import_set_load · ServiceNow MCP Server MCP: Risk & Policy

WHAT IT DOES

What import_set_load does on ServiceNow MCP Server

AI agents use import_set_load to create or update resources in ServiceNow MCP Server — usually the action step of a workflow, after the agent has gathered context. Every call changes real data in your ServiceNow MCP Server environment.

WHY IT NEEDS A POLICY

Why import_set_load needs a policy

This tool performs a reversible data creation/modification operation—data loaded into a staging table can be corrected, reloaded, or cleared before final transformation. It does not irreversibly delete data (not Destructive), does not execute arbitrary code (not Execute), involves no financial transactions (not Financial), and retrieves no data (not Read).

From the tool's definition Tool name 'import_set_load' combined with description 'Load data into an import set staging table' indicates the tool creates or modifies data.

Attacks that exploit this kind of access

Recommended rule Ready

Verdict

import_set_load Rate-limited

import_set_load stays usable, but capped — an agent stuck in a loop can't make hundreds of changes a minute. Everything else on the server is denied unless you say otherwise.

View as policy code

policy.json

{
  "version": "1",
  "default": "deny",
  "tools": {
    "import_set_load": {
      "limits": [
        {
          "counter": "import_set_load_rate",
          "window": "minute",
          "max": 30,
          "scope": "grant"
        }
      ]
    }
  }
}

LIMIT THIS TOOL →

Instant setup, no code required.

PolicyLayer is an MCP gateway: every tool call is checked against your rule before it reaches ServiceNow MCP Server, so you can run agents against it safely.

FAQ

Questions about import_set_load

What does the import_set_load tool do? +

Load data into an import set staging table. It is categorised as a Write tool in the ServiceNow MCP Server MCP Server, which means it can create or modify data. Consider rate limits to prevent runaway writes.

How do I enforce a policy on import_set_load? +

Register the ServiceNow MCP Server MCP server in PolicyLayer and add a rule for import_set_load: allow, deny, rate-limit, or require approval. Point your MCP client at the PolicyLayer proxy URL and the rule is enforced on every call, before it reaches ServiceNow MCP Server. Nothing to install.

What risk level is import_set_load? +

import_set_load is a Write tool with medium risk. Write tools should be rate-limited to prevent accidental bulk modifications.

Can I rate-limit import_set_load? +

Yes. Add a rate_limit block to the import_set_load rule in your PolicyLayer policy. For example, setting max: 10 and window: 60 limits the tool to 10 calls per minute. Rate limits are tracked per agent session and reset automatically.

How do I block import_set_load completely? +

Set action: deny in the PolicyLayer policy for import_set_load. The AI agent will receive a policy violation error and cannot call the tool. You can also include a reason field to explain why the tool is blocked.

What MCP server provides import_set_load? +

import_set_load is provided by the ServiceNow MCP Server MCP server (schwarztim/servicenow-mcp). PolicyLayer sits as a proxy in front of this server to enforce policies before tool calls reach the server.