create_mobile_applet

What create_mobile_applet does on NowAIKit — ServiceNow AI Toolkit

AI agents use create_mobile_applet to create or update resources in NowAIKit — ServiceNow AI Toolkit, usually the action step of a workflow, after the agent has gathered context. Every call changes real data in your NowAIKit — ServiceNow AI Toolkit environment.

Why create_mobile_applet is rated Medium

This tool creates new application components (mobile applets), which is a reversible Write operation. While the severity is marked high due to the potential impact on application functionality and user experience if misused (e.g., creating malicious applets), it remains in the Write category rather than Execute because it is fundamentally a creation operation rather than arbitrary code execution.

From the tool's definition Tool name 'create_mobile_applet' and description explicitly states '[Write]'. The action creates a new mobile applet within a mobile app, which is a persistent data creation that modifies the application structure.

The rule that runs create_mobile_applet safely

PolicyLayer is an MCP gateway: it sits between your AI agents and NowAIKit — ServiceNow AI Toolkit, and checks every tool call against a rule you set before the call runs. Nothing changes on the server itself. For create_mobile_applet, this is the rule to start with:

{
  "version": "1",
  "default": "deny",
  "tools": {
    "create_mobile_applet": {
      "limits": [
        {
          "counter": "create_mobile_applet_rate",
          "window": "minute",
          "max": 30,
          "scope": "grant"
        }
      ]
    }
  }
}

Questions about create_mobile_applet