servicenow-cmdb

servicenow-cmdb is a skill for Claude Code from jschuller/mcp-server-servicenow. It costs 110 tokens per session (5,303 once invoked), scanned A, original, MIT.

A ServiceNow workflow for exploring the Configuration Management Database, or CMDB. A CMDB records IT components, called configuration items, and the relationships between them.

In plain words
What is it for?
Use it to inspect CI classes, map dependencies, review CMDB health and data quality, and assess service taxonomy against CSDM, ServiceNow's common service-data model.
Why use it?
It helps reveal how the CMDB is organised and identify missing, duplicate, disconnected, or unreliable data.

Skill for Claude Code

Written for Claude Code: shipped in a Claude Code plugin.

Part of the servicenow plugin — 4 skills, 1 MCP server, 3 plugins shipped together

Good fit Use it to inspect CI classes, map dependencies, review CMDB health and data quality, and assess service taxonomy against CSDM, ServiceNow's common service-data model.

Compare 6 skills from other repositories ↓
Install with agentmods
npx agentmods add skills/jschuller/mcp-server-servicenow/servicenow-cmdb
Install

Getting it into your agent

One page per mod, every tool's command on it. A separate URL per tool would split the same page into five that compete with each other.

Any agent
npx skills add jschuller/mcp-server-servicenow --skill servicenow-cmdb
Clone the repo
git clone --depth 1 https://github.com/jschuller/mcp-server-servicenow

Made for: Claude Code.

Or install servicenow, the plugin that ships this one along with the rest of its 4 skills, 1 MCP server, 3 plugins.

Wrote this? Show the measurements

A badge with what this costs and how it scanned, read live from this page, so it follows the numbers instead of freezing them. Markdown for a README, HTML for a documentation site or a project page.

agentmods badge for servicenow-cmdb

README.md
[![agentmods](https://agentmods.dev/badge/skills/jschuller/mcp-server-servicenow/servicenow-cmdb/github.svg)](https://agentmods.dev/skills/jschuller/mcp-server-servicenow/servicenow-cmdb)
Your own site
<a href="https://agentmods.dev/skills/jschuller/mcp-server-servicenow/servicenow-cmdb"><img src="https://agentmods.dev/badge/skills/jschuller/mcp-server-servicenow/servicenow-cmdb/github.svg" alt="Measured on agentmods" height="20"></a>

Or the 80×15 button, for a site that already has a row of RSS and ATOM ones. Only the verdict fits; the numbers stay here.

agentmods 80×15 button for servicenow-cmdb

Your own site · 80×15
<a href="https://agentmods.dev/skills/jschuller/mcp-server-servicenow/servicenow-cmdb"><img src="https://agentmods.dev/badge/skills/jschuller/mcp-server-servicenow/servicenow-cmdb.svg" alt="Reviewed on agentmods" width="80" height="20"></a>
Per session 110 Skills are progressive disclosure: only the name and description are preloaded; the body loads when the skill is used.
When invoked 5,303 The whole file, excluding the scripts and references it only reads on demand.
Security scan A 0 findings. A grade says what 26 rules found in the file — not that it is safe. Third-party audits
  • NVIDIA SkillSpector pass 7 Sept 2026
How audits are shown
Origin original No closer match found in the catalogue.
Token cost

What it costs to keep this loaded

Counted locally with the o200k_base tokenizer, which is exact for GPT models; Claude uses its own tokenizer and its counts differ. Treat this as one consistent yardstick across the catalogue rather than a bill. Prices are per million input tokens.

ModelPer sessionOnce invoked
Fable 5.1 $0.00110 $0.05303
Opus 5.5 $0.00044 $0.02121
Sonnet 5.5 $0.00022 $0.01061
Haiku 4.5 $0.00011 $0.00530

Measured 4d ago against content hash ae669483a551, method: parsed. Prices are Anthropic first-party input rates as of 2026-10-07, from the pricing page.

Security

Grade A, and why

servicenow-cmdb scanned grade A with 0 findings against 26 rules in 11 categories — prompt injection, anti-refusal, data exfiltration, privilege escalation, supply chain, agent snooping, system-prompt leakage, SSRF and excessive agency — measured 4d ago.

A static scan of the body, not an audit. Every finding is printed with the line that produced it so you can judge whether it matters here. A mod is markdown that instructs an agent; that is exactly why what it instructs is worth reading.

Nothing flagged

None of the 26 patterns this scan looks for appear in this file: no shell pipes, no recursive deletes, no credential paths, no hidden text, no instruction-override or anti-refusal phrasing, no agent-config snooping. That is not a guarantee, it is the absence of the things that are checkable.

src/servicenow_mcp/skills/servicenow-cmdb/SKILL.md · 298 lines

How it starts

The opening of the file, as written. The whole thing — 298 lines — stays where its author put it; the contents beside it link to each section on GitHub.

ServiceNow CMDB Data Foundations

Audit the CMDB as a data model: explore CI classes, read raw relationships, assess CMDB health, investigate data quality, review the CSDM service taxonomy, and score CSDM conformance by stage. This is platform data work, read-only.

For conversational CI search, service topology and change impact, ServiceNow ships its own CMDB MCP server (with Otto for CMDB). It has no health, staleness, duplicate or CSDM conformance tools; that is what this skill covers. See references/cmdb-tables.md for CI classes, health KPIs, CSDM mappings and encoded query syntax, and references/csdm5.md for CSDM 5 stages and the conformance scores.

Tables and roles

Tables Readable with
cmdb_ci and most CI classes, cmdb_rel_ci, service_offering, sn_getwell_csdm_score cmdb_read ("CMDB reader"); itil contains it. snc_read_only alone gets 403 on cmdb_ci and the scores
cmdb_health_scorecard, cmdb_health_result, cmdb_health_metric, the health rules sn_cmdb_user (CMDB Workspace, read-only) or itil; cmdb_read alone is not enough
Service classes such as cmdb_ci_service_business and cmdb_ci_service_technical Often a service or CMDB role beyond itil: expect 403
sys_db_object (class hierarchy) itil and many other roles; servicenow://cmdb/classes reads it for you
cmn_location, cmdb_model, alm_hardware itil
reconcile_duplicate_task (de-duplication tasks) Returned 0 rows to itil + snc_read_only on a developer instance: empty or hidden, the call can't tell which

Add snc_read_only to keep the identity read-only. These are the read ACLs on a Brazil instance; yours may differ. Creating or updating CIs needs sn_cmdb_editor: since Zurich, itil no longer contains it.

When access is denied

  • A 403 on a class or table means not assessable with this identity. Name it in the report as a gap, and keep going with the classes you can read.
  • 0 rows from a class can mean the class is empty or that ACLs hide its rows. Don't report "no services" when the read might be filtered.
  • Health and score tables stay empty until their scheduled jobs have run. Empty is not the same as healthy.

Read the full file on GitHub · 298 lines

Files

What ships with it

2 files beside SKILL.md in the same directory: the scripts, references and assets a skill reads on demand. Not counted in the per-session cost; read them before you install if any of them is executable.

Changes

What this file has done since we first saw it

Hashed on every crawl. A supply-chain change to an agent config is a question of when, not whether, so the history is kept rather than the latest state alone.

  1. 4d ago Changed · +67 lines ae669483a551
  2. 12d ago Changed · +46 lines · +11 tokens per session 18ce4deb44fd
  3. 14d ago Changed · +10 lines · +6 tokens per session 41340f72dd3d
  4. 1mo ago First seen · 175 lines · 93 tokens per session scan A e108bc0589fc

Subscribe to this mod's changes

servicenow-cmdb is a skill published in the GitHub repository jschuller/mcp-server-servicenow (26 stars, last pushed 3d ago), licensed MIT. It adds 110 tokens to every session and 5,303 once invoked, about $0.0004 per session on Opus 5.5. A static security scan graded it A with 0 findings. No closer match exists in the catalogue, so it is treated as the original; first seen 2026-08-30.

Related

Other skills, from other repositories

build-sql-transformation

Create or change a Snowflake or BigQuery SQL transformation in Keboola. Use when the user wants to turn a query into a saved transformation, build a new table from existing Keboola tables, or edit the SQL of an existing transformation.

keboola/mcp-server · 54 tokens

explore-project-data

Explore a Keboola project's data. Use when the user asks what data they have in Keboola, which buckets or tables exist, what a table contains, or wants a read-only SQL answer from their Keboola tables.

keboola/mcp-server · 49 tokens

servicenow-cmdb

ITOM CMDB operations on the ServiceNow CMDB + CI Lifecycle Management APIs via the servicenow-api MCP server — query configuration items by class, read a CI with its attributes and relations, create/update/patch CI instances, manage CI relationships, and drive the CI lifecycle (status, actions, leases, operators). Use…

Knuckles-Team/servicenow-api · 130 tokens

db-explorer

Read-only SQL database analysis through the db-explorer MCP server. Use when the user asks about a database's tables, columns or relationships, wants data pulled with a SELECT, asks why a query is slow or which index to add, wants a schema health check, or is drafting a migration to check before running it. Works on…

AYUSH-148/DB-Explorer-MCP · 85 tokens

swag

This skill should be used when the user says "add proxy config", "create reverse proxy", "SWAG config", "nginx proxy", "expose service", "proxy configuration", "subdomain config", "subfolder config", "configure SWAG", "list proxy configs", "view proxy config", "edit proxy config", "remove proxy config", "check proxy…

jmagar/swag-mcp · 118 tokens

scholar-workflow

Use when the user asks you to search, retrieve, or reason about scholarly sources — papers, patents, books, or standards — guides tool selection, chaining, and cross-domain workflows.

pvliesdonk/scholar-mcp · 42 tokens