get_csm_contact

What get_csm_contact does on ServiceNow MCP Server

AI agents call get_csm_contact to retrieve information from ServiceNow MCP Server without modifying anything. It is typically the context-gathering step in research, monitoring, and reporting workflows, before the agent takes action elsewhere.

Why get_csm_contact is rated Low

This tool performs a query operation to retrieve customer contact information. No creation, modification, deletion, or external execution occurs. While contact information is sensitive, the blast radius of an AI agent retrieving contact details is limited to information disclosure, which is lower severity than write or execute operations. Classification as Read is appropriate.

From the tool's definition Tool retrieves contact details (name, account, phone, email) with no modification capability described. The verb 'Get details' and the read-only nature of the data returned indicates pure data retrieval.

The rule that runs get_csm_contact safely

PolicyLayer is an MCP gateway: it sits between your AI agents and ServiceNow MCP Server, and checks every tool call against a rule you set before the call runs. Nothing changes on the server itself. For get_csm_contact, this is the rule to start with:

{
  "version": "1",
  "default": "deny",
  "tools": {
    "get_csm_contact": {}
  }
}

Questions about get_csm_contact