ServiceNow MCP
Connect a ServiceNow-hosted MCP server to BotDojo with OAuth 2.0, discover its tools, and control which actions agents can use.
Connect ServiceNow to BotDojo through ServiceNow's Model Context Protocol (MCP) Server Console. BotDojo treats ServiceNow as a branded Remote MCP Connection, discovers the tools exposed by the selected ServiceNow server, and applies BotDojo Connection access and approval controls to those tools.
ServiceNow tools can read or change data depending on the REST APIs, actions, subflows, Knowledge Graph capabilities, and Now Assist skills selected by the ServiceNow administrator. The ServiceNow server and authorizing user's access determine what is possible; connecting through BotDojo does not make a write tool read-only.
Use a dedicated server and user. Create a ServiceNow MCP server for the intended use case and expose only the required tools and inputs. Authorize BotDojo with a dedicated ServiceNow user that has only the roles, access controls, and data access those tools require. Do not authorize the Connection as the administrator who configured the server.
Before You Start
You need:
- a ServiceNow instance where MCP Server Console is available;
sn_mcp_server.adminoradminto create and manage the server;sn_mcp_server.tools_admin,sn_mcp_server.admin, oradminto create tools when the required tools do not already exist;oauth_admin,mi_admin, oradminto create the OAuth inbound integration;- a dedicated ServiceNow user to authorize BotDojo; and
- permission to add a Connection in the intended BotDojo project or personal workspace.
ServiceNow licensing, release, patch level, and installed applications affect which server features and tool types are available. Confirm the intended tools in the target instance before building the agent process around them.
If ServiceNow does not appear under Connections → Add Connection, ask a BotDojo administrator to allow Remote MCP Connections for the project or personal workspace.
Prepare ServiceNow
Select or create the tools
- In ServiceNow, navigate to All → MCP Server Console.
- Open Configuration → Tools.
- Review the existing tools. If the required capability is missing, select Create tool and choose a supported source such as a REST API, action, subflow, Knowledge Graph capability, or Now Assist skill.
- Turn off any optional tool inputs that the BotDojo agent should not be able to choose.
- Create the tool and test its underlying capability with the intended ServiceNow user.
The tool definition controls the operation and which inputs are exposed to the MCP client. ServiceNow roles, access controls, and data security still apply when the tool runs.
Create the MCP server
-
In MCP Server Console, open Configuration → Servers.
-
Select Create server.
-
Enter a label and short description that identify the server's use case.
-
Select Add tools and add only the tools BotDojo should discover.
-
Select Create to activate the server. Use Save as draft if it should not accept client connections yet.
-
Copy the generated Server URL. A custom server uses this format:
https://<instance>.service-now.com/sncapps/mcp-server/mcp/<server-name>
ServiceNow also provides a Quickstart Server for initial testing. Use a purpose-built server for production so its tools and inputs match the approved agent process.
Create the OAuth inbound integration
-
In MCP Server Console → Configuration → Servers, select Set up OAuth from the OAuth setup banner. You can also open All → Machine Identity Console → Inbound integrations.
-
Select New integration.
-
Select OAuth - Authorization code grant.
-
Configure the integration:
ServiceNow setting Value Name A recognizable name such as BotDojo MCPRedirect URLs https://app.botdojo.com/integrations/remotemcp/oauth_redirectAllow access only to APIs in selected scope Cleared, as required by ServiceNow's MCP client setup Token Format JWT -
Select Save.
-
Record the generated client ID and client secret for the BotDojo Connection.
Use the BotDojo URL for your environment when connecting from a custom or non-production deployment. The Redirect URI shown in BotDojo's ServiceNow setup is authoritative and must match a ServiceNow Redirect URLs value exactly.
Do not reuse an inbound integration whose name merely matches an MCP server. ServiceNow can create similarly named integrations for AI Control Tower monitoring; those are not client integrations.
Connect ServiceNow In BotDojo
-
Choose where the Connection should be owned:
- For a project Connection, open the project and select Context → Connections → Add Connection.
- For a personal Connection, open Personalization → Connections and select Add beside My Connections.
-
Search for and select ServiceNow.
-
Confirm that the Redirect URI shown in the setup instructions is registered on the ServiceNow OAuth inbound integration.
-
Enter the generated ServiceNow MCP Server URL.
-
Enter the OAuth inbound integration's client ID and client secret.
-
Keep the ServiceNow OAuth defaults unless ServiceNow documents different values for the selected server:
BotDojo setting Default OAuth Scope mcp_serverToken Endpoint Auth Method Client Secret Post Authorization Endpoint https://<instance>.service-now.com/oauth_auth.doToken Endpoint https://<instance>.service-now.com/oauth_token.do -
Select Connect.
-
Sign in as the dedicated ServiceNow user and approve the OAuth consent request.
-
Wait for BotDojo to save the Connection and discover the server's tools.
The OAuth authorization uses the ServiceNow identity that completes the consent flow. Every later tool call remains subject to that user's roles, access controls, and data access.
Review Tool Access
After authorization, open the saved ServiceNow Connection and review Tools before assigning it to an agent:
- Select Refresh if tool discovery has not completed.
- Disable every tool the agent does not need.
- Set each enabled tool to Deny, Ask, or Allow.
- Use Ask for tools that create, update, delete, transition, approve, or otherwise change ServiceNow data.
- Set Default Approval to Deny so a tool added to the ServiceNow server does not become usable without review.
- Save the Connection.
- Grant the intended users and agents access, or enable the Connection in the intended workspace.
These controls are complementary:
| Boundary | What it controls |
|---|---|
| ServiceNow MCP server | Which tools and tool inputs the client can discover |
| ServiceNow user | Which records and operations the tools can access at runtime |
| BotDojo Connection | Which users and agents can use the Connection and whether a tool call is denied, requires approval, or runs automatically |
Verify the Connection
- Confirm that the ServiceNow Connection shows the tools selected on the MCP server.
- From an authorized workspace, run a bounded read request against a known incident or case.
- Confirm that a tool marked Ask pauses for approval.
- If the server intentionally exposes an action tool, test it first against a non-production record and confirm the resulting ServiceNow audit history.
- If AI Gateway monitoring is available in the ServiceNow instance, confirm that it records the MCP server and tool activity.
Whenever the ServiceNow administrator changes the server's tool list, select Refresh on the BotDojo Connection and review approvals again.
Troubleshooting
| Symptom | What to check |
|---|---|
| ServiceNow is missing from Add Connection | A BotDojo administrator must allow Remote MCP Connections for the project or personal workspace. |
| MCP Server Console or a tool type is unavailable | Confirm the instance's ServiceNow release, patch level, installed applications, licenses, and the administrator's MCP roles. |
| OAuth rejects the redirect URI | Copy the exact Redirect URI shown by BotDojo into the inbound integration's Redirect URLs field. Check the scheme, host, path, and trailing slash. |
| OAuth reports an invalid client or secret | Confirm that the client ID and secret came from the inbound integration created for BotDojo, not an AI Control Tower monitoring integration. |
| OAuth reports an invalid scope | Keep BotDojo's mcp_server scope and confirm that Allow access only to APIs in selected scope is cleared on the inbound integration. |
| No tools are discovered | Confirm that the MCP server is active, its URL contains the correct server name, and it has at least one tool. Then select Refresh in BotDojo. |
| A tool returns 401 or 403 | Reauthorize with the intended ServiceNow user and verify that user's roles, access controls, application access, and record-level permissions. |
| A tool is missing or has stale inputs | Review the active ServiceNow server configuration, then refresh the BotDojo Connection. ServiceNow may require recreating a tool to expose newly added inputs. |
| A write occurs without the expected prompt | Set that tool to Ask, set Default Approval to Deny, and verify that the agent is using the intended Connection. |