list_atf_tests

What list_atf_tests does on ServiceNow-MCP

AI agents call list_atf_tests to retrieve information from ServiceNow-MCP without modifying anything. It is typically the context-gathering step in research, monitoring, and reporting workflows, before the agent takes action elsewhere.

Why list_atf_tests is rated Low

This tool retrieves or queries ATF (Automated Test Framework) test case metadata from ServiceNow without modifying, deleting, or executing anything. It is a non-destructive read operation with minimal blast radius if misused by an agent—at worst, an agent could retrieve test information it shouldn't see, but no data would be altered or operations triggered. This clearly falls under the Read category.

From the tool's definition Tool name 'list_atf_tests' and description 'List ATF test cases, optionally filtered by suite' indicate a retrieval operation with no side effects. The verb 'list' is a standard read operation that queries existing data.

The rule that runs list_atf_tests safely

PolicyLayer is an MCP gateway: it sits between your AI agents and ServiceNow-MCP, and checks every tool call against a rule you set before the call runs. Nothing changes on the server itself. For list_atf_tests, this is the rule to start with:

{
  "version": "1",
  "default": "deny",
  "tools": {
    "list_atf_tests": {}
  }
}

Questions about list_atf_tests