list_control_objectives

What list_control_objectives does on ServiceNow-MCP

AI agents call list_control_objectives to retrieve information from ServiceNow-MCP without modifying anything. It is typically the context-gathering step in research, monitoring, and reporting workflows, before the agent takes action elsewhere.

Why list_control_objectives is rated Low

This tool retrieves or enumerates Control Objectives from the ServiceNow compliance module. It performs a read-only query operation with no side effects—no data is created, modified, deleted, or executed. Compliance policy statements are typically sensitive in security context but the tool itself only reads existing data, making it a Read category with low severity risk.

From the tool's definition Tool name 'list_control_objectives' and description 'List Control Objectives' indicate a retrieval operation with no modification or deletion. The table reference 'sn_compliance_policy_statement' is a data query target, not an action that modifies data.

The rule that runs list_control_objectives safely

PolicyLayer is an MCP gateway: it sits between your AI agents and ServiceNow-MCP, and checks every tool call against a rule you set before the call runs. Nothing changes on the server itself. For list_control_objectives, this is the rule to start with:

{
  "version": "1",
  "default": "deny",
  "tools": {
    "list_control_objectives": {}
  }
}

Questions about list_control_objectives