get_csm_account

What get_csm_account does on ServiceNow-MCP

AI agents call get_csm_account to retrieve information from ServiceNow-MCP without modifying anything. It is typically the context-gathering step in research, monitoring, and reporting workflows, before the agent takes action elsewhere.

Why get_csm_account is rated Low

This tool retrieves customer account data (details, contacts, case counts) without altering any records or triggering external actions. It is a simple query operation that reads ServiceNow CSM (Customer Service Management) data, falling squarely in the Read category with low severity due to minimal blast radius if misused—worst case being unauthorized information disclosure of customer account details.

From the tool's definition Tool name 'get_csm_account' and description 'Get details of a customer account including contacts and open cases count' indicate read-only retrieval of account information without modification or side effects.

The rule that runs get_csm_account safely

PolicyLayer is an MCP gateway: it sits between your AI agents and ServiceNow-MCP, and checks every tool call against a rule you set before the call runs. Nothing changes on the server itself. For get_csm_account, this is the rule to start with:

{
  "version": "1",
  "default": "deny",
  "tools": {
    "get_csm_account": {}
  }
}

Questions about get_csm_account