ServiceNow MCP Server

ServiceNow MCP server: 65 tools over the full REST surface (Table, Aggregate, Attachment, Import Set, Batch, CMDB/IRE, Catalog, Change, Knowledge, Email) with script intelligence, flow tracing, ATF runs, multi-instance profiles and Mermaid diagrams.

Documentation

servicenow-mcp-ai β€” ServiceNow MCP Server

πŸ“– Documentation site β†’

A Model Context Protocol server that lets an MCP client (VS Code, Claude Desktop, etc.) run commands against a ServiceNow instance through its REST APIs β€” Table, Aggregate, Attachment, Import Set, Batch and CMDB, plus the Service Catalog, Change Management and Knowledge plugin APIs. Credentials are kept in a local env file and can be updated at runtime through a tool.

Contents: Features Β· Requirements Β· Setup Β· Configure credentials Β· Run / debug Β· Develop Β· Tools Β· Resources Β· Prompts Β· Project structure Β· Security notes Β· Project documentation

Features

  • Full Table API: query, read, create, update and delete records on any table, with encoded queries, field selection and pagination.
  • Extra ServiceNow APIs: Aggregate (Stats), Attachment (list/upload/download/delete), Import Set, Batch (many REST calls in a single request), plus table/column metadata (sys_db_object, sys_dictionary).
  • Process & plugin APIs: CMDB (class-aware CI CRUD + meta via IRE), Service Catalog (browse/order items), Change Management (typed creation + conflict detection) and Knowledge (article search). Plugin-scoped APIs report clearly when not active on the instance.
  • Script intelligence: read and search the instance's own code (business rules, script includes, client scripts, UI policies/actions, scheduled jobs, transform/REST scripts, ACLs) and get a table's full automation picture β€” all read-only over the Table API.
  • Flow tracing & code checking (Phase 8): deterministically trace what a table operation runs (flows package β€” business rules, flows, workflows and notifications, in order, with a Mermaid flowchart), read Flow Designer flows and run history, and lint scripts against a local rule set with an aggregate code-health report (codecheck). Run ATF tests via the CI/CD API (atf, opt-in, non-default β€” the run tools execute on the instance).
  • Self-documentation: a local Markdown knowledge base (read/write/search) plus deterministic Mermaid generators (ER diagrams from references, record-lifecycle flowcharts from business rules) so the server builds durable, reusable context.
  • Prompts: ready-made workflows (incident triage, change impact analysis, document a table) that orchestrate the tools.
  • Tool packages: load only the tool groups you need via SN_TOOL_PACKAGES (default profile core; all enables everything).
  • Basic or OAuth 2.0 authentication over HTTPS; the password/token is never echoed back.
  • Least-privilege controls: table allow/deny lists and a global read-only mode.
  • Resilience: per-request timeout, retry with backoff and Retry-After, SSRF guard, and a result-size guard.
  • MCP tool annotations and resources, structured error payloads, and structured logging on stderr.
  • Credentials in an env file (project, ~/.config, or SN_ENV_FILE), updatable at runtime via servicenow_set_credentials.

Requirements

  • Node.js 20+ (enforced: engines + a runtime guard with a clear message; the project targets the version in .nvmrc).

Setup

From source (for development):

npm install
npm run build

Or run the published package directly, without cloning:

npx servicenow-mcp-ai

Register it with an MCP client (Claude Desktop, VS Code Chat, the Inspector…) by pointing the server command at npx:

{
  "mcpServers": {
    "servicenow": {
      "command": "npx",
      "args": ["-y", "servicenow-mcp-ai"]
    }
  }
}

Credentials are read from ~/.config/servicenow-mcp-ai/.env (or real environment variables) β€” see below.

Configure credentials

Credentials live in .env at the project root (git-ignored):

SN_INSTANCE=your-instance.service-now.com
[email protected]
SN_PASSWORD=your-password

SN_INSTANCE accepts dev12345, dev12345.service-now.com or a full https:// URL.

You can also set or change them at runtime by calling the servicenow_set_credentials tool β€” the new values are written straight back to the env file.

The env file is resolved in this order: SN_ENV_FILE, then ~/.config/servicenow-mcp-ai/.env (XDG) if present, then the project-root .env. A global/npx install therefore writes to your user config rather than into node_modules. Real environment variables always take precedence over the file.

OAuth 2.1 (Authorization Code + PKCE) β€” recommended

Register an Authorization Code OAuth API endpoint in ServiceNow with a loopback redirect URL (e.g. http://localhost:53682/callback), set SN_OAUTH_CLIENT_ID (and SN_OAUTH_CLIENT_SECRET for a confidential client), then run the one-time interactive login:

npx servicenow-mcp-ai login

It opens the browser, you approve, and the obtained refresh token is stored in your env file. The server then runs non-interactively (refresh_token grant) β€” no password is ever stored. PKCE (S256) is always used.

The OAuth 2.0 password grant (ROPC) is deprecated in OAuth 2.1 and disabled on many instances; prefer login. client_credentials and refresh_token grants remain supported for service accounts. See .env.example.

Supported authentication methods

Every inbound REST auth method ServiceNow offers is covered:

MethodSN_AUTHSetNotes
BasicbasicSN_USER / SN_PASSWORDDefault.
OAuth 2.1 β€” Authorization Code + PKCEoauthnpx servicenow-mcp-ai loginRecommended. Interactive, stores a refresh token.
OAuth β€” Client CredentialsoauthSN_OAUTH_GRANT=client_credentialsService-to-service.
OAuth β€” Refresh TokenoauthSN_OAUTH_GRANT=refresh_token + SN_OAUTH_REFRESH_TOKENSet by login.
OAuth β€” JWT BeareroauthSN_OAUTH_GRANT=jwt_bearer + SN_OAUTH_JWT_KEYRS256 assertion; no password.
OAuth β€” Password (ROPC)oauthSN_OAUTH_GRANT=passwordDeprecated.
API KeyapikeySN_API_KEYx-sn-apikey header.
Bearer tokentokenSN_BEARER_TOKENPre-obtained token, used verbatim.
Mutual TLS (client cert)none (or layered)SN_TLS_CLIENT_CERT / _KEYCert maps to a user; needs optional undici.

Environment variables

All settings are read from .env (or the real process environment, which takes precedence). Only the first three are required; the rest are optional tuning knobs. See .env.example for a template.

VariableRequiredDefaultDescription
SN_INSTANCEyesβ€”Instance name, host, or https:// URL (dev12345, dev12345.service-now.com).
SN_USERyesβ€”ServiceNow username for Basic auth.
SN_PASSWORDyesβ€”ServiceNow password. Never logged or returned by any tool.
SN_TIMEOUT_MSno30000Per-request timeout in milliseconds.
SN_MAX_RETRIESno2Retries for transient failures (429/5xx, network errors). Non-idempotent writes are only retried on connect errors.
SN_MAX_RECORDSno10000Hard cap on records returned by a fetchAll query.
SN_MAX_RESULT_CHARSno100000Character budget for a query result before it is truncated for the client.
SN_ALLOWED_HOSTSnoβ€”Comma-separated allow-list of permitted hosts (for custom or sovereign-cloud domains). When set, only matching hosts are contacted. When unset, only *.service-now.com instances are allowed and internal/loopback hosts are blocked (SSRF guard).
SN_AUTHnoautoAuth method: basic, oauth, apikey, token or none (cert-only mTLS). Auto-detected from the keys present (API key β†’ bearer β†’ OAuth β†’ Basic).
SN_API_KEYnoβ€”ServiceNow Inbound API Key, sent as the x-sn-apikey header (enables apikey mode).
SN_BEARER_TOKENnoβ€”A pre-obtained bearer token, sent verbatim as Authorization: Bearer … (enables token mode).
SN_OAUTH_CLIENT_IDnoβ€”OAuth client id (its presence enables OAuth).
SN_OAUTH_CLIENT_SECRETnoβ€”OAuth client secret.
SN_OAUTH_GRANTnopasswordOAuth grant: password (deprecated β€” ROPC), client_credentials, refresh_token or jwt_bearer. The login command sets this to refresh_token for you.
SN_OAUTH_JWT_KEYnoβ€”PEM private key for the jwt_bearer grant (or SN_OAUTH_JWT_KEY_FILE). Optional claims: SN_OAUTH_JWT_ISS (default client id), SN_OAUTH_JWT_SUB (default SN_USER), SN_OAUTH_JWT_AUD, SN_OAUTH_JWT_KID, SN_OAUTH_JWT_EXP_SEC (default 300).
SN_OAUTH_REFRESH_TOKENnoβ€”Refresh token for the refresh_token grant. Obtained automatically by npx servicenow-mcp-ai login (Authorization Code + PKCE).
SN_OAUTH_REDIRECT_URInohttp://localhost:53682/callbackLoopback redirect URL for the PKCE login flow. Must match the redirect registered on the OAuth endpoint.
SN_OAUTH_SCOPEnoβ€”Optional OAuth scope requested during login.
SN_TLS_CLIENT_CERTnoβ€”Client certificate (PEM) for mutual TLS (or SN_TLS_CLIENT_CERT_FILE). With SN_TLS_CLIENT_KEY it presents a client cert; ServiceNow's mutual-auth profile maps it to a user. Needs the optional undici package (npm i undici).
SN_TLS_CLIENT_KEYnoβ€”Private key (PEM) for the client certificate (or SN_TLS_CLIENT_KEY_FILE).
SN_TLS_CAnoβ€”Optional CA bundle (PEM) to trust (or SN_TLS_CA_FILE). SN_TLS_REJECT_UNAUTHORIZED=false disables verification (not recommended).
SN_TABLES_ALLOWnoβ€”Comma-separated table allowlist; when set, only these tables are reachable.
SN_TABLES_DENYnoβ€”Comma-separated table denylist; always wins over the allowlist.
SN_READONLYnofalseWhen truthy, refuse every create/update/delete.
SN_LOG_LEVELnoinfoLog verbosity on stderr: error, warn, info, debug.
SN_ENV_FILEnoβ€”Explicit path to the env file to read/write.
SN_TOOL_PACKAGESnocoreComma/space-separated tool packages or profiles to enable. Profiles: core (default) and all. Packages: table, schema, aggregate, attachment, importset, batch, catalog, change, knowledge, cmdb, scripts, flows, codecheck, docs, instance, email, atf. The admin tools are always on. atf runs tests on the instance β€” enable it only on a non-production instance.
SN_PACKAGES_DENYnoβ€”Comma/space-separated packages to exclude even if enabled by SN_TOOL_PACKAGES. The only way to block plugin APIs (catalog, change, knowledge…) β€” the table policy does not see them.
SN_PACKAGES_READONLYnoβ€”Comma/space-separated packages whose write tools are not registered; their read tools stay. Per-package complement to the global SN_READONLY.
SN_SCHEMA_CACHE_TTL_SECno300TTL for the near-static schema reads cache (list_tables, describe_table, get_cmdb_meta). 0 disables caching.
SN_MAX_CONCURRENTno4Maximum parallel HTTP requests to the instance (simple in-process semaphore).
SN_INCLUDE_REF_LINKSnofalseReference fields come back without their link URLs by default (token savings). Set true to include them.
SN_RESULT_PRETTYnofalseTool results are compact JSON by default (pretty-printing ~doubles tokens). Set true for indented output.
SN_DOCS_DIRnodocs/instanceDirectory the docs package reads/writes Markdown in. Relative paths resolve against the working directory.
SN_CODESEARCHnofalseOpt in to the Code Search API (sn_codesearch) for servicenow_search_code (FT-7). When true and the plugin is active it replaces the LIKE iteration; falls back to LIKE on any failure.
SN_PROFILE_<NAME>_*noβ€”Named connection profiles: SN_PROFILE_DEV_INSTANCE / _USER / _PASSWORD define profile dev. The bare SN_INSTANCE/SN_USER/SN_PASSWORD keys are the default profile.
SN_ACTIVE_PROFILEnodefaultWhich profile tools use. Switch at runtime with servicenow_use_instance (persisted to the env file).

Run / debug

  • VS Code: open the Command Palette and start the server defined in .vscode/mcp.json, then use it from Chat.
  • MCP Inspector: npm run inspector
  • Directly: npm start

Develop

npm run check     # full gate: build, lint, format check, coverage-gated tests, prod audit
npm test          # unit tests only (node:test; needs a prior npm run build)
npm run lint      # ESLint (flat config + typescript-eslint)
npm run format    # format with Prettier

See CONTRIBUTING.md for the conventions (one commit per task, tests ship with the change, generated docs).

Tools

This table is generated from the tool registrations β€” edit the tool definitions in src/tools/, then run npm run docs:readme.

PackageToolRead-onlyDescription
tableservicenow_query_tableyesRead records from any ServiceNow table through the Table API
tableservicenow_get_recordyesRead a single record from a table by its sys_id
tableservicenow_create_recordnoCreate a new record in a table with the given field values
tableservicenow_update_recordnoUpdate fields on an existing record identified by its sys_id
tableservicenow_delete_recordnoDelete a record from a table by its sys_id
schemaservicenow_list_tablesyesList tables from sys_db_object, optionally filtered by a name or label fragment
schemaservicenow_describe_tableyesList a table's columns (name, label, type, mandatory, reference) from sys_dictionary
aggregateservicenow_aggregateyesCompute server-side aggregates (count, avg, min, max, sum) over a table via the Stats API, with optional gr…
attachmentservicenow_list_attachmentsyesList attachment metadata, optionally scoped to a specific record (table + sys_id)
attachmentservicenow_get_attachmentyesRead a single attachment's metadata by its sys_id
attachmentservicenow_download_attachmentyesDownload an attachment's bytes, returned as base64
attachmentservicenow_upload_attachmentnoAttach a file (provided as base64) to a record identified by table + sys_id
attachmentservicenow_delete_attachmentnoDelete an attachment by its sys_id
importsetservicenow_insert_import_set_rownoInsert a single row into a staging table and run its transform map
importsetservicenow_get_import_set_rowyesRead the transform outcome for a previously inserted staging row by its sys_id
batchservicenow_batchnoExecute several ServiceNow REST sub-requests in a single HTTP round-trip via the Batch API
catalogservicenow_list_catalogsyesList the Service Catalogs available on the instance (Service Catalog API)
catalogservicenow_list_catalog_categoriesyesList the categories within a service catalog
catalogservicenow_list_catalog_itemsyesSearch/list orderable catalog items, optionally by text or category
catalogservicenow_get_catalog_itemyesGet a catalog item, including its order variables, by sys_id
catalogservicenow_order_catalog_itemnoOrder a catalog item directly ('order now')
changeservicenow_list_changesyesList change requests through the Change Management API
changeservicenow_get_changeyesGet a single change request by sys_id
changeservicenow_create_changenoCreate a normal, standard or emergency change
changeservicenow_update_changenoUpdate fields on a change request by sys_id
changeservicenow_change_conflictsnoRead schedule conflicts for a change, or recalculate them (calculate=true)
knowledgeservicenow_search_knowledgeyesFull-text search of knowledge articles (Knowledge API), with optional encoded query and paging
knowledgeservicenow_get_knowledge_articleyesGet a knowledge article (content and metadata) by sys_id
knowledgeservicenow_knowledge_highlightsyesList featured or most-viewed knowledge articles for the current user
cmdbservicenow_list_cisyesList configuration items of a CMDB class through the class-aware CMDB Instance API
cmdbservicenow_get_ciyesGet a CI with its attributes and inbound/outbound relations by class and sys_id
cmdbservicenow_create_cinoCreate a CI via the CMDB Instance API (routed through Identification & Reconciliation)
cmdbservicenow_update_cinoUpdate a CI's attributes via the CMDB Instance API (IRE)
cmdbservicenow_get_cmdb_metayesGet the schema/metadata of a CMDB class (attributes, relationship rules) from the CMDB Meta API
scriptsservicenow_list_scriptsyesList script artefacts of one type as compact metadata (no source code)
scriptsservicenow_get_scriptyesRead one script artefact in full, including its source code and execution context
scriptsservicenow_search_codeyesSearch script source for a literal substring across one or all script types
scriptsservicenow_table_logicyesAssemble the automation that runs on a table: business rules (ordered by when+order), client scripts, UI po…
flowsservicenow_trace_table_eventyesDeterministically trace what ServiceNow would run for a table operation, in execution order: display/before…
flowsservicenow_list_flowsyesList Flow Designer flows (sys_hub_flow) or legacy workflows (kind: 'workflow') as compact metadata
flowsservicenow_get_flowyesGet a structured view of one flow or workflow: its trigger (table/condition/when) and ordered steps
flowsservicenow_get_flow_runsyesRead flow execution evidence from sys_flow_context β€” by flow sys_id or by the record (document) it ran agai…
codecheckservicenow_lint_scriptyesRun deterministic code-quality rules over one script artefact (hard-coded sys_ids/URLs, unbounded or in-loo…
codecheckservicenow_lint_tableyesLint every active business rule, client script and UI policy of a table (via table_logic), returning per-sc…
codecheckservicenow_code_healthnoAggregate code-health picture: script counts by type, and (when a table scope is given) the lint findings b…
docsservicenow_docs_listyesList the Markdown documents in the local instance-documentation folder (SN_DOCS_DIR)
docsservicenow_docs_readyesRead one Markdown document from the local instance-documentation folder
docsservicenow_docs_searchyesSearch the local instance documentation for a substring; returns a snippet per match
docsservicenow_docs_writenoCreate or overwrite a Markdown document in the local docs folder and refresh index.md
docsservicenow_generate_er_diagramyesBuild a Mermaid erDiagram from sys_dictionary: an entity per table plus a relationship for every reference …
docsservicenow_generate_table_flowyesBuild a Mermaid flowchart of a record's lifecycle on a table, grouping active business rules by phase (disp…
instanceservicenow_snapshot_instancenoDownload the instance's structural metadata into the local docs folder (SN_DOCS_DIR//): tables.md+…
instanceservicenow_compare_instancesnoDiff two connection profiles: tables present in only one, common columns whose type/mandatory/reference dif…
emailservicenow_send_emailnoSend an email through the instance's Email API, optionally associated with a record (table + sys_id)
emailservicenow_get_emailyesRead a sent/received email record by its sys_id (Email API)
atfservicenow_list_atf_testsyesList Automated Test Framework tests (sys_atf_test) as metadata: name, active flag, description
atfservicenow_list_atf_suitesyesList Automated Test Framework test suites (sys_atf_test_suite) as metadata
atfservicenow_run_atf_testnoRun a single ATF test through the CI/CD API
atfservicenow_run_atf_suitenoRun an ATF test suite through the CI/CD API
atfservicenow_get_atf_resultyesPoll an ATF run by its execution id: status, percent complete and message (CI/CD progress API)
adminservicenow_set_credentialsnoSave or update the ServiceNow connection credentials
adminservicenow_list_instancesyesList the configured ServiceNow connection profiles (instances): name, host, user, read-only flag and whethe…
adminservicenow_use_instancenoSwitch the active ServiceNow connection profile (persisted to the env file)
adminservicenow_get_statusyesShow the configured instance, user, auth mode and access policy, and whether credentials are complete
adminservicenow_test_connectionyesVerify that the configured credentials actually work: reads one sys_user record and reports ok/status/latency

All tools carry MCP annotations (readOnlyHint, destructiveHint, idempotentHint) so clients can apply the right confirmation UX.

Tool packages

Tools are grouped into packages so you can expose only what a given client needs (fewer tools keep the model focused). Set SN_TOOL_PACKAGES to a comma/space separated list of profiles or package names:

  • core (default) β€” table, schema, aggregate, attachment.
  • all β€” every package below.
  • Individual packages: table, schema, aggregate, attachment, importset, batch, catalog, change, knowledge, cmdb, scripts, flows, codecheck, docs, instance, email, atf.

The admin tools (servicenow_set_credentials, servicenow_get_status) are always registered, regardless of the active packages. Unknown names are ignored. servicenow_get_status reports the resolved enabledPackages.

# Only table + batch tools (plus the always-on admin tools)
SN_TOOL_PACKAGES=table,batch

Examples

Query the 5 most recent active incidents:

// servicenow_query_table
{
  "table": "incident",
  "query": "active=true^ORDERBYDESCsys_created_on",
  "fields": ["number", "short_description", "priority", "state"],
  "limit": 5,
}

Create an incident:

// servicenow_create_record
{
  "table": "incident",
  "fields": {
    "short_description": "Printer on 3rd floor is down",
    "urgency": "2",
    "impact": "2",
  },
}

Update credentials at runtime:

// servicenow_set_credentials
{
  "instance": "dev98765.service-now.com",
  "user": "admin",
  "password": "β€’β€’β€’β€’β€’β€’",
}

Resources

Read-only metadata is also exposed as MCP resources, so clients can attach it declaratively instead of calling a tool:

URIDescription
servicenow://statusConnection status, auth mode, access policy.
servicenow://tablesList of tables from sys_db_object.
servicenow://schema/{table}Columns of a table from sys_dictionary.
servicenow://docs/{path}A Markdown document from the local docs store.

Prompts

Ready-made workflows are exposed as MCP prompts; they orchestrate the tools and insist on reading real values from the instance:

PromptArgumentPurpose
servicenow_incident_triageincidentSummarize, assess priority, categorize and recommend next steps.
servicenow_change_impact_analysischangeAffected CIs, schedule conflicts and a go/no-go call.
servicenow_document_tabletableSchema + automation + diagrams β†’ saved Markdown doc.

Project structure

.
β”œβ”€β”€ .env                   # credentials (git-ignored; or ~/.config/servicenow-mcp-ai/.env)
β”œβ”€β”€ .env.example           # template
β”œβ”€β”€ .github/workflows/     # CI: build + lint + test
β”œβ”€β”€ .vscode/mcp.json       # VS Code MCP server registration
β”œβ”€β”€ eslint.config.js       # ESLint flat config
β”œβ”€β”€ .prettierrc.json       # Prettier config
β”œβ”€β”€ src/
β”‚   β”œβ”€β”€ index.ts           # bootstrap: load env, register, connect stdio
β”‚   β”œβ”€β”€ registry.ts        # registers all tool groups
β”‚   β”œβ”€β”€ resources.ts       # MCP resources (status, tables, schema, docs)
β”‚   β”œβ”€β”€ prompts.ts         # MCP prompts (triage, change impact, document table)
β”‚   β”œβ”€β”€ http.ts            # shared REST client (auth, retry, SSRF)
β”‚   β”œβ”€β”€ auth.ts            # Basic + OAuth 2.0 providers
β”‚   β”œβ”€β”€ host.ts            # host resolution + SSRF guard
β”‚   β”œβ”€β”€ policy.ts          # table allow/deny + read-only guards
β”‚   β”œβ”€β”€ settings.ts        # numeric env settings
β”‚   β”œβ”€β”€ logging.ts         # structured stderr logger
β”‚   β”œβ”€β”€ result.ts          # tool results + structured errors
β”‚   β”œβ”€β”€ servicenow.ts      # Table API client
β”‚   β”œβ”€β”€ config.ts          # env file read/write + location
β”‚   β”œβ”€β”€ api/               # aggregate, attachment, import set, batch, catalog, change, knowledge, cmdb, scripts, diagrams, docs, meta
β”‚   └── tools/             # tool registration per API group
β”œβ”€β”€ test/                  # node:test unit + mock-fetch tests
└── build/                 # compiled output (after npm run build)

Note on names: the npm package is servicenow-mcp-ai (the unscoped servicenow-mcp was already taken); the GitHub repository is servicenow-mcp; the local working folder is sincronia-mpc (a historical mpc/mcp typo). All three differences are cosmetic and do not affect the build or runtime.

Security notes

  • The env file is git-ignored β€” do not commit real credentials.
  • The env file is written owner-only (0600) β€” it holds a plaintext password.
  • The server uses the stdio transport and only logs to stderr; secrets and raw encoded queries are never logged.
  • The password/token is never returned by any tool.
  • Hosts are restricted: without SN_ALLOWED_HOSTS, only *.service-now.com instances are contacted (internal/loopback always blocked), so a redirected or mistyped host cannot silently receive credentials. Set SN_ALLOWED_HOSTS to opt in a custom or sovereign-cloud domain.
  • Prefer OAuth 2.0 over Basic where possible (SN_OAUTH_CLIENT_ID).
  • Apply least privilege with SN_TABLES_ALLOW / SN_TABLES_DENY and SN_READONLY=true for read-only deployments.
  • Table policy does not cover plugin APIs. SN_TABLES_DENY=change_request blocks the Table API path, but the Change Management API (sn_chg_rest) can still read/write changes. To restrict the plugin-backed surfaces use SN_PACKAGES_DENY (drop the whole package) or SN_PACKAGES_READONLY (register only its read tools). The Batch API obeys both axes too: a sub-request to a denied package's path is refused, and writes to a read-only package are blocked β€” a batch cannot be used to bypass the package policy.

Project documentation

DocumentContents
ARCHITECTURE.mdLayered architecture, Mermaid diagrams (modules, request lifecycle, security model, auth, packages), condensed ADRs
PRODUCT-STATE.mdCurrent product state: API coverage map, quality status, history timeline, roadmap
ROADMAP.mdForward plan: ship 1.0.0, Phase 8 (flow testing + code analysis), Phase 9 (competitive differentiators), optional and deferred items
COMPETITIVE-ANALYSIS.mdPositioning vs the official ServiceNow MCP Server Console: comparison, where it structurally lags, the Phase 9 boost plan, and platform risks
IMPLEMENTATION-PLAN.mdDetailed specs for the upcoming phases (harness 2.0, multi-instance, flow testing)
DONE.md / TODO.mdCompleted work with commit refs / remaining decisions
WORKLOG.md / CHANGELOG.mdDetailed work journal / user-facing changelog
CONTRIBUTING.md / SECURITY.mdDev setup, gates and conventions / security model and reporting

Trademark

servicenow-mcp-ai is an independent, community-built project. It is not affiliated with, endorsed by, or sponsored by ServiceNow, Inc.

"ServiceNow", the ServiceNow logo, "Now", and related marks are trademarks or registered trademarks of ServiceNow, Inc. in the United States and other countries. They are used in this project's name and documentation only nominatively β€” to identify the platform this software interoperates with β€” and no affiliation or endorsement is implied. All other product names and marks are the property of their respective owners.

This project is licensed under the MIT License; that license covers the source code and does not grant any rights to use the ServiceNow trademarks.