C

ServiceNow MCP Server

Community Python MCP server for ServiceNow incident management with natural language support

Overall Score68/100

Score Breakdown

Server Info

Package
mcp-server-servicenow
Registry
pypi
Maintainer
Community
Category
Customer Support
Tags
itsmticketsenterprise
Last Scanned
7 Apr 2026

Findings

8 issues

Authentication & Identity

MEDIUMHTTP/SSE transport supports per-request credentials

Supports stdio and SSE transports (selectable via --transport CLI flag). Offers three auth methods: Basic auth (username/password), Token auth (bearer token), and OAuth (client_id/client_secret/username/password). OAuth implementation uses password grant flow with refresh token support. Env vars loaded via python-dotenv. The server-side OAuth is for ServiceNow API auth, not MCP OAuth spec.

Remediation

Implement the MCP OAuth spec so users authenticate directly without platform mediation.

Tool Schema Quality

CRITICALDangerous execution surface: natural_language_update

Tool allows raw code/query execution which could be exploited via prompt injection.

Remediation

Use parameterized queries or validated command sets.

CRITICALDangerous execution surface: update_script

Tool allows raw code/query execution which could be exploited via prompt injection.

Remediation

Use parameterized queries or validated command sets.

Permission Granularity

HIGH1 destructive operations not isolated

Admin/delete tools are mixed with regular operations and cannot be independently disabled.

Remediation

Namespace admin tools separately for independent access control.

LLM Safety

MEDIUM1 tool descriptions are too vague

Short or generic descriptions make tool selection unreliable.

Remediation

Expand descriptions with specific actions, data types, and side effects.

HIGHTool descriptions contain instructional language

Descriptions include directives that could influence LLM behavior beyond tool selection.

Remediation

Remove instructional language. Descriptions should be purely factual.

MEDIUMOverlapping tool descriptions may cause wrong selection

Similar descriptions between tools could cause the LLM to pick the wrong one.

Remediation

Differentiate descriptions with unique use cases.

Maintenance & Trust

LOWCommunity-maintained by Michael Buckner

No official vendor backing.

Remediation

Seek vendor verification.

Tools

10 total
NameDescriptionRisk
create_incidentCreate a new incident in ServiceNowwrite
update_incidentUpdate an existing incident in ServiceNowwrite
search_recordsSearch for records in ServiceNow using text queryread
get_recordGet a specific record by sys_idread
perform_queryPerform a query against ServiceNowread
add_commentAdd a comment to an incident (customer visible)write
add_work_notesAdd work notes to an incident (internal)write
natural_language_searchSearch for records using natural languageread
natural_language_updateUpdate a record using natural languagewrite
update_scriptUpdate a ServiceNow scriptadmin

Deploy ServiceNow MCP Server securely

CompleteFlow adds per-user authentication, permission scoping, and audit logging to any MCP server out of the box.

Deploy on CompleteFlow