get_compliance_assessment

What get_compliance_assessment does on ServiceNow MCP Server

AI agents call get_compliance_assessment to retrieve information from ServiceNow MCP Server without modifying anything. It is typically the context-gathering step in research, monitoring, and reporting workflows, before the agent takes action elsewhere.

Why get_compliance_assessment is rated Low

This tool retrieves or queries compliance assessment results, which is a read-only operation. There is no indication of data creation, modification, deletion, or execution of operations. The low severity reflects that reading compliance assessment data has minimal blast radius compared to other risk categories, though access controls on sensitive compliance information should still be appropriately enforced.

From the tool's definition Tool name 'get_compliance_assessment' and description 'Get compliance assessment results for a policy or control' indicate retrieval of existing compliance data without modification or side effects.

The rule that runs get_compliance_assessment safely

PolicyLayer is an MCP gateway: it sits between your AI agents and ServiceNow MCP Server, and checks every tool call against a rule you set before the call runs. Nothing changes on the server itself. For get_compliance_assessment, this is the rule to start with:

{
  "version": "1",
  "default": "deny",
  "tools": {
    "get_compliance_assessment": {}
  }
}

Questions about get_compliance_assessment