by aartiq
ServiceNow MCP server: 500+ tools and 26 AI capabilities for any AI (Claude, ChatGPT, Gemini, Cursor, Copilot). Multi-transport (stdio, SSE, HTTP), A2A, dynamic schema discovery, read-only by default. Free and source available. Part of the NowAIKit suite.
# Add to your Claude Code skills
git clone https://github.com/aartiq/servicenow-mcpGuides for using ai agents skills like servicenow-mcp.
Last scanned: 6/26/2026
{
"issues": [
{
"type": "npm-audit",
"message": "@hono/node-server: @hono/node-server: Middleware bypass via repeated slashes in serveStatic",
"severity": "medium"
},
{
"type": "npm-audit",
"message": "brace-expansion: brace-expansion: Large numeric range defeats documented `max` DoS protection",
"severity": "medium"
},
{
"type": "npm-audit",
"message": "esbuild: esbuild allows arbitrary file read when running the development server on Windows",
"severity": "low"
},
{
"type": "npm-audit",
"message": "express-rate-limit: Vulnerability found",
"severity": "medium"
},
{
"type": "npm-audit",
"message": "fast-uri: fast-uri vulnerable to path traversal via percent-encoded dot segments",
"severity": "high"
},
{
"type": "npm-audit",
"message": "hono: Hono missing validation of cookie name on write path in setCookie()",
"severity": "high"
},
{
"type": "npm-audit",
"message": "ip-address: ip-address has XSS in Address6 HTML-emitting methods",
"severity": "medium"
},
{
"type": "npm-audit",
"message": "js-yaml: JS-YAML: Quadratic-complexity DoS in merge key handling via repeated aliases",
"severity": "medium"
},
{
"type": "npm-audit",
"message": "postcss: PostCSS has XSS via Unescaped </style> in its CSS Stringify Output",
"severity": "medium"
},
{
"type": "npm-audit",
"message": "qs: qs has a remotely triggerable DoS: qs.stringify crashes with TypeError on null/undefined entries in comma-format arrays when encodeValuesOnly is set",
"severity": "medium"
},
{
"type": "npm-audit",
"message": "vite: Vite Vulnerable to Path Traversal in Optimized Deps `.map` Handling",
"severity": "high"
}
],
"status": "WARNING",
"scannedAt": "2026-06-26T07:52:09.201Z",
"npmAuditRan": true,
"pipAuditRan": true,
"promptInjectionRan": true
}See how servicenow-mcp compares with popular alternatives.
servicenow-mcp is an open-source ai agents skill for AI coding assistants such as Claude Code, Codex CLI, and ChatGPT, built by aartiq. ServiceNow MCP server: 500+ tools and 26 AI capabilities for any AI (Claude, ChatGPT, Gemini, Cursor, Copilot). Multi-transport (stdio, SSE, HTTP), A2A, dynamic schema discovery, read-only by default. Free and source available. Part of the NowAIKit suite. It has 263 GitHub stars.
servicenow-mcp returned warnings in SkillsLLM's automated security scan. It has no critical vulnerabilities, but review the flagged issues in the Security Report section before adding it to your workflow.
Clone the repository with "git clone https://github.com/aartiq/servicenow-mcp" and add it to your Claude Code skills directory (see the Installation section above).
servicenow-mcp is primarily written in TypeScript. It is open-source under aartiq on GitHub, so you can review or fork the full source.
Yes. SkillsLLM lists many other AI Agents skills you can browse and compare side by side. Open the AI Agents category from the badge at the top of this page, or use the Related Skills and comparison links further down to weigh servicenow-mcp against similar tools.
No comments yet. Be the first to share your thoughts!
β οΈ Third-Party Software Notice
This skill is third-party open-source software developed and hosted independently on GitHub. SkillsLLM is an informational directory and does not control or maintain the underlying repository.
Any security checks, ratings, or warnings displayed by SkillsLLM are automated and limited in scope. They do not constitute a security certification or guarantee that the software is safe, error-free, or free from malicious code, vulnerabilities, compromised dependencies, or prompt-injection risks.
Review the source code, permissions, dependencies, and configuration before installing or running any third-party skill. Use is at your own risk. To the maximum extent permitted by applicable law, SkillsLLM is not liable for losses arising from third-party software.
Connect Claude, ChatGPT, Gemini, Cursor, Copilot, or any AI, to ServiceNow.
500+ tools across ITSM, ITOM, CMDB, HRSD, CSM, Flow Designer, scripting & portal. Read, build, query and automate any instance in plain English.
New in 4.4 to 4.7: impact analysis (list_table_config / find_field_references / find_script_references) to see what depends on a table, field or script before you change it, Local Sync to pull artifacts to local files, and aggregate_report for server-side reports (count plus averages, no truncation).
Requires Node.js 20+.
# 1 β install
npm install -g nowaikit
# 2 β run the wizard: it detects your AI clients and writes their config for you
npx nowaikit setup
Restart your AI client (Claude Desktop, Cursor, β¦) and start asking. Done.
Prefer a UI?
npx nowaikit webfor a local dashboard β or use NowAIKit Cloud (nothing to install).
Add this to your client's MCP config (Claude Desktop claude_desktop_config.json, Cursor ~/.cursor/mcp.json, etc.):
{
"mcpServers": {
"nowaikit": {
"command": "npx",
"args": ["-y", "nowaikit"],
"env": {
"SERVICENOW_INSTANCE_URL": "https://yourcompany.service-now.com",
"SERVICENOW_BASIC_USERNAME": "your_username",
"SERVICENOW_BASIC_PASSWORD": "your_password"
}
}
}
}
OAuth, multiple instances, and per-client steps β Client setup Β· OAuth setup.
No instance? Grab a free Personal Developer Instance at developer.servicenow.com.
Read-only by default. Write, scripting and CMDB changes are opt-in flags β prod can't be modified by accident.
| Installation Β· Client setup | All 500+ tools Β· Tool packages |
| Multi-instance Β· OAuth | Scripting Β· ATF Β· Reporting |
Full guides & product home β nowaikit.com
nowaikit-sdk β TypeScript ServiceNow client libraryβ οΈ Official distribution only: install from npm (
nowaikit) or nowaikit.com. NowAIKit is never shipped as a downloadable GitHub.zipβ beware copycat "download" repos.
Β© 2026 NowAIKit Β· Source available under the Elastic License 2.0