list_data_sources

What list_data_sources does on ServiceNow MCP Server

AI agents call list_data_sources to retrieve information from ServiceNow MCP Server without modifying anything. It is typically the context-gathering step in research, monitoring, and reporting workflows, before the agent takes action elsewhere.

Why list_data_sources is rated Low

This tool retrieves and lists configuration information about Import Set data sources (file/JDBC/REST loaders). It performs a query operation with no side effects—no data is created, modified, deleted, or executed. The blast radius is minimal as it only exposes informational metadata that would typically be accessible to administrators or service accounts. Listing data sources is a standard read-only operation.

From the tool's definition Tool name 'list_data_sources' and description 'List Import Set data source definitions' indicate retrieval of metadata about existing data sources without modification or deletion.

The rule that runs list_data_sources safely

PolicyLayer is an MCP gateway: it sits between your AI agents and ServiceNow MCP Server, and checks every tool call against a rule you set before the call runs. Nothing changes on the server itself. For list_data_sources, this is the rule to start with:

{
  "version": "1",
  "default": "deny",
  "tools": {
    "list_data_sources": {}
  }
}

Questions about list_data_sources