create_workspace

What create_workspace does on NowAIKit — ServiceNow AI Toolkit

AI agents use create_workspace to create or update resources in NowAIKit — ServiceNow AI Toolkit, usually the action step of a workflow, after the agent has gathered context. Every call changes real data in your NowAIKit — ServiceNow AI Toolkit environment.

Why create_workspace is rated Medium

This tool creates a new workspace resource within ServiceNow, which is a Write operation as it produces new data/configuration that can be subsequently modified or removed. The severity is medium because workspace creation could consume resources and affect system organization, but the impact is scoped to configuration rather than critical data or financial operations.

From the tool's definition Tool name is 'create_workspace' and description states 'Create a new configurable agent workspace.' The verb 'Create' and action of establishing a new workspace resource indicates data creation that is reversible (workspaces can be deleted).

The rule that runs create_workspace safely

PolicyLayer is an MCP gateway: it sits between your AI agents and NowAIKit — ServiceNow AI Toolkit, and checks every tool call against a rule you set before the call runs. Nothing changes on the server itself. For create_workspace, this is the rule to start with:

{
  "version": "1",
  "default": "deny",
  "tools": {
    "create_workspace": {
      "limits": [
        {
          "counter": "create_workspace_rate",
          "window": "minute",
          "max": 30,
          "scope": "grant"
        }
      ]
    }
  }
}

Questions about create_workspace