snow_get_current_scope

What snow_get_current_scope does on Serac

AI agents call snow_get_current_scope to retrieve information from Serac without modifying anything. It is typically the context-gathering step in research, monitoring, and reporting workflows, before the agent takes action elsewhere.

Why snow_get_current_scope is rated Low

This tool retrieves and verifies current state information (application scope and active Update Set) from ServiceNow. It performs no mutations, executions, or destructive operations. The blast radius of misuse is minimal—an attacker could only learn which scope is active, not alter anything or access sensitive data beyond scope metadata. This is a straightforward Read operation.

From the tool's definition Tool name 'snow_get_current_scope' and description 'Get the current application scope and active Update Set' indicate a read-only query operation that retrieves configuration information without modifying or executing any changes.

The rule that runs snow_get_current_scope safely

PolicyLayer is an MCP gateway: it sits between your AI agents and Serac, and checks every tool call against a rule you set before the call runs. Nothing changes on the server itself. For snow_get_current_scope, this is the rule to start with:

{
  "version": "1",
  "default": "deny",
  "tools": {
    "snow_get_current_scope": {}
  }
}

Questions about snow_get_current_scope