list_subflows

What list_subflows does on ServiceNow MCP Server

AI agents call list_subflows to retrieve information from ServiceNow MCP Server without modifying anything. It is typically the context-gathering step in research, monitoring, and reporting workflows, before the agent takes action elsewhere.

Why list_subflows is rated Low

This tool lists or retrieves metadata about available subflows for informational purposes. It performs a read-only query operation that does not create, modify, delete, or execute any workflows. The action of listing available reusable components poses minimal risk even if misused by an AI agent, as it only surfaces existing configuration information without triggering any business logic or state changes.

From the tool's definition Tool name 'list_subflows' and description 'List available subflows that can be reused across flows' indicate a retrieval/query operation with no side effects.

The rule that runs list_subflows safely

PolicyLayer is an MCP gateway: it sits between your AI agents and ServiceNow MCP Server, and checks every tool call against a rule you set before the call runs. Nothing changes on the server itself. For list_subflows, this is the rule to start with:

{
  "version": "1",
  "default": "deny",
  "tools": {
    "list_subflows": {}
  }
}

Questions about list_subflows