ServiceNow MCP server: Table API, CMDB, schema, update sets. Read-only mode, OAuth, audit log.
ServiceNow MCP Server is an MCP integration. ServiceNow MCP server: Table API, CMDB, schema, update sets. Read-only mode, OAuth, audit log.
The published pypi package is mcp-server-servicenow, version 0.9.1. Its declared MCP transport is stdio.
The package declares SERVICENOW_INSTANCE_URL (required): ServiceNow instance URL; SERVICENOW_AUTH_TYPE: Auth type: basic (default), oauth, or api_key; SERVICENOW_USERNAME: Username for basic auth or the OAuth password grant (omit for OAuth client credentials); SERVICENOW_PASSWORD: Password for basic auth or the OAuth password grant (omit for OAuth client credentials); SERVICENOW_CLIENT_ID: OAuth client ID (client credentials grant unless a username and password are set); SERVICENOW_CLIENT_SECRET: OAuth client secret; SERVICENOW_API_KEY: API key for api_key auth; SERVICENOW_API_KEY_HEADER: Header name for api_key auth (default x-sn-apikey, ServiceNow's default auth parameter); SERVICENOW_TOKEN_URL: OAuth token URL (default /oauth_token.do); SERVICENOW_TIMEOUT: HTTP timeout in seconds (default 30); SERVICENOW_READ_ONLY: Hide write tools and refuse non-GET requests; SERVICENOW_ALLOW_JS_QUERIES: Permit arbitrary javascript: in caller queries; SERVICENOW_AUDIT_LOG: Audit log target: stderr (default), off, or a file path.
Check the maintainer’s instructions for account access, authentication and the supported client configuration. Once connected, inspect the tools your client receives and try a small task that matches the server’s stated purpose. The registry description does not include a verified, complete tool list.
View the publisher’s registry entry · Project repository. This profile uses version 0.9.1 from the registry. Registration identifies the publisher namespace; it does not establish that this is a first-party integration for every service it connects.
Browse related security & identity MCP servers for tools that cover the same kind of work.
| Variable | Description | Required |
|---|---|---|
| SERVICENOW_INSTANCE_URL | ServiceNow instance URL | Yes |
| SERVICENOW_AUTH_TYPE | Auth type: basic (default), oauth, or api_key | Check documentation |
| SERVICENOW_USERNAME | Username for basic auth or the OAuth password grant (omit for OAuth client credentials) | Check documentation |
| SERVICENOW_PASSWORD | Password for basic auth or the OAuth password grant (omit for OAuth client credentials) | Check documentation |
| SERVICENOW_CLIENT_ID | OAuth client ID (client credentials grant unless a username and password are set) | Check documentation |
| SERVICENOW_CLIENT_SECRET | OAuth client secret | Check documentation |
| SERVICENOW_API_KEY | API key for api_key auth | Check documentation |
| SERVICENOW_API_KEY_HEADER | Header name for api_key auth (default x-sn-apikey, ServiceNow's default auth parameter) | Check documentation |
| SERVICENOW_TOKEN_URL | OAuth token URL (default /oauth_token.do) | Check documentation |
| SERVICENOW_TIMEOUT | HTTP timeout in seconds (default 30) | Check documentation |
| SERVICENOW_READ_ONLY | Hide write tools and refuse non-GET requests | Check documentation |
| SERVICENOW_ALLOW_JS_QUERIES | Permit arbitrary javascript: in caller queries | Check documentation |
| SERVICENOW_AUDIT_LOG | Audit log target: stderr (default), off, or a file path | Check documentation |
Queries the NIST National Vulnerability Database (NVD) via its API.
Scans projects for security vulnerabilities and automatically updates vulnerable dependencies using Trivy.
Search 1,032 verified smart contract vulnerability findings from Sherlock audits by pattern.
Remote MCP for A2A dependency inspector MCP, structured receipts, audit logs, and reviewer-ready evi
Remote MCP for A2A failure replay MCP, structured receipts, audit logs, and reviewer-ready evidence.
A comprehensive Model Context Protocol (MCP) server for ABP.IO framework with 48+ tools for application development, UI generation, and management