get_workspace

What get_workspace does on NowAIKit — ServiceNow AI Toolkit

AI agents call get_workspace to retrieve information from NowAIKit — ServiceNow AI Toolkit without modifying anything. It is typically the context-gathering step in research, monitoring, and reporting workflows, before the agent takes action elsewhere.

Why get_workspace is rated Low

This tool retrieves and queries workspace details (tabs, lists, configuration). It performs no data modification, deletion, code execution, or financial operations. The action is purely informational with no side effects, fitting the Read category. Severity is low because it only exposes workspace metadata without access to sensitive business data or ability to trigger external operations.

From the tool's definition Tool name 'get_workspace' and description 'Get details of a configurable agent workspace including tabs and lists' both indicate retrieval of configuration metadata without modification or execution.

The rule that runs get_workspace safely

PolicyLayer is an MCP gateway: it sits between your AI agents and NowAIKit — ServiceNow AI Toolkit, and checks every tool call against a rule you set before the call runs. Nothing changes on the server itself. For get_workspace, this is the rule to start with:

{
  "version": "1",
  "default": "deny",
  "tools": {
    "get_workspace": {}
  }
}

Questions about get_workspace