update_hr_profile

What update_hr_profile does on ServiceNow MCP Server

AI agents use update_hr_profile to create or update resources in ServiceNow MCP Server, usually the action step of a workflow, after the agent has gathered context. Every call changes real data in your ServiceNow MCP Server environment.

Why update_hr_profile is rated Medium

This tool modifies user HR profile data, which could affect employment records, compensation information, personal details, and organizational assignments. While the changes are reversible (Write, not Destructive), the blast radius is high because an AI agent could maliciously or erroneously alter critical HR information for multiple users, impacting payroll, benefits, or organizational structure.

From the tool's definition Tool name is 'update_hr_profile' and description explicitly states 'Update HR profile fields for a user', indicating reversible modification of user data. The requirement flag 'WRITE_ENABLED=true' further confirms this is a write operation.

The rule that runs update_hr_profile safely

PolicyLayer is an MCP gateway: it sits between your AI agents and ServiceNow MCP Server, and checks every tool call against a rule you set before the call runs. Nothing changes on the server itself. For update_hr_profile, this is the rule to start with:

{
  "version": "1",
  "default": "deny",
  "tools": {
    "update_hr_profile": {
      "limits": [
        {
          "counter": "update_hr_profile_rate",
          "window": "minute",
          "max": 30,
          "scope": "grant"
        }
      ]
    }
  }
}

Questions about update_hr_profile