$450+ tools · any ai · read-only by defaultbuilt on the official servicenow sdkgrounded in the live servicenow docsstdio · sse · streamable http

The ServiceNow MCP Server

450+ governed ServiceNow tools for any AI. Claude, ChatGPT, Gemini, Microsoft Copilot, Cursor. Built on the official ServiceNow SDK and grounded in the live docs. Read-only by default, safe for production.

Free and open source. MIT. TypeScript. On npm and the official MCP registry.
any AI → NowAIKit → ServiceNow
you › which P1 incidents are breaching SLA, by group?
NowAIKit · read-only
run_aggregate_query task_sla
query_records incident active^priority=1
7 active P1s, 3 breaching SLA
Network Ops 2 breached
Database Team 1 breached
done · 0 writes
you › audit the CMDB before tonight’s run
NowAIKit · read-only
cmdb_health_dashboard
cmdb_find_duplicates
8,200 servers · 9% missing an IP
312 duplicate CIs
1,140 stale, unseen 90 days
reconcile ready · dry run first
you › scaffold a vendor-risk app on the SDK
NowAIKit · official @servicenow/sdk
fluent_init
fluent_build
fluent_validate
scaffolded · 3 tables, 2 roles
build passed · 0 errors
ready to deploy
you › query u_vendor_assessment for open items
NowAIKit · custom table
discover_table u_vendor_assessment
query_records state=open
schema resolved · 14 fields
23 open assessments
done · 0 writes
0+
ServiceNow tools
0
Domains covered
0
Permission tiers
0
Transports
Any AI client
ClaudeClaudeChatGPTGoogle GeminiGeminiGitHub CopilotCopilotCursorCursor
NowAIKitMCP, A2A, REST
Your platform
ServiceNowas your rules allow
01 / why this one

The most complete ServiceNow MCP, kept current

450+

Broadest coverage

Tools across 27 ServiceNow domains, from ITSM and CMDB to HRSD, SecOps and the SDK. Most ServiceNow MCP servers cover a handful of tables. This covers the platform.

Actively maintained

Latest release, always

Frequent releases that track the newest ServiceNow release and the latest @servicenow/sdk. New features land here, not on a roadmap slide. n-2 release support: Australia, Zurich, Yokohama.

Read-only

Safe by default

Nothing writes to your instance unless you enable it. Five permission tiers, dry-run on writes, per-user identity at scale.

02 / with servicenow, not around it

Built on the platform's own foundations

NowAIKit rides the tools and standards ServiceNow already ships, so your AI works the ServiceNow way, on current APIs.

Official ServiceNow SDK (Fluent)

Scaffolds, builds and validates Fluent apps through @servicenow/sdk, and tracks the latest SDK release. Real TypeScript, generated the supported way.

Grounded in the live docs

search_servicenow_docs reads the official servicenow.com/docs at query time, so answers quote the current platform instead of a stale guess.

The MCP standard ServiceNow ships

Speaks Model Context Protocol, the neutral standard ServiceNow shipped native support for. Complements native MCP and Action Fabric.

Knows your instance, not just the framework

discover_table introspects your live schema at runtime, so the AI works against your custom tables, fields and choices, not a generic model.

03 / what you get

One server, the whole platform

450+ tools, 27 domains

Query, build, operate and document across ITSM, ITOM, CMDB, HRSD, CSM, SecOps, Flow and more.

Read-only by default

Five permission tiers, dry-run on writes, and machine-readable safety hints. Point it at production.

Multi-transport

stdio, SSE and streamable HTTP, with bearer-token auth and a REST API for every tool.

Works with any AI

Claude, ChatGPT, Gemini, Microsoft Copilot, Cursor, VS Code, JetBrains. No model lock-in.

Dynamic schema discovery

Introspects any table at runtime via sys_dictionary and generates CRUD tools on the fly.

A2A ready

Auto-discovers at /.well-known/agent.json, on the agent protocol ServiceNow backs.

CMDB and data quality

Reconciliation and completeness tools to audit your instance before you point an agent at it.

Per-user identity at scale

Map capabilities to Microsoft Entra groups and audit every action to a named person.

ML and analytics

Aggregates, trends, forecasting, anomaly detection and Performance Analytics authoring.

Multi-instance

Connect dev, test, prod and client instances, switch between them in one session, and keep each fully isolated.

Personas and tool packages

Curated tool packages by role, from platform developer to ITSM agent to integration engineer, so an agent sees only what it needs.

Flexible authentication

Basic auth, OAuth with PKCE and client credentials, bearer tokens for HTTP, and per-user Microsoft Entra identity at scale.

04 / safe by default

Powerful only when you say so

A five-tier permission model protects your instance out of the box. Every capability beyond read must be explicitly enabled. No accidental writes, ever.

Tier 0 · ReadSearch records, view incidents, browse configuration. Safe by default.always on
Tier 1 · WriteCreate, update and resolve records.--allow-write
Tier 2 · CMDBConfiguration item management.--allow-cmdb
Tier 3 · ScriptingCode deployment and script execution.--allow-scripting
Tier 4 · AgenticNow Assist autonomous features.--allow-agentic

OAuth 2.0 and Basic Auth. Credentials never leave your environment.

05 / the catalog

450+ tools across 27 domains

A tool for nearly every corner of the platform. Here's the shape of the catalog.

Core CRUD and query82
UI and Portal32
App development26
Scripting22
Flow Designer19
Reporting and PA19
HRSD16
Change15
SecOps and GRC15
AI and ML14
CMDB and ITOM14
Incident13
System properties12
Catalog11
CSM11
ATF testing10
Notifications10
User and Group10
Agile9
DevOps9
ITAM9
Knowledge7
Problem4
Multi-instance4
Governance3
Mobile3
Documentation2
Browse the full tool reference
06 / install

Connected in one command

The setup wizard detects your AI client, tests the connection, and writes the config for you.

terminal
# install and configure, no manual JSON editing
$ npx nowaikit setup

# or run as an HTTP server with a live tool explorer
$ TRANSPORT=http npx nowaikit

# read-only by default. grant more per tier when you are ready.
Claude DesktopClaude CodeCursorVS CodeWindsurfChatGPTMicrosoft CopilotGeminiClineContinue.devJetBrainsAmazon QZed
Full installation guide
07 / the nowaikit suite

The MCP server is one of five

Use it on its own, or combine it with the rest of the NowAIKit ecosystem.

08 / questions

Common questions

Is it production-ready?

Yes. NowAIKit is on its 4.x release line and used daily by ServiceNow developers, consultants and teams. Read-only by default with five opt-in permission tiers, and 450+ tested tools on npm and the official MCP registry.

Which AI assistants are supported?

All major clients: Claude Desktop, ChatGPT, Gemini, Cursor, VS Code via Cline, GitHub Copilot, Windsurf, Continue.dev, JetBrains, Amazon Q, Zed and more.

Is it safe on production instances?

Tier 0 (read) is the default; write, CMDB, scripting and agentic capabilities each need an explicit flag. Credentials stay local. We still suggest validating your configuration on a non-production instance first.

Do I need ServiceNow admin access?

Not for reads. Tier 0 works with any user account. Write and admin operations need the same ServiceNow roles you would need in the UI.

What ServiceNow releases are supported?

The n-2 policy: Australia (current GA), Zurich and Yokohama. All tools use the standard Table, Aggregate and Import Set APIs.

What are Power Tools?

fluent_query brings GlideQuery-style structured queries to AI. batch_request bundles up to 50 API calls into one request. execute_script runs server-side JavaScript with explicit opt-in.

09 / free and open source

Give any AI a safe door into ServiceNow

Star the repo, run it in 60 seconds, or explore the full NowAIKit platform.