create_update_set

What create_update_set does on NowAIKit — ServiceNow AI Toolkit

AI agents use create_update_set to create or update resources in NowAIKit — ServiceNow AI Toolkit, usually the action step of a workflow, after the agent has gathered context. Every call changes real data in your NowAIKit — ServiceNow AI Toolkit environment.

Why create_update_set is rated Medium

This tool creates new data structures (Update Sets) in ServiceNow, which is a reversible modification action. While Update Sets themselves are organizational/tracking constructs rather than direct data records, creating them modifies the system's configuration state. This falls under Write rather than Execute because the tool's primary action is object creation, not arbitrary code execution or command invocation.

From the tool's definition The tool name is 'create_update_set' and the description states it will 'Create a new Update Set and optionally switch to it.' In ServiceNow, Update Sets are configuration change tracking mechanisms used to capture and deploy customizations.

The rule that runs create_update_set safely

PolicyLayer is an MCP gateway: it sits between your AI agents and NowAIKit — ServiceNow AI Toolkit, and checks every tool call against a rule you set before the call runs. Nothing changes on the server itself. For create_update_set, this is the rule to start with:

{
  "version": "1",
  "default": "deny",
  "tools": {
    "create_update_set": {
      "limits": [
        {
          "counter": "create_update_set_rate",
          "window": "minute",
          "max": 30,
          "scope": "grant"
        }
      ]
    }
  }
}

Questions about create_update_set