AGENTFORCE-MCP-16: ServiceNow MCP Script or Any-Table Write Tool Without a Gate
🔴 High · MCP Supply Chain
Detects ServiceNow MCP server tools that run background / server-side scripts, or create, update or delete records in a table the caller names, with no gate in the handler: no enable flag, table allowlist, permission assertion or confirm step.
Details
| Field | Value |
|---|---|
| Rule ID | AGENTFORCE-MCP-16 |
| Severity | High |
| Category | MCP Supply Chain |
Remediation
Gate the tool: disable it unless an operator flag enables it (WRITE_ENABLED / SCRIPTING_ENABLED), restrict tables to an allowlist (and block sys_* security tables), require an explicit confirm / apply argument for writes, and prefer purpose-built tools over generic script or table access.