Skip to main content
Glama
pavecer

ServiceNow MCP Server

by pavecer

Server Configuration

Describes the environment variables required to run the server.

NameRequiredDescriptionDefault
LOG_LEVELNoMinimum log level emitted to stdout: 'debug', 'info', 'warn', or 'error'info
ENTRA_AUDIENCENoExpected 'aud' in tokens; defaults to 'api://<ENTRA_CLIENT_ID>'api://<ENTRA_CLIENT_ID>
ENTRA_CLIENT_IDYesApp registration client ID
ENTRA_TENANT_IDYesEntra directory (tenant) ID
ENTRA_OAUTH_SCOPESNoScopes advertised in OIDC discoveryapi://<ENTRA_CLIENT_ID>/access_as_user openid profile offline_access
ENTRA_AUTH_DISABLEDNoSkip Bearer validation -- local dev only, never in productionfalse
ENTRA_CLIENT_SECRETYesApp registration client secret (for Dynamic Client Registration)
SERVICENOW_PASSWORDYesIntegration user password
SERVICENOW_USERNAMEYesIntegration user login
CORS_ALLOWED_ORIGINSNoComma-separated browser origins for CORS-enabled endpoints
SERVICENOW_CLIENT_IDYesOAuth App Registry client ID
ENTRA_ALLOW_ANY_TENANTNoAccept any Microsoft tenant tokenfalse
ENTRA_ALLOWED_AUDIENCESNoComma-separated extra 'aud' values to accept (custom App ID URIs)
LOG_INCLUDE_ERROR_STACKNoInclude error stack traces in error log entriesfalse
SERVICENOW_INSTANCE_URLYesServiceNow base URL (e.g., https://instance.service-now.com)
ENTRA_TRUSTED_TENANT_IDSNoAccepted remote tenant IDs (multi-tenant scenarios)
SERVICENOW_CLIENT_SECRETYesOAuth App Registry client secret
LOG_INCLUDE_CALLER_IDENTITYNoAttach caller 'oid'/'upn' to every log entry. Off by default to keep PII out of App Insightsfalse
SERVICENOW_OAUTH_GRANT_TYPENoOverride grant type: 'password' or 'client_credentials'auto
SERVICENOW_OAUTH_TOKEN_PATHNoServiceNow token endpoint path/oauth_token.do
ENTRA_DCR_REGISTRATION_TOKENNoBearer token required on POST /oauth/register
ENTRA_DCR_ALLOW_UNAUTHENTICATEDNoAllow open Dynamic Client Registration when no token is configuredfalse
SERVICENOW_OAUTH_CLIENT_AUTH_STYLENoOAuth client auth style: 'request_body' or 'basic'auto
SERVICENOW_REQUESTED_FOR_DIAGNOSTICSNoInclude requested_for diagnostics in tool/API responsesfalse
SERVICENOW_REQUESTED_FOR_CALLER_FIELDSNoEntra token claims to use as identity sourcecallerUpn
SERVICENOW_REQUESTED_FOR_LOOKUP_FIELDSNo'sys_user' fields for identity resolutionemail,user_name
SERVICENOW_REQUIRE_CALLER_ACCESS_TOKENNoWhen 'true', refuse calls without 'x-servicenow-access-token' (per-user ACL enforcement)false
SERVICENOW_REQUESTED_FOR_DIAGNOSTICS_INCLUDE_PIINoInclude raw caller identifiers in diagnostics (for short-lived troubleshooting only)false
SERVICENOW_REQUESTED_FOR_FALLBACK_TO_CALLER_VALUENoFall back to UPN if no 'sys_user' matchtrue

Capabilities

Server capabilities have not been inspected yet.

Tools

Functions exposed to the LLM to take actions

NameDescription

No tools

Prompts

Interactive templates invoked by user choice

NameDescription

No prompts

Resources

Contextual data attached and managed by the client

NameDescription

No resources

Latest Blog Posts

MCP directory API

We provide all the information about MCP servers via our MCP API.

curl -X GET 'https://glama.ai/api/mcp/v1/servers/pavecer/mcp-server-servicenow'

If you have feedback or need assistance with the MCP directory API, please join our Discord server