Skip to main content
Glama
jshsakura

mfa-servicenow-mcp

by jshsakura

Server Configuration

Describes the environment variables required to run the server.

NameRequiredDescriptionDefault
MCP_TOOL_PACKAGENoTool package to loadstandard
SERVICENOW_DEBUGNoEnable debug loggingfalse
SERVICENOW_API_KEYNoAPI key for API key auth
SERVICENOW_TIMEOUTNoHTTP request timeout in seconds30
SERVICENOW_PASSWORDNoPassword for basic auth, OAuth, or browser prefill
SERVICENOW_USERNAMENoUsername for basic auth, OAuth, or browser prefill
SERVICENOW_AUTH_TYPENoAuth mode: basic, browser, oauth, api_keybasic
SERVICENOW_CLIENT_IDNoOAuth client ID
SERVICENOW_TOKEN_URLNoOAuth token URL (defaults to instance/oauth_token.do)
SERVICENOW_INSTANCE_URLNoServiceNow instance URL
SERVICENOW_WRITE_GUARDSNoEnable/disable all write guardson
SERVICENOW_CLIENT_SECRETNoOAuth client secret
SERVICENOW_DEP_MAX_DEPTHNoMaximum dependency depth for cross-scope resolution (1-6)2
SERVICENOW_MCP_HTTP_HOSTNoHost for HTTP transport127.0.0.1
SERVICENOW_MCP_HTTP_PATHNoStreamable HTTP endpoint path/mcp
SERVICENOW_MCP_HTTP_PORTNoPort for HTTP transport8000
SERVICENOW_MCP_TRANSPORTNoMCP transport: stdio or httpstdio
SERVICENOW_API_KEY_HEADERNoHeader name for API key authX-ServiceNow-API-Key
SERVICENOW_ACTIVE_INSTANCENoActive instance alias for write operations
SERVICENOW_BROWSER_TIMEOUTNoLogin timeout in seconds120
SERVICENOW_INSTANCE_CONFIGNoJSON string mapping alias to per-instance settings
SERVICENOW_TLS_IMPERSONATENoEnable/disable browser-grade TLS impersonationon
SERVICENOW_BROWSER_HEADLESSNoRun browser without GUIfalse
SERVICENOW_BROWSER_LOGIN_URLNoCustom login page URL
SERVICENOW_BROWSER_PROBE_PATHNoSession validation endpoint
SERVICENOW_BROWSER_SESSION_TTLNoSession TTL in minutes30
SERVICENOW_BROWSER_USER_DATA_DIRNoOverride Chromium profile path
SERVICENOW_CONCURRENT_EDIT_GUARDNoEnable/disable concurrent edit guardon
SERVICENOW_MCP_HTTP_ALLOWED_HOSTSNoComma-separated Host allowlist for DNS rebinding protection127.0.0.1,::1,localhost
SERVICENOW_MCP_HTTP_JSON_RESPONSENoReturn JSON responses instead of SSE streamsfalse
SCRIPT_EXECUTION_API_RESOURCE_PATHNoResource path for script execution API
SERVICENOW_CONCURRENT_EDIT_WINDOW_MINNoTime window for concurrent edit detection in minutes10
SERVICENOW_MCP_HTTP_DISABLE_DNS_REBINDING_PROTECTIONNoDisable DNS rebinding protectionfalse

Instructions

Guidance the server publishes about itself, which clients place ahead of the tool catalog so the model reads it before choosing anything.

This server publishes no instructions, or was last inspected before Glama recorded them.

Capabilities

Features and capabilities supported by this server

Protocol revision2025-11-25

CapabilityDetails
tools
{
  "listChanged": false
}
resources
{
  "subscribe": false,
  "listChanged": false
}
experimental
{}

Tools

Functions exposed to the LLM to take actions

NameDescription
list_tool_packagesB

Lists available tool packages and the currently loaded one.

sn_healthB

Check ServiceNow API connectivity, auth status, Chromium install state (browser auth), and MCP server version.

sn_queryB

Generic table query — last resort. Prefer domain tools: search_server_code, manage_workflow, manage_flow_designer.

sn_aggregateA

Run COUNT/SUM/AVG/MIN/MAX on any table with optional group_by. Returns stats without fetching records.

sn_schemaB

Fetch field names, types, labels, and constraints from sys_dictionary for a given table.

sn_discoverA

Find tables by name or label keyword. Returns table name, label, scope, and parent class.

sn_resolve_urlA

Parse a ServiceNow URL → table, sys_id, scope, suggested next tool. Read-only.

get_widget_bundleC

Fetch full widget bundle (HTML, scripts, providers, CSS/JS dependencies) in one call. Analysis starting point.

get_portal_component_codeB

Fetch widget/provider/SI fields. Returns full body by default. Never chunk for analysis.

search_portal_regex_matchesA

True regex over portal code (widget/provider/SI), offsets+context. Server-table keyword search: search_server_code.

trace_portal_route_targetsA

Map widget→provider→route relationships. Metadata only, no script bodies.

download_portal_sourcesC

Targeted portal widgets/providers. Whole app: download_app_sources. widget_ids=one widget.

diff_local_componentA

Diff local edits vs remote (or compare_to root); verdict=True status-only, refresh=True fast-forwards.

download_attachmentC

Download ServiceNow attachment file(s) to disk by attachment_sys_id, or table+record. Read from saved_path.

verify_deployment_xmlA

Compare a deploy XML to the live server. preflight=would it revert work, postflight=did it land.

manage_flow_designerB

Flow Designer read/edit: action inputs, trigger/branch conditions, add_branch (clone a branch). Publish via action='publish' (needs confirm + confirm_publish). (confirm='approve')

query_local_graphB

Offline dependency/impact answers from audit graph files (0 API). uses|used_by|page|impact.

get_logsC

Query ServiceNow logs. log_type: system/journal/transaction/background. Max 20 rows.

search_server_codeA

Fast keyword search across 22 server-side code types (SI/BR/ACL). Portal regex+snippets: search_portal_regex_matches.

get_metadata_sourceB

Get one source record (SI/BR/widget) by name/sys_id. Returns body; 'complete' flags if truncated preview.

extract_table_dependenciesC

GlideRecord table dependency graph from server scripts (SI/BR/widgets). Pass widget_id for one widget.

download_app_sourcesA

FULL/all source of an app scope to disk (all groups+deps). scope REQUIRED — ask user. Step 1, not portal.

analyze_widget_performanceC

Analyze widget performance — code patterns, transaction logs, provider usage. Returns findings with severity.

get_developer_changesB

List developer's recent changes across portal tables. Metadata only, use count_only first.

get_pageA

Get or list portal pages by URL path, title, or sys_id. Returns layout tree with widget placements.

get_widget_instanceB

Get widget instance placement on a page. Returns column, order, and config. Filter by page or widget.

manage_script_includeC

List/get/create/update/delete/execute a script include (table: sys_script_include). (confirm='approve')

manage_scripted_restC

CRUD Scripted REST services + resources (sys_ws_definition/sys_ws_operation). Use list/get to find sys_ids. (confirm='approve')

audit_local_sourcesA

Analyze downloaded sources locally (no API). Generates cross-ref graph, dead code, HTML report.

manage_widget_dependencyB

CRUD + link/unlink for widget Angular providers & CSS/JS dependencies. Use action=list first for sys_ids. (confirm='approve')

manage_workflowB

LEGACY Workflow engine ONLY (wf_workflow/wf_activity). Most flows are Flow Designer -> use manage_flow_designer. (confirm='approve')

export_record_xmlB

Build deploy XML from the LIVE server — the only legal source. Issues an origin cert. Read saved_path.

Prompts

Interactive templates invoked by user choice

NameDescription

No prompts

Resources

Contextual data attached and managed by the client

NameDescription
analyze/local-source-auditAnalyze downloaded app sources locally — cross-references, dead code, execution order, HTML report
explore/flow-trigger-tracingTrace which workflows and flows fire when a table record changes
manage/app-source-downloadDownload all server-side source code for a ServiceNow application scope
manage/local-syncScan, diff, and push local portal source changes to ServiceNow with conflict detection

Latest Blog Posts

MCP directory API

We provide all the information about MCP servers via our MCP API.

curl -X GET 'https://glama.ai/api/mcp/v1/servers/jshsakura/mfa-servicenow-mcp'

If you have feedback or need assistance with the MCP directory API, please join our Discord server