ServiceNow MCP Server (schwarztim/servicenow-mcp) is an MCP server listed on the M8ven Trust Index. It scores 66 out of 100, grade C. It declares 116 tools. No publisher has claimed this listing.

C
Caution
66/100

ServiceNow MCP Server

Enables interaction with ServiceNow ITSM through browser-based SSO authentication, providing 80+ tools for incidents, changes, catalog, CMDB, and more via natural language.

Caution. Specific findings reduced this grade. They are listed on the page. Grades reflect the full trust pyramid: code, verification depth, and reputation. New projects cap at C until adoption is earned.

How we verified

Code Verified⚡ Live Monitored: not connected

Verified is a snapshot. Live keeps it current, and builds your track record.

⚡ Connect GitHub → continuous verification on every pushwhy connect →

Who stands behind it

schwarztim

Source: Glama

Is this your MCP?

Claim it to get a verified publisher badge, a free copy of our full audit findings, and direct contact for any high-priority issues we find. Or connect your repo for our deepest verification, Live Monitored: read-only, revoke anytime. What we access →

Install from

The grade above is for the source repository. Registries can serve a different version, so we mark the ones we were not able to read.

// key findings
⚠️
Known vulnerabilities in dependencies: 2 high
Affects packages this MCP installs at runtime. Upgrade or remove the affected dependency.
No credential exfiltration, no sensitive file access, no obfuscation
Static analysis found nothing flowing your secrets to unexpected places.
Open source with a license and README
Anyone can audit the code, the license is declared, and the publisher documents what it does.
🔐
You'll be asked for 6 credentials: HERMES_CLIENT_TOKEN, MS365_PASSWORD, SERVICENOW_PASSWORD, SERVICENOW_SESSION_TOKEN, SERVICENOW_USER_TOKEN, TOTP_SECRET
These are read from process.env at runtime. Make sure you trust where they’ll be sent.
// tools this server exposes116 tools

These names and descriptions are the publisher's own, read from the source code. We print them as written. Our assessment is the findings above, not this list.

auth_browser

Launch browser for SSO authentication. Opens a browser window where you can log in with your enterprise SSO credentials. Cookies are captured and saved for subsequent API calls. Use this when you don't have API keys and need to use SSO.

auth_status

Check current authentication status. Shows which auth method is configured and whether credentials/cookies are valid.

auth_import_cookies

Import authentication cookies from an external source. Use this when you already have an authenticated browser session (e.g., via Firefox DevTools) and want to transfer those credentials to the MCP. Extract cookies and x-usertoken from network request headers.

auth_refresh

Refresh the current session by re-authenticating via browser. Uses the previously authenticated instance URL. Useful when session has expired.

my_context

Get current user's identity, groups, and roles. Returns cached user info including sys_id, name, email, department, group memberships, and roles. Use this first to understand who you're working as.

my_work_queue

Get ALL actionable items for current user in a single call: assigned tasks, pending approvals, and unassigned group queue items. This is the recommended first tool to use when user asks 'what do I need to work on?' or 'what are my open tasks?'

incidents_list

List incidents with optional filtering. Returns incident number, short description, state, priority, assigned_to.

incidents_get

Get a single incident by sys_id or number

incidents_create

Create a new incident

incidents_update

Update an existing incident

incidents_add_comment

Add a work note or comment to an incident

incidents_resolve

Resolve an incident

changes_list

List change requests with optional filtering

changes_get

Get a single change request by sys_id or number

changes_create

Create a new change request

changes_tasks

Get tasks associated with a change request

catalog_items

List available service catalog items

catalog_get

Get details of a catalog item including variables/questions

catalog_order

Order/submit a catalog item request

requests_list

List service requests (sc_request) for current user or with filter

requests_items

List requested items (sc_req_item) with status

cmdb_search

Search CMDB configuration items

cmdb_get

Get configuration item details

cmdb_relationships

Get relationships for a configuration item

problems_list

List problem records

problems_get

Get a problem record

problems_create

Create a problem record

knowledge_search

Search knowledge base articles

knowledge_get

Get a knowledge article

users_search

Search for users

users_get

Get user details

groups_list

List groups

groups_members

Get members of a group

tasks_my_tasks

Get tasks assigned to current user

tasks_update

Update a task

approvals_pending

Get pending approvals for current user with ENRICHED details from parent records. Returns number, short_description, opened_by, urgency, and stage - not just approval metadata. Supports keyword filtering.

approvals_approve

Approve an approval request

approvals_reject

Reject an approval request

attachment_list

List attachments for a record

attachment_get

Get attachment metadata by sys_id

attachment_download

Get attachment content (returns base64 encoded for binary files)

attachment_upload

Upload an attachment to a record

attachment_delete

Delete an attachment

catalog_categories

List service catalog categories

catalog_item_variables

Get variables/questions for a catalog item (required fields for ordering)

catalog_add_to_cart

Add a catalog item to the shopping cart

catalog_get_cart

Get current shopping cart contents

catalog_submit_cart

Submit/checkout the shopping cart to create requests

catalog_order_now

Order a catalog item immediately (skip cart, single-step order)

itsp_parse_url

Parse an IT Service Portal (ITSP) URL to extract catalog item information. Extracts sys_id, table name, and instance URL from portal links like 'https://instance.service-now.com/itsp?id=sc_cat_item&sys_id=xxx'

itsp_get_item_details

Get full catalog item details from an ITSP URL. Automatically parses the URL and fetches item name, description, variables/questions, and all metadata needed for ordering.

itsp_submit_request

Submit a service request directly from an ITSP URL. Streamlined workflow: parses URL, validates variables, and submits the request in one step.

requests_get_details

Get detailed information about a service request or requested item including status, variables, approval status, and activity history. Accepts REQ numbers (requests) or RITM numbers (requested items).

requests_get_my_recent

Get recent service requests for current user with full details. Returns last 10 requests with status, items, and approval information.

record_producer_submit

Submit a Record Producer request. Record Producers create records directly (like incidents) without using the cart. Use this for incident creation, problem reporting, and other single-record submissions from the service catalog.

record_producer_get_details

Get details about a Record Producer including its variables and target table. Helps understand what fields are needed before submission.

order_guide_submit

Submit an Order Guide request. Order Guides bundle multiple catalog items into a single request, creating multiple requested items (RITMs). Use this for requesting multiple related items at once.

order_guide_get_details

Get details about an Order Guide including available items, categories, and variables. Helps understand what items can be included before submission.

catalog_detect_item_type

Automatically detect the type of catalog item (Standard, Record Producer, Order Guide, or Content). Returns the item type and appropriate submission method to use.

import_set_load

Load data into an import set staging table

import_set_load_multiple

Load multiple records into an import set staging table

import_set_status

Get status of an import set

batch_request

Execute multiple API requests in a single call

cmdb_classes

List CMDB CI classes/types

cmdb_instance_list

List CMDB instances by class (uses CMDB Instance API /now/cmdb/instance)

cmdb_create

Create a new CMDB configuration item

cmdb_update

Update a CMDB configuration item

cmdb_relationship_create

Create a relationship between two CIs

sla_list

List SLA definitions

task_sla_list

List task SLAs (SLA records attached to tasks)

task_sla_get

Get task SLA details

workflow_list

List workflow definitions

workflow_context_list

List workflow contexts (running workflow instances)

workflow_context_get

Get workflow context details

email_list

List emails (sys_email table)

email_get

Get email details

notification_list

List email notification rules

event_list

List system events (sysevent)

event_create

Create/fire a system event

journal_list

List journal entries (work notes, comments) for a record

activity_stream

Get activity stream for a record (all changes, comments)

audit_list

List audit history for a record

scheduled_job_list

List scheduled jobs

scheduled_job_run

Execute a scheduled job immediately

metric_list

List defined metrics

metric_data

Get metric data/values

update_set_list

List update sets

update_set_get

Get update set details with customer updates

asset_list

List assets (alm_asset)

asset_get

Get asset details

asset_create

Create an asset

asset_update

Update an asset

license_list

List software licenses (alm_license)

license_get

Get software license details

license_entitlements

List license entitlements/allocations

software_list

List software installations

software_product_list

List software products (software catalog)

contract_list

List contracts

contract_get

Get contract details

location_list

List locations

16 further tools are not listed here. The complete surface is in the source.

// known CVEs in dependencies2 high1 low

Disclosed vulnerabilities in this server's declared npm dependencies (via OSV). Whether each is reachable depends on the installed versions.

high@modelcontextprotocol/sdk@1.0.0GHSA-w48q-cv73-mx4w

Model Context Protocol (MCP) TypeScript SDK does not enable DNS rebinding protection by default

highplaywright@1.50.0GHSA-7mvr-c777-76hp

Playwright downloads and installs browsers without verifying the authenticity of the SSL certificate

lowzod@3.22.0GHSA-m95q-7qp3-xv42

Zod denial of service vulnerability

Depend on this server? Get alerted when its CVEs change.Watch this server free →
// environment variables
To run this server yourself, you supply these values. They go in your own MCP client configuration and stay on your machine. The secret label means the value is sensitive, not that the server mishandles it.
🔐 secretHERMES_CLIENT_TOKENexport ="<client token>"
configHERMES_SCHEMEexport ="session"
configHERMES_SERVICEexport ="servicenow"
configHERMES_URLexport ="http://127.0.0.1:9876"
🔐 secretMS365_PASSWORD
configMS365_USERNAME
configSERVICENOW_COOKIE_FILE
configSERVICENOW_INSTANCE_URLexport ="https://yourinstance.service-now.com"
configSERVICENOW_LEGACY_AUTHexport ="true"
🔐 secretSERVICENOW_PASSWORDexport ="your-password"
🔐 secretSERVICENOW_SESSION_TOKENexport ="your-session-cookie"
configSERVICENOW_USERNAMEexport ="your-username"
🔐 secretSERVICENOW_USER_TOKENexport ="your-g_ck-token"
🔐 secretTOTP_SECRET
// quality suggestions

Dependencies

12 dependencies, 1 flagged: playwright

Tool annotations

No tools have read-only/destructive annotations

Add readOnlyHint or destructiveHint annotations to every tool so hosts can warn users before invoking.

All four hints declared on every tool

116/116 tools missing one or more hints — auth_browser (missing: readOnlyHint, destructiveHint, idempotentHint, openWorldHint); auth_status (missing: readOnlyHint, destructiveHint, idempotentHint, openWorldHint); auth_import_cookies (missing: readOnlyHint, destructiveHint, idempotentHint, openWorldHint), +113 more. OpenAI's directory rejects tools where any of the four hints are missing or non-boolean.

For every tool, set all four hints (readOnlyHint, destructiveHint, idempotentHint, openWorldHint) to explicit true/false values that match the handler’s actual behaviour.

Tests exist

No test files found

Add tests that exercise each declared tool.

No arbitrary install scripts

Has postinstall/preinstall script — runs arbitrary code on npm install

Remove postinstall/preinstall hooks unless they’re essential.

Production dependencies are patched

0 critical, 2 high severity in production deps — @modelcontextprotocol/sdk@1.0.0 (high), playwright@1.50.0 (high)

Run npm audit fix, or upgrade the affected packages to a non-vulnerable version.

Dependency freshness

1/8 production deps stale: prompts@2023-10-21 (2.8y)

Claim the listing to review these findings one by one and send us a correction where you disagree, straight to the team. Claiming also means we tell you when the grade moves, and reach you first if we find anything urgent.

// full audit trail
The findings above are the summary. The full trail, every check we ran, each deduction, the network hosts observed and the dependency advisories, goes to verified publishers, along with an alert whenever a new one lands. Verified publishers can also review each finding and dispute it in one click. Publisher corrections have sharpened several of our checks this month, because the maintainer knows the codebase better than any scanner.
// improvement guidance — verified publishers only
We have 5 concrete improvements we can share with the publisher of this MCP. Each comes with specific guidance to raise the trust score.
// embed badge in your README
[![M8ven Verified](https://m8ven.ai/badge/mcp/schwarztim/servicenow-mcp?variant=verified)](https://m8ven.ai/mcp/schwarztim/servicenow-mcp)
Shows verification status without the grade. Want the grade badge instead? Remove ?variant=verified from the URL.
commit: 7c07c04e5932f76284b40df29b0f76f043a8965d
code hash: 1414fcb0682b51c2f7f84526e135c4e767fc2107fae025ab9151a67fd1959732
view raw JSON →
Check MCPs from inside your assistant
Tool Check · MCP

Vetting this one by hand? Tool Check is an MCP that scores other MCPs. Add it once and ask Claude, ChatGPT, or any MCP client to grade a server, surface CVEs, check the publisher, and suggest safer alternatives — before you install.

https://m8ven.ai/api/mcp/tool-check
check_toolsearch_toolscompare_toolsrecommend_alternativescheck_publisherreport_concern
How to add it →Free · no account needed · works in any MCP client