get_change_request

What get_change_request does on ServiceNow MCP Server

AI agents call get_change_request to retrieve information from ServiceNow MCP Server without modifying anything. It is typically the context-gathering step in research, monitoring, and reporting workflows, before the agent takes action elsewhere.

Why get_change_request is rated Low

This tool retrieves change request details by identifier (CHG number or sys_id). It performs a read-only query with no side effects. Severity is medium because change requests in ServiceNow often contain sensitive deployment information, architectural details, or scheduled infrastructure changes that could be exploited if an AI agent exfiltrates them; however, the tool itself does not execute changes or cause damage.

From the tool's definition Tool name is 'get_change_request' and description states 'Get full details of a change request' — uses retrieval verb 'Get' to query and return data without modification.

The rule that runs get_change_request safely

PolicyLayer is an MCP gateway: it sits between your AI agents and ServiceNow MCP Server, and checks every tool call against a rule you set before the call runs. Nothing changes on the server itself. For get_change_request, this is the rule to start with:

{
  "version": "1",
  "default": "deny",
  "tools": {
    "get_change_request": {}
  }
}

Questions about get_change_request