Nowaikit

Community

Connect Claude, ChatGPT, Gemini, Cursor, Copilot, or any AI, to ServiceNow.

How to install ↓ Compare GitHub source repository ↗

Category: Other #106 of 230
Stars: ★ 267 Very popular
Transport: stdio (local process) · SSE · Streamable HTTP
Runtime: Node.js 20+ · Hosted (no local runtime)
Credentials: API key / credential required
License: Other / unspecified
Last commit: 18 days ago

55FMRS · C

This server is powerful with 450+ tools, but requires a ServiceNow instance and handles sensitive credentials. The read-only default reduces risk, but users should be cautious when enabling write operations. Non-official, suitable for experienced ServiceNow administrators and developers.

Strongest · Setup experience 13/20 Weakest · Reliability 7/20

Reliability

7/20

Security and permissions

13/20

Maintenance

10/20

Documentation

12/20

Setup experience

13/20

Why each score

Reliability 7/20: Evidence: the manifest declares a stdio transport, 450+ tools, and the README gives npm/npx install and launch commands with clear environment variables (instance URL, auth method, credentials). Deductions: this is a static review with no CI workflows or committed tests as verifiable execution evidence, so the handshake and real tool behavior cannot be confirmed; runtime-dependent flags such as WRITE_ENABLED default false are not verifiable here; the NOASSERTION license also undermines reproducibility confidence. Therefore the score stays under the static cap of 12 and is further reduced for missing test evidence.
Security and permissions 13/20: Evidence: the server is read-only by default (WRITE_ENABLED, SCRIPTING_ENABLED, CMDB_WRITE_ENABLED all default false); writes, scripting and CMDB changes are opt-in; basic and OAuth auth are supported and only variable names are exposed in the static material, not real tokens; sse/http transport expects NOWAIKIT_API_KEY as a bearer token. Deductions: the capability is an out-of-band risk amplifier — the server can read, build, query and automate a ServiceNow instance at scale, and a user misconfiguration could enable bulk modifications or script execution; least-privilege role guidance and identity/authorization boundaries are not visible in the reviewed material; there are no credential-rotation or encryption-at-rest details; the NOASSERTION license leaves supply-chain/legal risk unclear. No red-line evidence (malware, credential theft, covert exfiltration, destructive defaults) was found, so the score is not 0-4. Because the risk posture and opt-in design are disclosed in the README, the security score is moderately high but not maximal.
Maintenance 10/20: Evidence: the repository is not archived, shows 229 stars and 0 open issues as a snapshot; the manifest is at version 4.8.0 and the README describes features added from 4.4 through 4.7, indicating regular releases. Deductions: the license is NOASSERTION (the README/badge claims 'Source Available', but that is not a standard SPDX identifier); ownership and governance details are limited; commit frequency and dependency-update cadence cannot be verified from static files; 0 open issues is just a snapshot and does not prove response speed. Hence: active but with governance/licensing gaps, score 10.
Documentation 12/20: Evidence: the README includes install steps (npm global install, npx nowaikit setup), a manual client-config JSON example, links to OAuth/client-setup/multi-instance/scripting/ATF/reporting docs, a 450+ tool list and tool-package concept, read-only-by-default notes, and the product/cloud homepages. Deductions: the actual doc files were not part of this static review, so tool parameters, rate limits, cost and troubleshooting depth cannot be verified; the license labeling is contradictory (NOASSERTION in manifest vs 'Source Available' badge); runtime limitations such as error handling, timeouts and throttling are not evidenced in the README. The documentation is usable but has evidence gaps, hence 12.
Setup experience 13/20: Evidence: the README provides two install paths — a wizard (npx nowaikit setup) and a manual JSON config for mainstream clients (Claude Desktop, Cursor) — with a Node.js 20+ prerequisite, instance URL and basic-auth variables, OAuth and multi-instance doc links, and a free PDI pointer. The steps are few and client-oriented. Deductions: the static setup cap is 15; there is no CI/test evidence proving the install paths execute as described; the web dashboard and cloud offerings are unverified claims; sse/http transports add PORT and API-key configuration, increasing deployment complexity; the unclear license may hinder adoption. Hence 13 within the cap.

Static review · not runListed 2026-08-07

Read the FMRS scoring method →

Fit and risk

What it can accessRuns commands or codeUses the networkChanges third-party account data

Best for

AI agents that need to interact with a ServiceNow instance
ITSM, ITOM, and CMDB automation
Developers and teams who want controlled access to ServiceNow

Not for

General-purpose MCP usage without a ServiceNow instance
Scenarios requiring write operations without explicit enablement
Users seeking official ServiceNow endorsement or support

Required permissions

Requires ServiceNow instance URL and credentials (basic or OAuth)
Read-only by default; write, scripting, and CMDB writes are opt-in flags
Network access to the ServiceNow instance

Risks and side effects

Potential accidental modification of production data if write operations are enabled (disabled by default)
Sensitive credentials need careful handling
Non-official, third-party maintenance risk

Setup

Before you start

Runtime：Node.js 20+ · Hosted (no local runtime)

SERVICENOW_INSTANCE_URL required Your ServiceNow instance URL (e.g. https://yourinstance.service-now.com); required.

SERVICENOW_AUTH_METHOD required Auth method, 'basic' or 'oauth'; required.

SERVICENOW_BASIC_USERNAME optionalsecret ServiceNow username for basic auth; get from instance user admin.

SERVICENOW_BASIC_PASSWORD optionalsecret ServiceNow password for basic auth; secret.

NOWAIKIT_API_KEY optionalsecret Bearer token for API auth in sse/http mode; secret.

Other optional settings (9)

WRITE_ENABLED optional Enables write operations (default false) — opt-in for state-changing tools.

SCRIPTING_ENABLED optional Enables scripting tools (default false).

CMDB_WRITE_ENABLED optional Enables CMDB write operations (default false).

NOW_ASSIST_ENABLED optional Enables Now Assist AI features (default false).

ATF_ENABLED optional Enables ATF test execution (default false).

MCP_TOOL_PACKAGE optional Role-based tool package such as full, service_desk, platform_developer.

TRANSPORT optional Transport mode: stdio (default), sse, or http.

PORT optional HTTP port for sse/http transport, default 3000.

FLUENT_ENABLED optional Enables Fluent SDK tools (default false).

Ensure Node.js 20+.
Install globally: npm install -g nowaikit.
Run the wizard: npx nowaikit setup to auto-detect AI clients and write config.
Restart your AI client. Alternatively, manually configure MCP client with environment variables like SERVICENOW_INSTANCE_URL, SERVICENOW_BASIC_USERNAME, SERVICENOW_BASIC_PASSWORD.

claude_desktop_config.json

{
  "mcpServers": {
    "nowaikit": {
      "command": "npx",
      "args": [
        "-y",
        "nowaikit"
      ],
      "env": {
        "SERVICENOW_INSTANCE_URL": "https://yourcompany.service-now.com",
        "SERVICENOW_BASIC_USERNAME": "your_username",
        "SERVICENOW_BASIC_PASSWORD": "your_password"
      }
    }
  }
}

Shown for Claude Desktop. Other clients may use a different file or key (VS Code uses "servers") — the configurator below converts it.

.vscode/mcp.json

{
  "servers": {
    "nowaikit": {
      "command": "npx",
      "args": [
        "-y",
        "nowaikit"
      ],
      "env": {
        "SERVICENOW_INSTANCE_URL": "https://yourcompany.service-now.com",
        "SERVICENOW_BASIC_USERNAME": "your_username",
        "SERVICENOW_BASIC_PASSWORD": "your_password"
      }
    }
  }
}

Goes in your project's .vscode/mcp.json (VS Code uses a "servers" key).

Terminal

claude mcp add nowaikit -e SERVICENOW_INSTANCE_URL=https://yourcompany.service-now.com -e SERVICENOW_BASIC_USERNAME=your_username -e SERVICENOW_BASIC_PASSWORD=your_password -- npx -y nowaikit

Run it in a terminal; replace any <…> placeholders with your own values first.

Generate and validate client config

Check that it works

Run npx nowaikit setup to configure your client, restart it, then ask "How many active P1 incidents are open right now?" — a live answer from your instance confirms the connection works.

Troubleshooting

Ensure Node.js 20+ is installed
Check environment variables are correctly set
Verify ServiceNow instance URL and credentials are valid
Consult documentation for client setup and usage

Things to try

Once connected, you can ask your AI assistant things like:

How many active P1 incidents are open right now?
Show me the 5 most recent changes and their risk.
What's the CMDB health for our prod CIs?
Create a business rule on the incident table that notifies the on-call group when priority is P1.

Use cases

Query how many active P1 incidents are open

Show the 5 most recent changes and their risk

Create a business rule on the incident table

Run the ATF suite for the HR onboarding flow

Check CMDB health for prod CIs

Look up GlideRecord.addEncodedQuery syntax in ServiceNow docs

Supported clients

Claude Desktop

ChatGPT

Gemini

Cursor

GitHub Copilot

Listed from the project's documentation, not tested by this site.

Overview

ServiceNow MCP server (NowAIKit) providing 450+ tools across ITSM, ITOM, CMDB, HRSD, CSM, Flow Designer, scripting, and portal. Read-only by default, multi-transport (stdio, SSE, HTTP), dynamic schema discovery, part of the NowAIKit suite. Open source, TypeScript.

Similar servers

Hevy MCP 77 · B

Manage your Hevy workout data from AI assistants via MCP.

★ 509 · Tools 26 Compare with this →

Firecrawl MCP Server 75 · B

Firecrawl's official MCP server for web search, scraping, and structured extraction for AI agents

★ 7.6k · Tools 11 Compare with this →

BioMCP 75 · B

One binary. One grammar. Evidence from the biomedical sources you already trust.

★ 654 · Tools 11 Compare with this →

Compartment 75 · B

Encrypted, fully offline long-term memory for AI agents

★ 579 · Tools 14 Compare with this →

Compare with other MCP servers

Source revision 4b5b646e1851 Data synced 2026-10-12 Read the FMRS scoring method