retire_asset

What retire_asset does on NowAIKit — ServiceNow AI Toolkit

AI agents use retire_asset to create or update resources in NowAIKit — ServiceNow AI Toolkit, usually the action step of a workflow, after the agent has gathered context. Every call changes real data in your NowAIKit — ServiceNow AI Toolkit environment.

Why retire_asset is rated Medium

Retiring an asset marks it as disposed/retired—a state change that modifies records reversibly. This is a Write operation: the asset record is updated, not destroyed. The operation has moderate blast radius in an enterprise IT context (incorrect retirements could disrupt asset tracking and compliance), but the change can be audited and potentially reversed, preventing it from being classified as Destructive.

From the tool's definition Tool name 'retire_asset' and description 'Retire an IT asset (mark as disposed/retired)' indicate modification of asset status. The description explicitly states '[Write]', confirming it modifies data rather than deleting it.

The rule that runs retire_asset safely

PolicyLayer is an MCP gateway: it sits between your AI agents and NowAIKit — ServiceNow AI Toolkit, and checks every tool call against a rule you set before the call runs. Nothing changes on the server itself. For retire_asset, this is the rule to start with:

{
  "version": "1",
  "default": "deny",
  "tools": {
    "retire_asset": {
      "limits": [
        {
          "counter": "retire_asset_rate",
          "window": "minute",
          "max": 30,
          "scope": "grant"
        }
      ]
    }
  }
}

Questions about retire_asset