list_compliance_policies

What list_compliance_policies does on ServiceNow MCP Server

AI agents call list_compliance_policies to retrieve information from ServiceNow MCP Server without modifying anything. It is typically the context-gathering step in research, monitoring, and reporting workflows, before the agent takes action elsewhere.

Why list_compliance_policies is rated Low

This tool queries and retrieves compliance policy information from ServiceNow without side effects. It is a straightforward read operation that returns existing data without creating, modifying, deleting, or executing external operations. The blast radius of misuse is minimal — an attacker could gain visibility into compliance policies but cannot alter controls or cause financial harm.

From the tool's definition Tool name contains 'list' and description states 'List GRC compliance policies and their current status' — a retrieval operation with no modification or deletion of data.

The rule that runs list_compliance_policies safely

PolicyLayer is an MCP gateway: it sits between your AI agents and ServiceNow MCP Server, and checks every tool call against a rule you set before the call runs. Nothing changes on the server itself. For list_compliance_policies, this is the rule to start with:

{
  "version": "1",
  "default": "deny",
  "tools": {
    "list_compliance_policies": {}
  }
}

Questions about list_compliance_policies