list_catalog_items

What list_catalog_items does on NowAIKit — ServiceNow AI Toolkit

AI agents call list_catalog_items to retrieve information from NowAIKit — ServiceNow AI Toolkit without modifying anything. It is typically the context-gathering step in research, monitoring, and reporting workflows, before the agent takes action elsewhere.

Why list_catalog_items is rated Low

This tool queries and returns a list of catalog items from ServiceNow. It performs no modifications, deletions, or external operations—purely informational retrieval. The blast radius of misuse is minimal, as an agent listing catalog items cannot compromise data integrity or trigger unwanted actions. Severity is low because the operation is read-only and typically involves non-sensitive discovery data.

From the tool's definition Tool name 'list_catalog_items' and description 'List available service catalog items' indicate a retrieval operation with no side effects. The verb 'list' is characteristic of Read operations.

The rule that runs list_catalog_items safely

PolicyLayer is an MCP gateway: it sits between your AI agents and NowAIKit — ServiceNow AI Toolkit, and checks every tool call against a rule you set before the call runs. Nothing changes on the server itself. For list_catalog_items, this is the rule to start with:

{
  "version": "1",
  "default": "deny",
  "tools": {
    "list_catalog_items": {}
  }
}

Questions about list_catalog_items