list_notifications

What list_notifications does on ServiceNow MCP Server

AI agents call list_notifications to retrieve information from ServiceNow MCP Server without modifying anything. It is typically the context-gathering step in research, monitoring, and reporting workflows, before the agent takes action elsewhere.

Why list_notifications is rated Low

This tool retrieves and displays email notification definitions from the ServiceNow system. It has no side effects—it only reads and returns data about how notifications are configured. The blast radius of misuse is minimal; an AI agent querying this information cannot inadvertently break systems or expose sensitive user data beyond what notification configurations already reveal about the system structure.

From the tool's definition Tool name 'list_notifications' and description 'List email notification definitions (sysevent_email_action)' indicate a query/retrieval operation. The verb 'list' and phrase 'definitions' confirm this retrieves existing configuration data without modification.

The rule that runs list_notifications safely

PolicyLayer is an MCP gateway: it sits between your AI agents and ServiceNow MCP Server, and checks every tool call against a rule you set before the call runs. Nothing changes on the server itself. For list_notifications, this is the rule to start with:

{
  "version": "1",
  "default": "deny",
  "tools": {
    "list_notifications": {}
  }
}

Questions about list_notifications