NowAIKit

Search the full NowAIKit tool catalog (400+ tools) by keyword to discover the right tool without loading every definition. Returns matching tool names + descriptions ranked by relevance. Use this FIRST when you are unsure which tool to call. Especially useful with MCP_TOOL_DISCOVERY=lean, which exposes only a small core set plus this search.

Query ServiceNow records with filtering, field selection, pagination, and sorting

Get the structure and field information for a ServiceNow table

Retrieve complete details of a specific record by sys_id

Create a new record in any ServiceNow table (requires WRITE_ENABLED=true). Pass dry_run=true to preview the resolved payload without writing.

Update an existing record in any ServiceNow table (requires WRITE_ENABLED=true). Pass dry_run=true to preview a before→after field diff without writing.

Delete a record from any ServiceNow table (requires WRITE_ENABLED=true). Pass dry_run=true to preview the record that would be deleted without deleting it.

Lint-check a ServiceNow encoded query BEFORE running it: validates javascript: expressions against the safe function allowlist, length limits, and common mistakes (e.g. using = instead of ^, raw spaces). Returns { valid, issues, suggestions }.

Look up user details by email or username

Find assignment group details by name or sys_id

Search for configuration items (CIs) in the CMDB

Get complete information about a specific configuration item

Show parent and child relationships for a CI

List discovery schedules and their run status

List MID servers and verify they are healthy

Monitor critical infrastructure events

Get CMDB data quality metrics (completeness of server and network CI data)

View service dependencies and related CIs for impact analysis

Search ServiceNow using plain English

Update a record using natural language (requires WRITE_ENABLED=true)

List all configured ServiceNow instances (multi-instance / multi-customer support)

Switch the active ServiceNow instance for this session

Get the currently active ServiceNow instance name and URL

[Write] Create a relationship between two CMDB Configuration Items

Analyze the downstream impact of a Configuration Item change or outage

[Write] Trigger a ServiceNow Discovery scan for network/infrastructure

Create many records in one table in a single call, tracking every created sys_id and returning a rollback_token. With rollback_on_error=true, a mid-way failure deletes everything already created so the batch is all-or-nothing. Supports dry_run. Requires WRITE_ENABLED=true.

Delete a set of previously-created records, e.g. the rollback_token returned by bulk_create_records. Requires WRITE_ENABLED=true.

Compare two configured ServiceNow instances: record counts for a table (with optional query) and/or a specific system property value. Useful for dev→prod drift detection and governance.

Create a new incident record (requires WRITE_ENABLED=true)

Get full details of an incident by number (e.g. INC0012345) or sys_id

Update fields on an existing incident (requires WRITE_ENABLED=true)

Resolve an incident with resolution code and notes (requires WRITE_ENABLED=true)

Close a resolved incident (requires WRITE_ENABLED=true)

Add an internal work note to any ITSM record (requires WRITE_ENABLED=true)

Add a customer-visible comment to any ITSM record (requires WRITE_ENABLED=true)

Create a new problem record (requires WRITE_ENABLED=true)

Get full details of a problem by number (PRB...) or sys_id

Update fields on an existing problem (requires WRITE_ENABLED=true)

Resolve a problem with root cause and resolution notes (requires WRITE_ENABLED=true)

Create a new change request (requires WRITE_ENABLED=true)

Get full details of a change request by number (CHG...) or sys_id

Update fields on a change request (requires WRITE_ENABLED=true)

List change requests with optional filtering by state or query

Move a change request to "Requested" state for approval (requires WRITE_ENABLED=true)

Close a change request with close code and notes (requires WRITE_ENABLED=true)

[Write] Schedule a Change Advisory Board (CAB) meeting

Get details of any task record by number or sys_id

Update fields on a task record (requires WRITE_ENABLED=true)

List tasks assigned to the currently configured user

Mark a task as complete (requires WRITE_ENABLED=true)

List all knowledge bases available in the instance

Search knowledge base articles by keyword

Get the full content of a knowledge article by number (KB...) or sys_id

Create a new knowledge article (requires WRITE_ENABLED=true)

Update a knowledge article (requires WRITE_ENABLED=true)

Publish a draft knowledge article (requires WRITE_ENABLED=true)

[Write] Retire a knowledge article (mark as outdated)

List available service catalog items

Search the service catalog for items matching a keyword

Get full details of a catalog item including its variables

Create a new service catalog item (requires WRITE_ENABLED=true)

Update an existing catalog item (requires WRITE_ENABLED=true)

Order a service catalog item (requires WRITE_ENABLED=true)

Create an approval rule that automatically generates approval requests when a record matches given conditions (requires WRITE_ENABLED=true). Uses the sysapproval_rule table.

List approvals pending for the currently configured user

List approval requests with optional filters

Approve a pending approval request (requires WRITE_ENABLED=true)

Reject a pending approval request (requires WRITE_ENABLED=true)

Get SLA breach status for a specific task or incident

List active SLA records with optional filters

[Write] Add a form variable to a service catalog item

[Write] Create a UI policy for a catalog item form

List users with optional search filter

Create a new user account (requires WRITE_ENABLED=true)

Update a user account (requires WRITE_ENABLED=true)

List groups with optional search filter

Create a new assignment group (requires WRITE_ENABLED=true)

Update a group (requires WRITE_ENABLED=true)

Add a user to a group (requires WRITE_ENABLED=true)

Remove a user from a group (requires WRITE_ENABLED=true)

List saved reports in the instance (latest release: /api/now/reporting)

Get the definition and metadata of a saved report

Run a grouped aggregate (COUNT, SUM, AVG) query on any table (latest release: /api/now/stats/{table})

Get time-bucketed trend data for a table (useful for monthly/weekly trend charts)

Read Performance Analytics scorecard/indicator data (requires PA plugin; GET /api/now/pa/scorecards). Pass an indicator sys_id, or a PA widget sys_id to resolve its indicator.

Export raw table data as structured JSON for use in external reports

Retrieve system log entries for debugging or auditing. Set app_scope=true to read the scoped-application log (syslog_app_scope), where scoped gs.info()/gs.log() output lands, instead of the global syslog.

List scheduled jobs and their run schedules

Get full details of a scheduled job by sys_id or name

Create a new scheduled script execution job (requires WRITE_ENABLED=true)

Update a scheduled job (requires WRITE_ENABLED=true)

Immediately execute a scheduled job on-demand (requires WRITE_ENABLED=true)

Create a new saved report on any table (requires WRITE_ENABLED=true)

Update an existing saved report definition (requires WRITE_ENABLED=true)

List recent run history for scheduled jobs (success/failure log)

[Write] Schedule a report for recurring email delivery

[Write] Create a Key Performance Indicator from ServiceNow data

Generate a branded PDF or PPTX report from capability analysis results. Call this after completing a scan, review, or audit to create a management-ready document with charts, tables, and ServiceNow links. Supports single capability (content) or multiple capabilities (sections) in one combined report.

List ATF test suites in the instance

Get details of a test suite including test count

Execute an ATF test suite (requires ATF_ENABLED=true)

List ATF test cases, optionally filtered by suite

Get details of a specific test case

Execute a single ATF test (requires ATF_ENABLED=true)

Get the results of a test suite run

List individual test results within a suite run

Get ATF Failure Insight data — metadata changes between last successful and failed run (role changes, field value changes)

Ask a natural language question and get structured ServiceNow data (ServiceNow NLQ API)

Semantic AI-powered search across KB, catalog, incidents (ServiceNow AI Search)

Suggest category, assignment group, and priority for an incident by analysing similar resolved incidents (Table API). Predictive Intelligence has no public REST prediction endpoint; for model-based scoring run PI on-record and read the predicted field.

List Virtual Agent topics available in the instance (sys_cs_topic)

List the Virtual Agent topics (sys_cs_topic) that back a Microsoft Copilot integration. Copilot topic mapping itself is configured in Copilot Studio on the Microsoft side, not exposed via ServiceNow REST.

List available Predictive Intelligence solutions (classification/similarity models)

List business rules (requires SCRIPTING_ENABLED=true)

Get full details and script body of a business rule (requires SCRIPTING_ENABLED=true)

Create a new business rule (requires SCRIPTING_ENABLED=true). ServiceNow supports ES2021 async/await in scripts.

Update a business rule (requires SCRIPTING_ENABLED=true)

List script includes (requires SCRIPTING_ENABLED=true)

Get full script body of a script include (requires SCRIPTING_ENABLED=true)

Create a new script include (requires SCRIPTING_ENABLED=true)

Update a script include (requires SCRIPTING_ENABLED=true)

List client scripts (requires SCRIPTING_ENABLED=true)

Get full details and script body of a client script (requires SCRIPTING_ENABLED=true)

List update sets (changesets) (requires SCRIPTING_ENABLED=true)

Get details of an update set (requires SCRIPTING_ENABLED=true)

Commit an update set (requires SCRIPTING_ENABLED=true)

Publish/export an update set to XML for deployment (requires SCRIPTING_ENABLED=true)

Create a new client script (onLoad, onChange, onSubmit, onCellEdit) (requires SCRIPTING_ENABLED=true)

Update an existing client script (requires SCRIPTING_ENABLED=true)

List UI Policies for a table (field visibility, mandatory, read-only rules) (requires SCRIPTING_ENABLED=true)

Get full details and conditions of a UI Policy (requires SCRIPTING_ENABLED=true)

Create a new UI Policy to control field behavior dynamically (requires SCRIPTING_ENABLED=true)

List UI Actions (buttons, context menus, related links) for a table (requires SCRIPTING_ENABLED=true)

Get full details and script of a UI Action (requires SCRIPTING_ENABLED=true)

Create a new UI Action (button or link) on a form (requires SCRIPTING_ENABLED=true)

Update an existing UI Action (requires SCRIPTING_ENABLED=true)

List Access Control rules (ACLs) — who can read/write/create/delete records (requires SCRIPTING_ENABLED=true)

Get full details of an ACL rule including its script and role requirements (requires SCRIPTING_ENABLED=true)

Create a new ACL rule to control access to a table or field (requires SCRIPTING_ENABLED=true)

Update an existing ACL rule (requires SCRIPTING_ENABLED=true)

Create a new agile story/user story (requires WRITE_ENABLED=true)

Update an agile story (requires WRITE_ENABLED=true)

List agile stories with optional sprint or state filter

Create a new epic (requires WRITE_ENABLED=true)

Update an epic (requires WRITE_ENABLED=true)

List epics with optional project or state filter

Create a scrum task (sub-task of a story) (requires WRITE_ENABLED=true)

Update a scrum task (requires WRITE_ENABLED=true)

List scrum tasks, optionally filtered by story

Link one agile story as dependent on another (m2m_story_dependencies). Requires WRITE_ENABLED=true.

List dependency links for a story (m2m_story_dependencies).

Remove a story dependency link by its m2m_story_dependencies sys_id. Requires WRITE_ENABLED=true.

Create a PPM project (pm_project). Requires WRITE_ENABLED=true.

Update a PPM project (pm_project). Requires WRITE_ENABLED=true.

List PPM projects (pm_project).

Create a new HR Service Delivery case (requires WRITE_ENABLED=true)

Get full details of an HR case by number (e.g. HRCS0001234) or sys_id

Update fields on an existing HR case (requires WRITE_ENABLED=true)

List HR cases with optional filters (status, subject person, service)

Close an HR case with resolution notes (requires WRITE_ENABLED=true)

List available HR services (Onboarding, Offboarding, Benefits, Payroll, etc.)

Get details of a specific HR service including its tasks and SLAs

Get the HR profile for a user (employment details, department, manager)

Update HR profile fields for a user (requires WRITE_ENABLED=true)

List HR tasks associated with an HR case

Create a task within an HR case (requires WRITE_ENABLED=true)

Get the full activity log and journal entries for an HR case

Create an employee onboarding case with all standard tasks. **[Write]**

Create an employee offboarding case with exit tasks. **[Write]**

Get HR lifecycle events for an employee (promotions, transfers, leaves)

List available HR document templates (offer letters, contracts, policies)

Create a new Customer Service case (requires WRITE_ENABLED=true)

Get full details of a CSM case by number (e.g. CS0001234) or sys_id

Update fields on an existing CSM case (requires WRITE_ENABLED=true)

List CSM cases with optional filters (account, contact, state, priority)

Close a CSM case with resolution details (requires WRITE_ENABLED=true)

Get details of a customer account including contacts and open cases count

List customer accounts with optional search filter

Get details of a customer contact (name, account, phone, email)

List contacts for an account or search across all contacts

Get SLA details and remaining time for a CSM case

List products and services available in the CSM catalog

Create a Security Operations incident (requires WRITE_ENABLED=true)

Get full details of a security incident by number or sys_id

Update a security incident record (requires WRITE_ENABLED=true)

List security incidents with filters (severity, state, category)

List vulnerability entries from the Vulnerability Response module

Get details of a specific vulnerability entry including CVSS score and affected CIs

Update a vulnerability entry (state, risk acceptance notes, remediation date) (requires WRITE_ENABLED=true)

List GRC (Governance, Risk, Compliance) risk entries

Get details of a GRC risk including impact, likelihood, and controls

List GRC controls with optional filter by risk or policy

Query threat intelligence data — IOCs, threat actors, and campaigns

List available security response playbooks

Execute a security response playbook against an incident. **[Write]**

Get security posture dashboard — open incidents by severity, vulnerability counts, mean time to resolve

Trigger a vulnerability scan for specified CIs or groups. **[Write]**

Create a new GRC risk entry. **[Write]**

List GRC compliance policies and their current status