by aartiq
Production-ready ServiceNow MCP server — 450+ tools + 26 AI capabilities, multi-transport (stdio/SSE/HTTP), A2A protocol, dynamic schema discovery & BYOK. Connect Claude, ChatGPT, Gemini, Cursor & any AI to ServiceNow. Part of the NowAIKit suite.
# Add to your Claude Code skills
git clone https://github.com/aartiq/servicenow-mcpGuides for using ai agents skills like servicenow-mcp.
Last scanned: 6/26/2026
{
"issues": [
{
"type": "npm-audit",
"message": "@hono/node-server: @hono/node-server: Middleware bypass via repeated slashes in serveStatic",
"severity": "medium"
},
{
"type": "npm-audit",
"message": "brace-expansion: brace-expansion: Large numeric range defeats documented `max` DoS protection",
"severity": "medium"
},
{
"type": "npm-audit",
"message": "esbuild: esbuild allows arbitrary file read when running the development server on Windows",
"severity": "low"
},
{
"type": "npm-audit",
"message": "express-rate-limit: Vulnerability found",
"severity": "medium"
},
{
"type": "npm-audit",
"message": "fast-uri: fast-uri vulnerable to path traversal via percent-encoded dot segments",
"severity": "high"
},
{
"type": "npm-audit",
"message": "hono: Hono missing validation of cookie name on write path in setCookie()",
"severity": "high"
},
{
"type": "npm-audit",
"message": "ip-address: ip-address has XSS in Address6 HTML-emitting methods",
"severity": "medium"
},
{
"type": "npm-audit",
"message": "js-yaml: JS-YAML: Quadratic-complexity DoS in merge key handling via repeated aliases",
"severity": "medium"
},
{
"type": "npm-audit",
"message": "postcss: PostCSS has XSS via Unescaped </style> in its CSS Stringify Output",
"severity": "medium"
},
{
"type": "npm-audit",
"message": "qs: qs has a remotely triggerable DoS: qs.stringify crashes with TypeError on null/undefined entries in comma-format arrays when encodeValuesOnly is set",
"severity": "medium"
},
{
"type": "npm-audit",
"message": "vite: Vite Vulnerable to Path Traversal in Optimized Deps `.map` Handling",
"severity": "high"
}
],
"status": "WARNING",
"scannedAt": "2026-06-26T07:52:09.201Z",
"npmAuditRan": true,
"pipAuditRan": true,
"promptInjectionRan": true
}servicenow-mcp is an open-source ai agents skill for AI coding assistants such as Claude Code, Codex CLI, and ChatGPT, built by aartiq. Production-ready ServiceNow MCP server — 450+ tools + 26 AI capabilities, multi-transport (stdio/SSE/HTTP), A2A protocol, dynamic schema discovery & BYOK. Connect Claude, ChatGPT, Gemini, Cursor & any AI to ServiceNow. Part of the NowAIKit suite. It has 181 GitHub stars.
servicenow-mcp returned warnings in SkillsLLM's automated security scan. It has no critical vulnerabilities, but review the flagged issues in the Security Report section before adding it to your workflow.
Clone the repository with "git clone https://github.com/aartiq/servicenow-mcp" and add it to your Claude Code skills directory (see the Installation section above).
servicenow-mcp is primarily written in TypeScript. It is open-source under aartiq on GitHub, so you can review or fork the full source.
Yes. SkillsLLM lists many other AI Agents skills you can browse and compare side by side. Open the AI Agents category from the badge at the top of this page, or use the Related Skills and comparison links further down to weigh servicenow-mcp against similar tools.
No comments yet. Be the first to share your thoughts!
Requires a passing catalog security scan. Resolve the flagged issues and resubmit to enable featuring.
Connect Claude, ChatGPT, Gemini, Cursor, Copilot — or any AI — to ServiceNow.
450+ tools across ITSM, ITOM, CMDB, HRSD, CSM, Flow Designer, scripting & portal. Read, build, query and automate any instance in plain English.
Requires Node.js 20+.
# 1 — install
npm install -g nowaikit
# 2 — run the wizard: it detects your AI clients and writes their config for you
npx nowaikit setup
Restart your AI client (Claude Desktop, Cursor, …) and start asking. Done.
Prefer a UI?
npx nowaikit webfor a local dashboard — or use NowAIKit Cloud (nothing to install).
Add this to your client's MCP config (Claude Desktop claude_desktop_config.json, Cursor ~/.cursor/mcp.json, etc.):
{
"mcpServers": {
"nowaikit": {
"command": "npx",
"args": ["-y", "nowaikit"],
"env": {
"SERVICENOW_INSTANCE_URL": "https://yourcompany.service-now.com",
"SERVICENOW_BASIC_USERNAME": "your_username",
"SERVICENOW_BASIC_PASSWORD": "your_password"
}
}
}
}
OAuth, multiple instances, and per-client steps → Client setup · OAuth setup.
No instance? Grab a free Personal Developer Instance at developer.servicenow.com.
Read-only by default. Write, scripting and CMDB changes are opt-in flags — prod can't be modified by accident.
| Installation · Client setup | All 450+ tools · Tool packages |
| Multi-instance · OAuth | Scripting · ATF · Reporting |
Full guides & product home → nowaikit.com
nowaikit-sdk — TypeScript ServiceNow client library⚠️ Official distribution only: install from npm (
nowaikit) or nowaikit.com. NowAIKit is never shipped as a downloadable GitHub.zip— beware copycat "download" repos.
© 2026 AartiQ (Hardik Benani) · NowAIKit Source Available License