github TypeScript analyzed 5acdcc7

LeassTaTT/servicenow-mcp-ai

github

ServiceNow MCP server — 67 tools over the full REST surface, with plan-and-apply write safety, capability preflight and an ACL security scan.

maintainer
LeassTaTT
licence
MIT
first seen
2026-06-18
last seen
2026-06-26
releases · 30d
0
short id

LeassTaTT/servicenow-mcp-ai is an MCP server distributed on github, maintained by LeassTaTT, tracked here since June 2026. It has shipped 1 release and exposes 20 tools. Tools include admin, aggregate, all, atf, attachment, batch, and 14 more. Its composite risk grade is B — an inferred review prompt computed from observed signals, not a verdict.

what we found

Reading the source raised 2 review prompts — dangerous code and toxic flow (lethal trifecta) — each a pattern worth a human look rather than a finding of fault.

Its 20 tools appear to reach network, secrets, database and untrusted content, inferred from tool names, descriptions and input schemas rather than from observed behaviour.

full security breakdown →
tools 20
  • admin servicenow_set_credentials
  • aggregate servicenow_aggregate
  • all every package below.
  • atf servicenow_list_atf_tests
  • attachment servicenow_list_attachments
  • batch servicenow_batch
  • catalog servicenow_list_catalogs
  • change servicenow_list_changes
  • cmdb servicenow_list_cis
  • codecheck servicenow_lint_script
  • core (default) — table, schema, aggregate, attachment.
  • docs servicenow_docs_list
  • email servicenow_send_email
  • flows servicenow_trace_table_event
  • importset servicenow_insert_import_set_row
  • instance servicenow_snapshot_instance
  • knowledge servicenow_search_knowledge
  • schema servicenow_list_tables
  • scripts servicenow_list_scripts
  • table servicenow_query_table
release cadence · 90d 1 releases
06-14 00:00 07-28 00:00 now
recent releases last 1
version date src
v2.0.0 2026-06-22 github

view all →