snow_disable_business_rule

What snow_disable_business_rule does on Serac

AI agents use snow_disable_business_rule to create or update resources in Serac, usually the action step of a workflow, after the agent has gathered context. Every call changes real data in your Serac environment.

Why snow_disable_business_rule is rated Medium

This tool modifies existing ServiceNow configuration by disabling business rules, which is a write-class operation. The severity is high because disabling business rules can significantly alter application logic and data validation workflows, affecting business processes across the platform. However, it is not destructive (rules can be re-enabled), not execute (does not run arbitrary code), and not financial.

From the tool's definition Tool name 'snow_disable_business_rule' and description 'Flip a business rule' indicate modification of ServiceNow business rule configuration. Disabling a business rule is a reversible write operation that changes system behavior.

The rule that runs snow_disable_business_rule safely

PolicyLayer is an MCP gateway: it sits between your AI agents and Serac, and checks every tool call against a rule you set before the call runs. Nothing changes on the server itself. For snow_disable_business_rule, this is the rule to start with:

{
  "version": "1",
  "default": "deny",
  "tools": {
    "snow_disable_business_rule": {
      "limits": [
        {
          "counter": "snow_disable_business_rule_rate",
          "window": "minute",
          "max": 30,
          "scope": "grant"
        }
      ]
    }
  }
}

Questions about snow_disable_business_rule