create_catalog_item

What create_catalog_item does on ServiceNow MCP Server

AI agents use create_catalog_item to create or update resources in ServiceNow MCP Server, usually the action step of a workflow, after the agent has gathered context. Every call changes real data in your ServiceNow MCP Server environment.

Why create_catalog_item is rated Medium

This tool creates new records in ServiceNow's service catalog. While creation is reversible (items can be deleted), the blast radius is medium because unauthorized creation of catalog items could add malicious or fraudulent service offerings, confuse users, or disrupt service delivery. It does not irreversibly delete data (Destructive) or move money (Financial), making Write the appropriate category.

From the tool's definition Tool name is 'create_catalog_item' and description explicitly states 'Create a new service catalog item (requires WRITE_ENABLED=true)'. The 'Create' verb and 'WRITE_ENABLED' flag confirm this is a reversible data creation operation.

The rule that runs create_catalog_item safely

PolicyLayer is an MCP gateway: it sits between your AI agents and ServiceNow MCP Server, and checks every tool call against a rule you set before the call runs. Nothing changes on the server itself. For create_catalog_item, this is the rule to start with:

{
  "version": "1",
  "default": "deny",
  "tools": {
    "create_catalog_item": {
      "limits": [
        {
          "counter": "create_catalog_item_rate",
          "window": "minute",
          "max": 30,
          "scope": "grant"
        }
      ]
    }
  }
}

Questions about create_catalog_item