Home › Other › ServiceNow MCP Server

ServiceNow MCP Server

ServiceNow developer data plane: Table API, CMDB, update sets, schema. Read-only, allow/deny, audit.

Python

★ 18 stars Last pushed 2026-09-08 License: MIT

View repository →

Connect

Review any command before running it. Package names and URLs come from the server's own registry entry.

Package (pypi 0.7.0)

uvx mcp-server-servicenow

Or add to your MCP client config:

{
  "mcpServers": {
    "mcp-server-servicenow": {
      "command": "uvx",
      "args": [
        "mcp-server-servicenow"
      ],
      "env": {
        "SERVICENOW_INSTANCE_URL": "<YOUR_VALUE>",
        "SERVICENOW_AUTH_TYPE": "<YOUR_VALUE>",
        "SERVICENOW_USERNAME": "<YOUR_VALUE>",
        "SERVICENOW_PASSWORD": "<YOUR_VALUE>",
        "SERVICENOW_CLIENT_ID": "<YOUR_VALUE>",
        "SERVICENOW_CLIENT_SECRET": "<YOUR_VALUE>",
        "SERVICENOW_API_KEY": "<YOUR_VALUE>",
        "SERVICENOW_API_KEY_HEADER": "<YOUR_VALUE>",
        "SERVICENOW_TOKEN_URL": "<YOUR_VALUE>",
        "SERVICENOW_TIMEOUT": "<YOUR_VALUE>",
        "SERVICENOW_READ_ONLY": "<YOUR_VALUE>",
        "SERVICENOW_TABLE_ALLOWLIST": "<YOUR_VALUE>",
        "SERVICENOW_TABLE_DENYLIST": "<YOUR_VALUE>",
        "SERVICENOW_ALLOW_JS_QUERIES": "<YOUR_VALUE>",
        "SERVICENOW_WRITE_CONFIRM": "<YOUR_VALUE>",
        "SERVICENOW_AUDIT_LOG": "<YOUR_VALUE>"
      }
    }
  }
}

SERVICENOW_INSTANCE_URL required — ServiceNow instance URL
SERVICENOW_AUTH_TYPE required — Auth type: basic, oauth, or api_key
SERVICENOW_USERNAME — Username for basic or OAuth auth
SERVICENOW_PASSWORD secret — Password for basic or OAuth auth
SERVICENOW_CLIENT_ID — OAuth client ID
SERVICENOW_CLIENT_SECRET secret — OAuth client secret
SERVICENOW_API_KEY secret — API key for api_key auth
SERVICENOW_API_KEY_HEADER — Header name for api_key auth (default X-ServiceNow-API-Key)
SERVICENOW_TOKEN_URL — OAuth token URL (default <instance>/oauth_token.do)
SERVICENOW_TIMEOUT — HTTP timeout in seconds (default 30)
SERVICENOW_READ_ONLY — Hide write tools and refuse non-GET requests
SERVICENOW_TABLE_ALLOWLIST — Comma-separated tables/globs that may be accessed
SERVICENOW_TABLE_DENYLIST — Comma-separated tables/globs that may never be accessed
SERVICENOW_ALLOW_JS_QUERIES — Permit arbitrary javascript: in caller queries
SERVICENOW_WRITE_CONFIRM — Confirm update/delete via MCP elicitation (opt-in)
SERVICENOW_AUDIT_LOG — Audit log target: stderr (default), off, or a file path