get_control_objective

What get_control_objective does on ServiceNow-MCP

AI agents call get_control_objective to retrieve information from ServiceNow-MCP without modifying anything. It is typically the context-gathering step in research, monitoring, and reporting workflows, before the agent takes action elsewhere.

Why get_control_objective is rated Low

This tool performs a read-only operation by retrieving details of a Control Objective record identified by its system ID. It has no capability to modify, delete, execute, or commit financial actions. The blast radius of misuse is minimal—an agent could over-query or access sensitive control objectives, but cannot cause data loss or irreversible changes.

From the tool's definition Tool name 'get_control_objective' with description 'Get full details of a single Control Objective by sys_id' indicates a retrieval operation that queries and returns data without modification or side effects.

The rule that runs get_control_objective safely

PolicyLayer is an MCP gateway: it sits between your AI agents and ServiceNow-MCP, and checks every tool call against a rule you set before the call runs. Nothing changes on the server itself. For get_control_objective, this is the rule to start with:

{
  "version": "1",
  "default": "deny",
  "tools": {
    "get_control_objective": {}
  }
}

Questions about get_control_objective