Back to search
medium low low
C
60.2 /100
io.github.jschuller/mcp-server-servicenow
Author jschuller
Scanned 47d ago
19 tools + 5 resources for ServiceNow: CMDB, update sets, tables. OAuth 2.1, Tokyo+.
Versions
0.5.1scoredfirst seen May 19, 2026
Trust breakdown
Tools 19
get_system_properties annotations: none low
Query ServiceNow system properties
limit string query string
get_current_user annotations: none low
Get the currently authenticated user's information
fields string
get_table_schema annotations: none low
Get the data dictionary (field definitions) for a ServiceNow table, including inherited fields
limit string table_name string include_inherited string
list_update_sets annotations: none low
List update sets with optional state and query filtering
limit string query string state string
get_update_set annotations: none low
Get details of a specific update set by sys_id
sys_id string
create_update_set annotations: none low
Create a new update set for tracking customizations
name string parent string description string
set_current_update_set annotations: none low
Set an update set as the current active update set
sys_id string
list_update_set_changes annotations: none low
List all customer updates (changes) within an update set
limit string update_set_sys_id string
list_ci annotations: none low
List CMDB configuration items with optional class and query filtering
limit string query string fields string offset string class_name string
get_ci annotations: none low
Get a single CMDB configuration item by sys_id
sys_id string class_name string
create_ci annotations: none low
Create a new CMDB configuration item
data string class_name string
update_ci annotations: none low
Update a CMDB configuration item
ctx Context data string sys_id string confirm string class_name string
get_ci_relationships annotations: none low
Get relationships for a CMDB configuration item (parent and child)
limit string offset string sys_id string relation_type string
list_records annotations: none low
List records from any ServiceNow table with optional filtering, field selection, and pagination
limit string query string fields string offset string order_by string table_name string
get_record annotations: none low
Get a single record from a ServiceNow table by sys_id
fields string sys_id string table_name string
create_record annotations: none low
Create a new record in any ServiceNow table
data string table_name string
update_record annotations: none low
Update an existing record in a ServiceNow table
ctx Context data string sys_id string confirm string table_name string
delete_record annotations: none low
Delete a record from a ServiceNow table by sys_id
ctx Context sys_id string confirm string table_name string
aggregate_records annotations: none low
Aggregate records using COUNT, AVG, MIN, MAX, SUM with optional GROUP BY via the Stats API
count string query string having string group_by string avg_fields string max_fields string min_fields string sum_fields string table_name string
Permissions 3
network Server uses network capabilities via: requests, urllib filesystem Server uses filesystem capabilities via: open(), os, pathlib, tempfile env_vars Server uses env_vars capabilities via: os.environ Scan Findings 84
low
Tool 'get_system_properties' has no annotations
low
Tool 'get_current_user' has no annotations
low
Tool 'get_table_schema' has no annotations
low
Tool 'list_update_sets' has no annotations
low
Tool 'get_update_set' has no annotations
low
Tool 'create_update_set' has no annotations
low
Tool 'set_current_update_set' has no annotations
low
Tool 'list_update_set_changes' has no annotations
low
Tool 'list_ci' has no annotations
low
Tool 'get_ci' has no annotations
low
Tool 'create_ci' has no annotations
low
Tool 'update_ci' has no annotations
low
Tool 'get_ci_relationships' has no annotations
low
Tool 'list_records' has no annotations
low
Tool 'get_record' has no annotations
low
Tool 'create_record' has no annotations
low
Tool 'update_record' has no annotations
low
Tool 'delete_record' has no annotations
low
Tool 'aggregate_records' has no annotations
high
Hardcoded OAuth client secret in jschuller-mcp-server-servicenow-39950ca/tests/test_sn_oauth_provider.py
high
Hardcoded OAuth client secret in jschuller-mcp-server-servicenow-39950ca/tests/conftest.py
info
Sandbox failed to start for behavioral verification
medium
Vulnerable dependency: fastmcp@4.0.3,<5 (GHSA-5h2m-4q8j-pqpj)
medium
Vulnerable dependency: fastmcp@4.0.3,<5 (GHSA-c2jp-c369-7pvx)
medium
Vulnerable dependency: fastmcp@4.0.3,<5 (GHSA-m8x7-r2rg-vh5g)
medium
Vulnerable dependency: fastmcp@4.0.3,<5 (GHSA-mxxr-jv3v-6pgc)
medium
Vulnerable dependency: fastmcp@4.0.3,<5 (GHSA-rcfx-77hg-w2wv)
medium
Vulnerable dependency: fastmcp@4.0.3,<5 (GHSA-rj5c-58rq-j5g5)
medium
Vulnerable dependency: fastmcp@4.0.3,<5 (GHSA-rww4-4w9c-7733)
medium
Vulnerable dependency: fastmcp@4.0.3,<5 (GHSA-vv7q-7jx5-f767)
medium
Vulnerable dependency: fastmcp@4.0.3,<5 (PYSEC-2026-1364)
medium
Vulnerable dependency: fastmcp@4.0.3,<5 (PYSEC-2026-1365)
medium
Vulnerable dependency: fastmcp@4.0.3,<5 (PYSEC-2026-2474)
medium
Vulnerable dependency: fastmcp@4.0.3,<5 (PYSEC-2026-2475)
medium
Vulnerable dependency: fastmcp@4.0.3,<5 (PYSEC-2026-2476)
medium
Vulnerable dependency: fastmcp@4.0.3,<5 (PYSEC-2026-338)
medium
Vulnerable dependency: requests@2.28.0 (GHSA-9hjg-9r4m-mvj7)
medium
Vulnerable dependency: requests@2.28.0 (GHSA-9wx4-h78v-vm56)
medium
Vulnerable dependency: requests@2.28.0 (GHSA-gc5v-m9x4-r6x2)
medium
Vulnerable dependency: requests@2.28.0 (GHSA-j8r2-6x86-q33q)
medium
Vulnerable dependency: requests@2.28.0 (PYSEC-2023-74)
medium
Vulnerable dependency: requests@2.28.0 (PYSEC-2026-1872)
medium
Vulnerable dependency: requests@2.28.0 (PYSEC-2026-1873)
medium
Vulnerable dependency: requests@2.28.0 (PYSEC-2026-2275)
medium
Vulnerable dependency: anyio@4.0 (GHSA-5p39-cfhj-2xmp)
medium
Vulnerable dependency: anyio@4.0 (GHSA-82r6-8w77-94w6)
medium
Vulnerable dependency: python-dotenv@1.0.0 (GHSA-mf9w-mj56-hr94)
medium
Vulnerable dependency: python-dotenv@1.0.0 (PYSEC-2026-2270)
medium
Vulnerable dependency: httpx2@2.5.0 (GHSA-8xx6-hgc6-gc2m)
medium
Vulnerable dependency: httpx2@2.5.0 (GHSA-f2fp-rgf2-35cp)
medium
Vulnerable dependency: httpx2@2.5.0 (GHSA-h4x7-gw46-3wm6)
medium
Vulnerable dependency: httpx2@2.5.0 (GHSA-pf96-p4fj-6566)
medium
Vulnerable dependency: httpx2@2.5.0 (PYSEC-2026-3846)
medium
Vulnerable dependency: httpx2@2.5.0 (PYSEC-2026-3847)
medium
Vulnerable dependency: httpx2@2.5.0 (PYSEC-2026-3848)
medium
Vulnerable dependency: httpx2@2.5.0 (PYSEC-2026-3849)
info
pyproject.toml metadata
info
Tool: get_system_properties
info
Tool: get_current_user
info
Tool: get_table_schema
info
Tool: list_update_sets
info
Tool: get_update_set
info
Tool: create_update_set
info
Tool: set_current_update_set
info
Tool: list_update_set_changes
info
Tool: list_ci
info
Tool: get_ci
info
Tool: create_ci
info
Tool: update_ci
info
Tool: get_ci_relationships
info
Tool: list_records
info
Tool: get_record
info
Tool: create_record
info
Tool: update_record
info
Tool: delete_record
info
Tool: aggregate_records
info
Transport: stdio
info
Sandbox failed to start for output poisoning scan
medium
Permission: network access detected
low
Permission: filesystem access detected
low
Permission: env_vars access detected
info
No dependency files found for SBOM generation
high
Hardcoded Password found in jschuller-mcp-server-servicenow-39950ca/README.md
medium
No build provenance detected (SLSA L0)