ServiceNow MCP server
Open incidents, query the CMDB, and drive ITSM workflows on the Now Platform.
About
Connect Tracecat to ServiceNow to read and write the same ITSM and CMDB records your service desk uses for SOC and SRE teams that treat the Now Platform as the system of record. You can open a P2 incident the moment a SIEM alert fires and attach enriched context from a workflow. From there, query the CMDB, kick off a standard change to remediate, and invoke a Now Assist skill with every tool call logged for audit and rate-limited to keep the incident queue from flooding.
Setup
- 1
Sign in with OAuth
You'll authorize Tracecat to access ServiceNow on your behalf. No API keys to manage.
- 2
Select the
ServiceNowtile in the Tracecat MCP catalogOpen the
MCP catalogin your workspace, select theServiceNowtile, and complete the OAuth flow. - 3
Enable
ServiceNowin your agentIn your
ai.agentaction orAgents→toolstab, selectServiceNowfrom theMCP integrationsdropdown.
Tools
create_incident | Open a new incident with caller, category, urgency, and description on the incident table. |
update_incident | Update fields on an existing incident, including state, assignment group, and work notes. |
search_incidents | Query the incident table with encoded queries or natural language filters. |
get_cmdb_ci | Look up a configuration item in the CMDB by name, sys_id, or asset tag. |
create_change_request | Open a normal, standard, or emergency change request with planned start and end times. |
list_change_requests | List change requests filtered by state, assignment group, or planned window. |
search_knowledge | Search published knowledge base articles for runbook content and known errors. |
create_problem | Open a problem record and link it to the originating incidents. |
run_now_assist_skill | Invoke a published Now Assist skill or AI Agent Studio agent by name. |