list_instances

What list_instances does on NowAIKit — ServiceNow AI Toolkit

AI agents call list_instances to retrieve information from NowAIKit — ServiceNow AI Toolkit without modifying anything. It is typically the context-gathering step in research, monitoring, and reporting workflows, before the agent takes action elsewhere.

Why list_instances is rated Low

This is a Read operation—it retrieves existing configuration data without creating, modifying, or deleting anything. The severity is elevated to 'high' rather than 'low' because exposing the list of all ServiceNow instances in a multi-customer environment could enable reconnaissance attacks, reveal the organizational structure and customer portfolio, or facilitate targeted attacks against specific instances.

From the tool's definition Tool name 'list_instances' and description 'List all configured ServiceNow instances' indicate data retrieval with no modification. However, the returned data (instance names and configurations) could expose sensitive multi-customer infrastructure details.

The rule that runs list_instances safely

PolicyLayer is an MCP gateway: it sits between your AI agents and NowAIKit — ServiceNow AI Toolkit, and checks every tool call against a rule you set before the call runs. Nothing changes on the server itself. For list_instances, this is the rule to start with:

{
  "version": "1",
  "default": "deny",
  "tools": {
    "list_instances": {}
  }
}

Questions about list_instances