Ranked roundup · ServiceNow
Best MCP Server for ServiceNow
There is an official MCP server for ServiceNow, which puts this category ahead of most enterprise software. The MCP Server Console shipped with the Zurich release: it publishes Now Assist Skills, synchronous subflows, and scripted REST APIs as MCP tools from inside your instance, behind OAuth 2.0. The catch is access — it sits behind Now Assist licensing, and pricing questions get routed to your account team. That gap is why community servers still matter. The most-adopted one (echelon-ai-labs, 297 GitHub stars, MIT) covers roughly 80 tools across incidents, catalog, change, and knowledge, though it hasn't seen a push since April 2026. A newer source-available project, NowAIKit, claims 450+ tools with read-only defaults and was updated in August 2026. Managed platforms like Composio also carry ServiceNow endpoints. We ranked five options on verifiable criteria — official status, maintenance recency, adoption, auth model, and documented coverage. No paid placement, and every number below was checked against GitHub and vendor docs on the verification date.
Facts checked September 1, 2026 · ranked on verifiable criteria · placement is never for sale
Founder, Automation Squad ·
The ranking
- Official · ServiceNow
Enterprises already on Zurich with Now Assist licensing that need vendor-supported, audited agent access
Publishes Now Assist Skills (50+ out of the box, custom ones via Skill Kit), synchronous Flow Designer subflows and actions, scripted REST APIs, and Knowledge Graph queries as MCP tools — with AI Control Tower governance, audit trails, and consumption metering.
Built into your ServiceNow instance from the Zurich release onward; remote MCP endpoint only, no local server option. · OAuth 2.0 authorization-code grant only, with OIDC federation for Okta, Microsoft Entra, and Ping Identity. Client-credential grant is not yet supported.
- Gated behind Now Assist licensing; ServiceNow defers pricing questions to your account team
- OAuth authorization-code grant only — no client-credential grant yet, which complicates headless service accounts
- Async and wait-step subflows cannot be exposed as tools; MCP resources and prompts are not supported
- Dynamic Client Registration is not supported; some auth features (CIMD) require Zurich Patch 7 / Australia Patch 1 or later
- Community
Teams that want the most-adopted free, MIT-licensed server they fully control
Roughly 80 tools across incident management, service catalog, change, agile, workflow, script includes, changesets, knowledge base, user management, and UI policies. Role-based tool packages (service desk, catalog builder, change coordinator, etc.) limit what each agent sees.
Self-hosted; Python 3.11+, installed via pip, runs over stdio for Claude Desktop and Claude Code. · Basic auth, OAuth, or API key, configured via environment variables. · MIT · 297★
- Unofficial — no ServiceNow support or guarantees
- No commits since April 26, 2026, and 33 open issues at verification — maintenance has slowed
- Formerly published as osomai/servicenow-mcp; old links redirect to the renamed repo
- Basic-auth mode puts a plain instance password in env vars — use the OAuth option for anything beyond a dev instance
- Community
Coverage-first teams that want the widest tool surface with safe read-only defaults
Claims 450+ tools across ITSM, ITOM, CMDB, HRSD, CSM, Flow Designer, scripting, and portal, with dynamic schema discovery. Read-only by default — writes, scripting, and CMDB changes are opt-in flags, so production can't be modified by accident.
Self-hosted TypeScript server with stdio, SSE, and HTTP transports; a browser-based NowAIKit Cloud option also exists. · Basic auth or OAuth against your instance, with multi-instance and per-client setup documented. · Elastic License 2.0 (source-available) · 275★
- Unofficial, and a young project — the repo was created in February 2026
- Elastic License 2.0 is source-available, not OSI open source; check the terms before redistributing or embedding commercially
- The 450+ tool count is the project's own claim; we verified the docs, not each individual tool
- Community
Teams that want ServiceNow plus their other SaaS tools behind one hosted endpoint with zero auth plumbing
ServiceNow toolkit actions (listing and creating incidents, change requests, ticket updates) exposed alongside hundreds of other app toolkits through a single MCP endpoint, with structured LLM-friendly schemas.
Fully managed and hosted; one MCP endpoint through Composio's tool router, nothing to run yourself. · Composio manages OAuth end-to-end — token storage, refresh, and scopes — so instance credentials never live in your MCP client config.
- A third-party SaaS sits between your agent and your ServiceNow instance — a real compliance question for many ServiceNow shops
- Tool coverage is defined by Composio's toolkit, not the full ServiceNow API
- Commercial platform — Composio's pricing applies on top of your ServiceNow licensing
- Community
Security-conscious teams that want modern OAuth on a small, auditable codebase
19 tools and 5 MCP resources covering incidents, CMDB, and update sets, plus bundled Claude Code skills. States it works on any ServiceNow version from Tokyo onward with no extra entitlements.
Self-hosted; built on FastMCP 4 and implements the stateless MCP 2026-07-28 protocol. · OAuth 2.1 with PKCE — the most current auth spec of any server in this roundup. · MIT · 16★
- 16 stars at verification — minimal adoption, so expect to be an early tester
- Unofficial, single-maintainer project
- Much narrower coverage (19 tools) than the larger community servers
ServiceNow MCP servers compared
| Server | Maintained by | Runs | Auth | License |
|---|---|---|---|---|
| ServiceNow MCP Server Console | ServiceNow | Built into your ServiceNow instance from the Zurich release onward; remote MCP endpoint only, no local server option. | OAuth 2.0 authorization-code grant only, with OIDC federation for Okta, Microsoft Entra, and Ping Identity. Client-credential grant is not yet supported. | — |
| echelon-ai-labs/servicenow-mcp | Community | Self-hosted; Python 3.11+, installed via pip, runs over stdio for Claude Desktop and Claude Code. | Basic auth, OAuth, or API key, configured via environment variables. | MIT |
| NowAIKit (aartiq/servicenow-mcp) | Community | Self-hosted TypeScript server with stdio, SSE, and HTTP transports; a browser-based NowAIKit Cloud option also exists. | Basic auth or OAuth against your instance, with multi-instance and per-client setup documented. | Elastic License 2.0 (source-available) |
| Composio ServiceNow MCP | Community | Fully managed and hosted; one MCP endpoint through Composio's tool router, nothing to run yourself. | Composio manages OAuth end-to-end — token storage, refresh, and scopes — so instance credentials never live in your MCP client config. | — |
| jschuller/mcp-server-servicenow | Community | Self-hosted; built on FastMCP 4 and implements the stateless MCP 2026-07-28 protocol. | OAuth 2.1 with PKCE — the most current auth spec of any server in this roundup. | MIT |
How to choose
Pick the official MCP Server Console if your instance is on Zurich or later and you already pay for Now Assist — it's the only option with vendor support, platform-level OAuth, and audit trails. Pick echelon-ai-labs/servicenow-mcp if you want a free, MIT-licensed server you control and can live with a repo last pushed in April 2026. Pick NowAIKit for the widest tool surface and read-only defaults, accepting a source-available (not open source) license. Pick Composio if you want hosted auth and no server to run. Pick jschuller's server if OAuth 2.1 with PKCE is a hard requirement.
How this ranking works
Every server here is real and was checked against its repository or vendor documentation on the date above — stars and licenses come from the GitHub API, not from memory. Order reflects verifiable criteria only: official support, maintenance recency, adoption, auth model, and documented capability coverage. We do not run paid placements, and we list every caveat we find, including the unflattering ones.
Common questions
- Does ServiceNow have an official MCP server?
- Yes. The MCP Server Console is built into the platform from the Zurich release and publishes Now Assist Skills, synchronous subflows, and scripted REST APIs as MCP tools. It requires Now Assist licensing and works as a remote endpoint only — local MCP servers are not supported.
- What does authentication actually look like for ServiceNow MCP servers?
- The official console is OAuth 2.0 authorization-code grant only — no client-credential grant yet — with OIDC federation for Okta, Entra, and Ping. Community servers typically take an instance URL plus basic-auth or OAuth credentials in environment variables; basic auth gets you running in minutes on a dev instance, but production access should go through a dedicated OAuth integration user with scoped roles.
- Can I try a ServiceNow MCP server without a paid ServiceNow license?
- Yes. ServiceNow's free Personal Developer Instance at developer.servicenow.com works with the community servers using basic auth. The official MCP Server Console is the exception — it needs a Zurich-or-later instance with Now Assist.
- Are the community ServiceNow MCP servers production-safe?
- They're unofficial, so weigh maintenance before trusting one: the most-starred server hasn't been pushed since April 2026, while NowAIKit was updated in August 2026 and defaults to read-only with opt-in writes. Whichever you pick, pin versions, use OAuth rather than basic auth, and scope the integration user's roles to only what the agent needs.
MCP servers we build
Automation Squad publishes its own open-source MCP servers and agent skills, documented with the same rules this ranking uses.