import_properties

What import_properties does on NowAIKit — ServiceNow AI Toolkit

AI agents use import_properties to create or update resources in NowAIKit — ServiceNow AI Toolkit, usually the action step of a workflow, after the agent has gathered context. Every call changes real data in your NowAIKit — ServiceNow AI Toolkit environment.

Why import_properties is rated Medium

This tool creates or updates system properties, which are reversible modifications to ServiceNow configuration. However, system properties control critical system behavior (security settings, feature flags, integration parameters), so misuse could have significant blast radius. The explicit [Write] marking and the nature of modifying system-wide properties justifies 'high' severity.

From the tool's definition Tool description explicitly states 'Import (create or update) system properties from a JSON object' with **[Write]** categorization provided. The tool modifies system properties, which are configuration settings that affect application behavior.

The rule that runs import_properties safely

PolicyLayer is an MCP gateway: it sits between your AI agents and NowAIKit — ServiceNow AI Toolkit, and checks every tool call against a rule you set before the call runs. Nothing changes on the server itself. For import_properties, this is the rule to start with:

{
  "version": "1",
  "default": "deny",
  "tools": {
    "import_properties": {
      "limits": [
        {
          "counter": "import_properties_rate",
          "window": "minute",
          "max": 30,
          "scope": "grant"
        }
      ]
    }
  }
}

Questions about import_properties