Servicenow (schwarztim) MCP Server
servicenow-mcp
npm
v1.2.0
Published by schwarztim — no publish provenance, so origin is unverified, but the source is public: the repository link below is self-declared yet readable, so you can inspect the code before adopting it.
MCP server for ServiceNow ITSM with browser-based SSO authentication
The grade answers one question — how safe is this server for you to adopt — so it is computed in two auditable stages. Nothing below is an opinion or an LLM's guess; every line is a real term the deterministic engine applied, and the same input always yields the same number.
1. Threat score — 100 − 1.2 = 99. What the published surface and source actually contain:
| Points | What was found | Category |
|---|---|---|
| −1.2 | Package runs install-time scripts MTC-SUP-010 | supply-chain |
2. Client adoption risk — 99 − 4 = 95. Three small, subtract-only factors that reflect your risk in adopting it — a clean scan proves less on a powerful, unverified or barely-inspectable package, so the grade says so plainly:
| Points | Adoption-risk factor |
|---|---|
| −3 | capability blast radius (moderate) — client exposure if the model is manipulated |
| −1 | publisher verification (public source) — no provenance, but the source is public and inspectable |
Capability observations and info notes are shown under Findings but never scored.
Open any row's finding below for the file, line and evidence behind a deduction.
Findings 1
low Package runs install-time scripts (postinstall)MTC-SUP-010
"servicenow-mcp" executes postinstall script(s) at install time. An install hook runs at install time; most are routine build/setup, but review what it does before trusting it.
Evidence: playwright install chromium
Fix: Review the scripts; install with --ignore-scripts where possible and vet what they do.
Location: package servicenow-mcp
Tools 104
Each tool and what it can reach — statically extracted from the published source.
attachment_downloadingests untrusted inputacl_listno sensitive capabilityactivity_streamno sensitive capabilityaggregateno sensitive capabilityapprovals_approveno sensitive capabilityapprovals_pendingno sensitive capabilityapprovals_rejectno sensitive capabilityasset_createno sensitive capabilityasset_getno sensitive capabilityasset_listno sensitive capability
Show 94 more tools ↓
asset_updateno sensitive capabilityattachment_deleteno sensitive capabilityattachment_getno sensitive capabilityattachment_listno sensitive capabilityattachment_uploadno sensitive capabilityaudit_listno sensitive capabilityauth_browserno sensitive capabilityauth_statusno sensitive capabilitybatch_requestno sensitive capabilitycatalog_add_to_cartno sensitive capabilitycatalog_categoriesno sensitive capabilitycatalog_getno sensitive capabilitycatalog_get_cartno sensitive capabilitycatalog_item_variablesno sensitive capabilitycatalog_itemsno sensitive capabilitycatalog_orderno sensitive capabilitycatalog_order_nowno sensitive capabilitycatalog_submit_cartno sensitive capabilitychanges_createno sensitive capabilitychanges_getno sensitive capabilitychanges_listno sensitive capabilitychanges_tasksno sensitive capabilitychoice_listno sensitive capabilitycmdb_classesno sensitive capabilitycmdb_createno sensitive capabilitycmdb_getno sensitive capabilitycmdb_instance_listno sensitive capabilitycmdb_relationship_createno sensitive capabilitycmdb_relationshipsno sensitive capabilitycmdb_searchno sensitive capabilitycmdb_updateno sensitive capabilitycontract_getno sensitive capabilitycontract_listno sensitive capabilitycost_center_listno sensitive capabilitydepartment_listno sensitive capabilitydiscovery_schedule_listno sensitive capabilitydiscovery_status_listno sensitive capabilityemail_getno sensitive capabilityemail_listno sensitive capabilityevent_createno sensitive capabilityevent_listno sensitive capabilitygroups_listno sensitive capabilitygroups_membersno sensitive capabilityimport_set_loadno sensitive capabilityimport_set_load_multipleno sensitive capabilityimport_set_statusno sensitive capabilityincidents_add_commentno sensitive capabilityincidents_createno sensitive capabilityincidents_getno sensitive capabilityincidents_listno sensitive capabilityincidents_resolveno sensitive capabilityincidents_updateno sensitive capabilityjournal_listno sensitive capabilityknowledge_getno sensitive capabilityknowledge_searchno sensitive capabilitylicense_entitlementsno sensitive capabilitylicense_getno sensitive capabilitylicense_listno sensitive capabilitylocation_getno sensitive capabilitylocation_listno sensitive capabilitymetric_datano sensitive capabilitymetric_listno sensitive capabilitymy_contextno sensitive capabilitymy_work_queueno sensitive capabilitynotification_listno sensitive capabilityproblems_createno sensitive capabilityproblems_getno sensitive capabilityproblems_listno sensitive capabilityrequests_itemsno sensitive capabilityrequests_listno sensitive capabilityrole_listno sensitive capabilityscheduled_job_listno sensitive capabilityscheduled_job_runno sensitive capabilitysla_listno sensitive capabilitysoftware_listno sensitive capabilitysoftware_product_listno sensitive capabilitytable_createno sensitive capabilitytable_deleteno sensitive capabilitytable_getno sensitive capabilitytable_queryno sensitive capabilitytable_schemano sensitive capabilitytable_updateno sensitive capabilitytask_sla_getno sensitive capabilitytask_sla_listno sensitive capabilitytasks_my_tasksno sensitive capabilitytasks_updateno sensitive capabilityupdate_set_getno sensitive capabilityupdate_set_listno sensitive capabilityuser_rolesno sensitive capabilityusers_getno sensitive capabilityusers_searchno sensitive capabilityworkflow_context_getno sensitive capabilityworkflow_context_listno sensitive capabilityworkflow_listno sensitive capability
What this scan could not see
- Tools were statically extracted from the published source (104 recovered), not enumerated from a running server. Tool-poisoning, Unicode-smuggling, capability and toxic-flow analysis ran on this inferred surface, but a mis-parsed registration could be missed or mis-attributed, so tool-derived findings are capped below “confirmed”. To grade the real runtime surface, scan the running server: --command "npx -y <package>".
Versions 1
Scan history per published version. The engine is deterministic — the same version always yields the same score, so a changed score means the package itself changed.
| Version | Score | Findings | Engine | Scanned |
|---|---|---|---|---|
v1.2.0 latest |
A 95/100 | 1 | 1.13.0 | 2026-09-07 |
Embed this score
Show this server's live Trust Score in your README, docs or website. The badge is served straight from the registry and updates automatically after every rescan — no API key needed. It links back to this page, so anyone who sees the grade can also read the findings behind it instead of taking a number on faith.
Verify this score yourself
The score above is reproducible: the same package version always yields the same result. Run it locally or over the free API — no account, no LLM, fully deterministic.
npx mcptrustchecker scan servicenow-mcp --onlineOther implementations of Servicenow 8
Independent packages implementing the same tool, scanned with the same engine. Compare all 9 side by side →
The most comprehensive ServiceNow MCP server. 17 tools for full CRUD, CMDB graph traversal, background scripts, ATF testing, and more.
MCP server for ServiceNow - 19 tools + 5 resources for table, CMDB, system, and update set operations
ServiceNow MCP server for Claude AI integration
A highly customizable MCP server for ServiceNow API integration
The most comprehensive ServiceNow MCP server — 450+ tools across all modules. Integrates with Claude, ChatGPT, Gemini, Cursor, GitHub Copilot and any LLM.
Multi-instance ServiceNow MCP server with 40+ tools, natural language search, and local script development
More in Cloud & DevOps
Operator control CLI for AdGuard Home with an MCP adapter
interacting with Aliyun (Alibaba Cloud) services through This MCP server provides tools.
MCP server for the Aspro.Cloud REST API
MCP server for Atlassian Confluence and Jira Cloud APIs
AuroraCloud-first MCP server that exposes AuroraDocs workspace data to Claude Desktop and other AI agents
The official AWS Knowledge Base retrieval server using Bedrock Agent Runtime.