get_vulnerable_item

What get_vulnerable_item does on ServiceNow-MCP

AI agents call get_vulnerable_item to retrieve information from ServiceNow-MCP without modifying anything. It is typically the context-gathering step in research, monitoring, and reporting workflows, before the agent takes action elsewhere.

Why get_vulnerable_item is rated Low

This tool retrieves security vulnerability information from ServiceNow's Vulnerability Management module. While classified as Read (retrieves data without side effects), the severity is elevated to 'high' because vulnerability data is sensitive security information that could expose critical system weaknesses if disclosed to unauthorized agents or users.

From the tool's definition Tool name: 'get_vulnerable_item'; Tool description: 'Get full details of a single Vulnerable Item by sys_id or VI number'. The verb 'Get' and phrase 'full details' indicate data retrieval with no modification or deletion.

The rule that runs get_vulnerable_item safely

PolicyLayer is an MCP gateway: it sits between your AI agents and ServiceNow-MCP, and checks every tool call against a rule you set before the call runs. Nothing changes on the server itself. For get_vulnerable_item, this is the rule to start with:

{
  "version": "1",
  "default": "deny",
  "tools": {
    "get_vulnerable_item": {}
  }
}

Questions about get_vulnerable_item