list_change_requests

What list_change_requests does on ServiceNow-MCP

AI agents call list_change_requests to retrieve information from ServiceNow-MCP without modifying anything. It is typically the context-gathering step in research, monitoring, and reporting workflows, before the agent takes action elsewhere.

Why list_change_requests is rated Low

This tool retrieves or queries existing change request data from ServiceNow without creating, modifying, or deleting records. The optional filtering parameters allow querying by state or search criteria, but these are standard read-only filter operations. No side effects are produced. The blast radius of misuse is minimal—an agent could retrieve information it shouldn't access, but cannot alter system state.

From the tool's definition Tool name 'list_change_requests' and description 'List change requests with optional filtering by state or query' indicate data retrieval with no modification or deletion. The verb 'list' and the filtering-only capability are characteristic of read operations.

The rule that runs list_change_requests safely

PolicyLayer is an MCP gateway: it sits between your AI agents and ServiceNow-MCP, and checks every tool call against a rule you set before the call runs. Nothing changes on the server itself. For list_change_requests, this is the rule to start with:

{
  "version": "1",
  "default": "deny",
  "tools": {
    "list_change_requests": {}
  }
}

Questions about list_change_requests