the instance (server-side JavaScript). **[Scripting]**
fire_event Execute

Fire a custom ServiceNow event for a specific record (requires WRITE_ENABLED=true)
ml_detect_anomalies Execute

Run anomaly detection on operational metrics (alert volume, incident trends, etc.)
ml_train_anomaly_detector Execute

Trigger training of an anomaly detection model for a specific table/field. **[Write]**
ml_train_change_risk Execute

Trigger training of the change risk prediction ML model. **[Write]**
ml_train_incident_classifier Execute

Trigger training of the incident classification ML solution. **[Write]**
publish_changeset Execute

Publish/export an update set to XML for deployment (requires SCRIPTING_ENABLED=true)
run_aggregate_query Execute

Run a grouped aggregate (COUNT, SUM, AVG) query on any table (latest release: /api/now/stats/{table})
run_atf_suite Execute

Execute an ATF test suite (requires ATF_ENABLED=true)
run_atf_test Execute

Execute a single ATF test (requires ATF_ENABLED=true)
run_discovery_scan Execute

[Write] Trigger a ServiceNow Discovery scan for network/infrastructure
run_security_playbook Execute

Execute a security response playbook against an incident. **[Write]**
run_transform_map Execute

Execute a Transform Map on an Import Set to load data (requires WRITE_ENABLED=true)
scan_vulnerabilities Execute

Trigger a vulnerability scan for specified CIs or groups. **[Write]**
switch_update_set Execute

Switch the active Update Set context to a specified Update Set. **[Scripting]**
test_flow Execute

Execute a flow in test mode with sample inputs. **[Write]**
trigger_agentic_playbook Execute

Invoke an Agentic Playbook — context-aware AI agents that complete tasks autonomously
trigger_flow Execute

Trigger a Flow Designer flow with optional input parameters (requires WRITE_ENABLED=true)
trigger_scheduled_job Execute

Immediately execute a scheduled job on-demand (requires WRITE_ENABLED=true)
update_business_rule Execute

Update a business rule (requires SCRIPTING_ENABLED=true)
update_script_include Execute

Update a script include (requires SCRIPTING_ENABLED=true)
update_ui_action Execute

Update an existing UI Action (requires SCRIPTING_ENABLED=true)

Attacks that target this class

High-risk tools in any server share these documented attack patterns. Each links to the full case and the defensive policy.

High-risk tools in ServiceNow-MCP

Tools at high risk

Attacks that target this class

More on ServiceNow-MCP

Enforce policy on every ServiceNow-MCP tool call.