ServiceNow MCP AI

Create a new record in a table with the given field values.

Description is built at runtime.

Delete an attachment by its sys_id.

Delete a record from a table by its sys_id.

List a table's columns from sys_dictionary (name, label, type, mandatory, reference, default, flags). details:true adds choice lists and dictionary overrides.

The automation on a table: business rules (by when+order), client scripts, UI policies, UI actions, ACLs. Metadata only.

Disable a tool package for this session: its tools, resources and prompts are withdrawn (list_changed is sent). The admin tools cannot be disabled.

Description is built at runtime.

Description is built at runtime.

Description is built at runtime.

Description is built at runtime.

Write <profile>/apps/<scope>.md + .json for one scoped app: record, tables with an ER diagram, roles, cross-scope privileges, artefacts by type group, caveats. Not for 'global'. write:false returns the Markdown instead.

Write <profile>/README.md (version, counts, apps, plugins, automation, update sets) and artifact-types.md, plus one document per named table, app and kind (security, catalog, integrations); depth adds discovery/. A cancel keeps finished files.

Write <profile>/tables/<table>.md + .json from metadata: inheritance, columns, references, ER and flow diagrams, rules, client scripts, UI policies/actions, ACLs, caveats. A Purpose manual block survives re-runs.

Download an attachment's bytes, returned as base64. Large files are refused (see SN_MAX_RESULT_CHARS).

Enable a tool package for this session (list_changed is sent). Denied packages are refused; a read-only package brings only its read tools. Ends with the session.

Why a user can or cannot read, write, create or delete a table, record or field: roles, the matching row/field ACLs and their role, condition and script parts. Scripts stay undetermined.

Explain one artifact of any registry type: summary, trigger fields, non-empty fields, children, referenced records, decoded JSON fields and type-specific readings (state models, policy effects).

Explain a flow/subflow (trigger, step tree, decoded inputs and pills, calls expanded), a custom action (inputs, outputs, steps), a legacy workflow (activity graph, migration report) or a playbook (lanes). Opt-in runs.

Say whether a table may be read or written under the active policy and which rule decides, or, without a table, return the effective policy. Local; no instance call.

Explain a Service Portal (url_suffix or sys_id) or one page as a tree: theme, menu, pages, layout down to widgets and dependencies. Metadata only; unreadable tables become caveats.

Explain a UI Builder experience/workspace (path or sys_id) as a page map: routes → screens → macroponents → data brokers and ACLs; plus landing, dashboards, lists, form actions. Metadata only.

Search all tool packages, loaded or not, by intent; servicenow_enable_package loads a match's package.

Mermaid erDiagram from sys_dictionary: an entity per table, a relationship per reference field. columns / max_columns / depth give a detailed view: PK/FK and required markers, extends edges, referenced tables.

Mermaid flowchart of a record's lifecycle: active business rules by phase, inherited and global rules in own lanes. 'operation' adds the event trace (flows, workflows, notifications); 'lanes' adds opt-in lanes.

Read one artifact of any registry type in full: the record, its registry children (e.g. UI policy actions, page layout), scope and SDK-managed verdict. By sys_id or natural key; denied child tables show as redacted.

Dependency graph of one artifact: outbound (references, decoded JSON, script calls, GlideRecord tables, UIB components and brokers) and inbound (reverse references, script, flow-step and UIB page callers). Depth-capped; JSON or Mermaid.

Poll an ATF run by its execution id: status, percent complete and message (CI/CD progress API).

Read a single attachment's metadata by its sys_id.

Get a catalog item, including its order variables, by sys_id.

Get a single change request by sys_id.

Get a CI with its attributes and inbound/outbound relations by class and sys_id.

Schema of a CMDB class (attributes, relationship rules) from the CMDB Meta API.

Read a sent/received email record by its sys_id (Email API).

Structured view of one flow or workflow: trigger (table/condition/when) and ordered steps; not a full decompilation.

Flow runs from sys_flow_context, by flow sys_id or by the record it ran against: start, state and outcome.

Read the transform outcome of a staging row.

Get a knowledge article (content and metadata) by sys_id.

List featured or most-viewed knowledge articles for the current user.

Read system properties (sys_properties) by name or prefix: value, type, description, roles, scope, last update. Password-type and secret-looking values are masked; long values truncated.

Read a single record from a table by its sys_id.

Read a record's history: sys_audit changes and journal entries (comments, work_notes), newest first — journal fields read back empty via the Table API. Each source degrades separately.

Read one script artefact in full: source code and execution context.

Show instance, auth, missing credentials, per-profile write mode, policy, limits, TLS, queue, write counters, version, uptime. Secrets are never shown.

What a task waits for: assignment, approvals and SLAs (breach, time left); or, with pending_for, an approver's requested approvals.

Summarise one update set: its customer updates (sys_update_xml) per artefact — type, target, action, table — with counts; UIB pages it touches list the records it lacks. include_payload adds parsed field values, capped, secrets masked.

Send CIs and relationships through the Identification & Reconciliation Engine: matched by identification rules, then inserted or updated. The plan preview is identify-only.

Insert one row into a staging table and run its transform map. Returns the transform result, the run (sys_import_set_run: state, counts) and the table's transform maps, used ones marked.

Description is built at runtime.

Run deterministic code-quality rules on one script (hard-coded sys_ids, unbounded or in-loop GlideRecord, eval, …): findings with rule, severity, line, fix hint.

Lint every active business rule, client script and UI policy of a table: per-script findings and a severity summary.

List records of any registry artifact type as summaries: sys_id, name, key, scope, active, SDK-managed verdict; no script bodies. verified:false types carry a caveat.

List ATF tests (sys_atf_test, default) or suites (kind:'suite', sys_atf_test_suite) as metadata: name, active, description.

Description is built at runtime.

Description is built at runtime.

List attachment metadata, optionally for one record (table + sys_id).

List the categories within a service catalog.

Search/list orderable catalog items, optionally by text or category.

List the Service Catalogs available on the instance (Service Catalog API).

List change requests (Change Management API) with an encoded query, fields and paging.

List one CI's relationships (cmdb_rel_ci), outbound = parent, inbound = child, with the related CI's name and class. Filter by direction and type.

List configuration items of a CMDB class through the class-aware CMDB Instance API.

List the Markdown docs in SN_DOCS_DIR with metadata: generated or hand-written, generator, generated_at, profile, kind, bytes, stale (older than SN_DOCS_STALE_DAYS).

List flows (sys_hub_flow) or legacy workflows (kind: 'workflow') as metadata. Filter by table, active or name.

List the connection profiles: name, host, user, auth method (and OAuth grant), refresh-token state, read-only flag, write mode, credentials complete. Secrets are never included.

List tool packages with their session state: enabled, configured, denied, read-only, tool count. Toggle one with servicenow_enable_package / servicenow_disable_package.

List script artefacts of one type as metadata (no source). Filter by table, name, active or encoded query.

List tables from sys_db_object, optionally filtered by a name or label fragment.

List update sets, newest first, with state, scope and whether each is the user's current one. Filter by state, name or application.

List the local write journal (newest first): every write this server made, with entry id, outcome and whether servicenow_revert_write can invert it. Filter by profile, table, since, result or action.

Find users, groups or roles by search term or sys_id. With include_details and one match: a user's roles and groups, a group's members and roles, or a role's contained roles and granting groups.

Description is built at runtime.

Order a catalog item directly ('order now'). Creates a request/RITM. Provide variable values keyed by their names.

Read records from any table (Table API): encoded query, fields, paging, fetchAll. '^' cannot be escaped inside a value; very long queries can hit HTTP 414 — split them. See the servicenow://reference/encoded-query resource.

Read one local Markdown doc or its .json companion; the result carries its mimeType.

Bounded ops views for 'why is it slow' triage: overview, syslog, jobs (sys_trigger), email_queue, semaphores, integrations (failed/slow outbound), transactions (slow), mid (MID/ECC queue). Unreadable section: available:false + why.

Undo one applied write from the local journal: an update restores its before values, a create is deleted, a delete is re-created. Refused if the record changed since (unless force:true) or the line is not invertible (NOT_REVERTIBLE). Journaled.

Upgrade history by default; upgrade: its unresolved skipped records by app/type; update_name: one skip classified by base vs customer versions; store_updates: store apps with an update and their customisations.

Run an ATF test (default) or suite (kind:'suite') via the CI/CD API. EXECUTES CODE on the instance — non-production only, sn_cicd required. Returns an execution id for servicenow_get_atf_result, or pass wait_seconds to wait.

Description is built at runtime.

Description is built at runtime.

Description is built at runtime.

Search the local docs for a substring: a snippet and nearest heading per match (max SN_DOCS_SEARCH_MAX, then 'truncated').

Full-text search of knowledge articles (Knowledge API), with optional encoded query and paging.

Send an email (Email API plugin), optionally tied to a record (table + sys_id). Recipients must match SN_EMAIL_ALLOWED_DOMAINS or, when that is unset, be users of the instance (sys_user.email).

Save connection credentials to the env file for later requests (any subset; auth / oauth_client_id / oauth_grant pick the method). Secrets are never arguments: list them in request_secrets for elicitation. See 'instance' for host changes.

Set one existing system property by name. The plan shows current and new value; the write is journaled and revertible (except secret properties, whose values are never journaled).

Download structural metadata to SN_DOCS_DIR/<profile>/ as Markdown + JSON: tables, schemas, plugins, apps, script stats, properties (secrets redacted), choices, ACLs, flows, catalog, roles. resume:true resumes.

Description is built at runtime.

Verify the credentials work: reads one sys_user record, reports ok/status/latency. Auth and connectivity problems come back as ok:false, not errors.

Trace what would run for a table operation, in order, without executing: business rules by phase (inherited and global too), flows, workflows, notifications, with conditions and a Mermaid flowchart. 'lanes' adds more.

Update fields on a change request by sys_id.

Update a CI's attributes via the CMDB Instance API (IRE).

Update fields on an existing record identified by its sys_id.

Attach a file (provided as base64) to a record identified by table + sys_id.

Create or update a registry artifact and its children (UI policy actions, portal page layout, catalog variables) as one journaled, revertible plan, parent first, with SDK pre-flight. Flows: {active} only (unverified).

Create or update one record matched by an exact key of field/value pairs: no match creates, one updates, several are refused (AMBIGUOUS_KEY). Pass the plan's expected_action / expected_sys_id with apply:true; a changed decision gives STALE_RECORD.

Switch the connection profile (over HTTP: this session only unless persist).

Find references to a table, field (table.field) or script: matching script lines, rules/ACLs on a table, structural config (reference fields, layouts, variables, flow inputs, reports). Optional scope and Mermaid graph.

Create or overwrite a local Markdown doc and refresh index.md. A generated document (sn_generated) is refused with DOC_GENERATED unless overwrite:true; annotate one inside <!-- sn:manual:start --> … <!-- sn:manual:end -->.