# create_business_rule

Create a new business rule (requires SCRIPTING_ENABLED=true). ServiceNow supports ES2021 async/await in scripts.

Agent View of the PolicyLayer registry record for `create_business_rule`. HTML page: https://policylayer.com/tools/nowaikit-servicenow-ai-toolkit/create-business-rule

## Facts

- Tool: `create_business_rule`
- Server: NowAIKit — ServiceNow AI Toolkit (`nowaikit`) — https://policylayer.com/tools/nowaikit-servicenow-ai-toolkit.md
- Install: `npx -y nowaikit`
- Homepage: https://github.com/aartiq/nowaikit
- Risk category: Execute (High risk)
- Registry record: grade F, identity verified
- Server rate-limited: no
- Parameters: 0
- Recommended policy verdict: Rate-limited

## Example call (MCP tools/call, JSON-RPC 2.0)

```json
{
  "jsonrpc": "2.0",
  "id": 1,
  "method": "tools/call",
  "params": {
    "name": "create_business_rule",
    "arguments": {}
  }
}
```

## Why create_business_rule is rated High

Business rules in ServiceNow execute server-side JavaScript code that runs automatically on database operations. Creating a business rule means deploying arbitrary executable script code into the platform, which can intercept and manipulate any record operations, call external APIs, escalate privileges, or cause widespread data changes.

From the tool's own definition: "'Create a new business rule' with 'SCRIPTING_ENABLED=true' and 'ServiceNow supports ES2021 async/await in scripts'"

## Use case

AI agents invoke create_business_rule to trigger actions in NowAIKit — ServiceNow AI Toolkit. What it does depends on the arguments the agent supplies, and its effects often reach beyond the immediate call: builds kicked off, notifications sent, workflows started.

## Recommended policy (PolicyLayer)

Verdict: **Rate-limited**. Enforced by the PolicyLayer MCP gateway (https://policylayer.com/mcp-gateway) before a call reaches NowAIKit — ServiceNow AI Toolkit:

```json
{
  "version": "1",
  "default": "deny",
  "tools": {
    "create_business_rule": {
      "limits": [
        {
          "counter": "create_business_rule_rate",
          "window": "minute",
          "max": 10,
          "scope": "grant"
        }
      ]
    }
  }
}
```

## Other tools on NowAIKit — ServiceNow AI Toolkit (409)

- `cmdb_reconcile` — Destructive — https://policylayer.com/tools/nowaikit-servicenow-ai-toolkit/cmdb-reconcile.md
- `delete_attachment` — Destructive — https://policylayer.com/tools/nowaikit-servicenow-ai-toolkit/delete-attachment.md
- `delete_record` — Destructive — https://policylayer.com/tools/nowaikit-servicenow-ai-toolkit/delete-record.md
- `delete_system_property` — Destructive — https://policylayer.com/tools/nowaikit-servicenow-ai-toolkit/delete-system-property.md
- `delete_uib_page` — Destructive — https://policylayer.com/tools/nowaikit-servicenow-ai-toolkit/delete-uib-page.md
- `remove_user_from_group` — Destructive — https://policylayer.com/tools/nowaikit-servicenow-ai-toolkit/remove-user-from-group.md
- `rollback_changes` — Destructive — https://policylayer.com/tools/nowaikit-servicenow-ai-toolkit/rollback-changes.md
- `rollback_deployment` — Destructive — https://policylayer.com/tools/nowaikit-servicenow-ai-toolkit/rollback-deployment.md
- `visualize_aggregate` — Destructive — https://policylayer.com/tools/nowaikit-servicenow-ai-toolkit/visualize-aggregate.md
- `batch_request` — Execute — https://policylayer.com/tools/nowaikit-servicenow-ai-toolkit/batch-request.md
- `categorize_incident` — Execute — https://policylayer.com/tools/nowaikit-servicenow-ai-toolkit/categorize-incident.md
- `commit_changeset` — Execute — https://policylayer.com/tools/nowaikit-servicenow-ai-toolkit/commit-changeset.md
- `create_flow_action` — Execute — https://policylayer.com/tools/nowaikit-servicenow-ai-toolkit/create-flow-action.md
- `create_scheduled_job` — Execute — https://policylayer.com/tools/nowaikit-servicenow-ai-toolkit/create-scheduled-job.md
- `execute_background_script` — Execute — https://policylayer.com/tools/nowaikit-servicenow-ai-toolkit/execute-background-script.md
- `execute_playbook` — Execute — https://policylayer.com/tools/nowaikit-servicenow-ai-toolkit/execute-playbook.md
- `execute_script` — Execute — https://policylayer.com/tools/nowaikit-servicenow-ai-toolkit/execute-script.md
- `fire_event` — Execute — https://policylayer.com/tools/nowaikit-servicenow-ai-toolkit/fire-event.md
- `fluent_build` — Execute — https://policylayer.com/tools/nowaikit-servicenow-ai-toolkit/fluent-build.md
- `fluent_explain` — Execute — https://policylayer.com/tools/nowaikit-servicenow-ai-toolkit/fluent-explain.md
- `fluent_init` — Execute — https://policylayer.com/tools/nowaikit-servicenow-ai-toolkit/fluent-init.md
- `fluent_validate` — Execute — https://policylayer.com/tools/nowaikit-servicenow-ai-toolkit/fluent-validate.md
- `ml_detect_anomalies` — Execute — https://policylayer.com/tools/nowaikit-servicenow-ai-toolkit/ml-detect-anomalies.md
- `ml_train_anomaly_detector` — Execute — https://policylayer.com/tools/nowaikit-servicenow-ai-toolkit/ml-train-anomaly-detector.md
- `ml_train_change_risk` — Execute — https://policylayer.com/tools/nowaikit-servicenow-ai-toolkit/ml-train-change-risk.md
- `ml_train_incident_classifier` — Execute — https://policylayer.com/tools/nowaikit-servicenow-ai-toolkit/ml-train-incident-classifier.md
- `publish_changeset` — Execute — https://policylayer.com/tools/nowaikit-servicenow-ai-toolkit/publish-changeset.md
- `run_aggregate_query` — Execute — https://policylayer.com/tools/nowaikit-servicenow-ai-toolkit/run-aggregate-query.md
- `run_atf_suite` — Execute — https://policylayer.com/tools/nowaikit-servicenow-ai-toolkit/run-atf-suite.md
- `run_atf_test` — Execute — https://policylayer.com/tools/nowaikit-servicenow-ai-toolkit/run-atf-test.md
- …and 379 more: https://policylayer.com/tools/nowaikit-servicenow-ai-toolkit.md

## For agents

This record is a snapshot. Live verdicts and the full registry:

- Check every server in your MCP config at once: `npx -y policylayer stack`
- Vet a server before you add it: install the mcp-precheck skill — `npx skills add https://policylayer.com` (skill text: https://policylayer.com/skill.md)
- Query the registry over MCP: endpoint `https://api.policylayer.com/mcp` — tools `check_mcp_server`, `check_mcp_stack`, `check_tool`, `search_registry`, `get_change_events`

---

Source: the PolicyLayer MCP registry — one continuously verified record per MCP server. Full record: https://policylayer.com/registry?q=nowaikit-servicenow-ai-toolkit · API: https://policylayer.com/registry/api · Policy library: https://policylayer.com/policies/nowaikit-servicenow-ai-toolkit