create_subflow

What create_subflow does on ServiceNow MCP Server

AI agents use create_subflow to create or update resources in ServiceNow MCP Server, usually the action step of a workflow, after the agent has gathered context. Every call changes real data in your ServiceNow MCP Server environment.

Why create_subflow is rated Medium

This tool creates new ServiceNow subflow objects, which are reversible (can be updated or deleted). While classified as Write, the severity is high because subflows can have wide-ranging effects across the ServiceNow platform when used in automations—misconfiguration or malicious subflows could disrupt business processes at scale. However, the action itself is reversible, so it does not qualify as Destructive.

From the tool's definition Tool name 'create_subflow' and description explicitly states '[Write]' indicating data creation. Subflows are reusable workflow components in ServiceNow that can affect multiple records and processes once created.

The rule that runs create_subflow safely

PolicyLayer is an MCP gateway: it sits between your AI agents and ServiceNow MCP Server, and checks every tool call against a rule you set before the call runs. Nothing changes on the server itself. For create_subflow, this is the rule to start with:

{
  "version": "1",
  "default": "deny",
  "tools": {
    "create_subflow": {
      "limits": [
        {
          "counter": "create_subflow_rate",
          "window": "minute",
          "max": 30,
          "scope": "grant"
        }
      ]
    }
  }
}

Questions about create_subflow