Getting it into your agent
One page per mod, every tool's command on it. A separate URL per tool would split the same page into five that compete with each other.
npx skills add Knuckles-Team/servicenow-api --skill servicenow-incident-managementgit clone --depth 1 https://github.com/Knuckles-Team/servicenow-apiWrote this? Show the measurements
A badge with what this costs and how it scanned, read live from this page, so it follows the numbers instead of freezing them. Markdown for a README, HTML for a documentation site or a project page.
[](https://agentmods.dev/skills/knuckles-team/servicenow-api/servicenow-incident-management)<a href="https://agentmods.dev/skills/knuckles-team/servicenow-api/servicenow-incident-management"><img src="https://agentmods.dev/badge/skills/knuckles-team/servicenow-api/servicenow-incident-management/github.svg" alt="Measured on agentmods" height="20"></a>Or the 80×15 button, for a site that already has a row of RSS and ATOM ones. Only the verdict fits; the numbers stay here.
<a href="https://agentmods.dev/skills/knuckles-team/servicenow-api/servicenow-incident-management"><img src="https://agentmods.dev/badge/skills/knuckles-team/servicenow-api/servicenow-incident-management.svg" alt="Reviewed on agentmods" width="80" height="20"></a>- NVIDIA SkillSpector pass
What it costs to keep this loaded
Counted locally with the o200k_base tokenizer, which is exact for GPT models; Claude uses its own tokenizer and its counts differ. Treat this as one consistent yardstick across the catalogue rather than a bill. Prices are per million input tokens.
| Model | Per session | Once invoked |
|---|---|---|
| Fable 5.1 | $0.00133 | $0.01145 |
| Opus 5 | $0.00067 | $0.00573 |
| Sonnet 5 | $0.00027 | $0.00229 |
| Haiku 4.5 | $0.00013 | $0.00114 |
Grade A, and why
servicenow-incident-management scanned grade A with 0 findings against 26 rules in 11 categories — prompt injection, anti-refusal, data exfiltration, privilege escalation, supply chain, agent snooping, system-prompt leakage, SSRF and excessive agency — measured 12d ago.
A static scan of the body, not an audit. Every finding is printed with the line that produced it so you can judge whether it matters here. A mod is markdown that instructs an agent; that is exactly why what it instructs is worth reading.
Nothing flagged
None of the 26 patterns this scan looks for appear in this file: no shell pipes, no recursive deletes, no credential paths, no hidden text, no instruction-override or anti-refusal phrasing, no agent-config snooping. That is not a guarantee, it is the absence of the things that are checkable.
How it starts
The opening of the file, as written. The whole thing — 97 lines — stays where its author put it; the contents beside it link to each section on GitHub.
ServiceNow Incident Management
Domain-typed access to the ServiceNow Incident table (incident) for ITSM
triage and intake. Prefer these tools over raw table CRUD — they carry the
incident field conventions and return incident-shaped records.
When to use
- List / triage active incidents (e.g. ordered by priority).
- Fetch a single incident by
sys_id. - Create a new incident (short_description + urgency/impact/caller_id).
When NOT to use
- Generic CRUD on any other table →
servicenow-table-api. - Change requests, CMDB CIs, or knowledge articles → their dedicated skills
(
servicenow-change-management,servicenow-cmdb,servicenow-knowledge). - Bulk state transitions or fields the typed tool doesn't expose → fall back to
servicenow-table-apiagainst theincidenttable.
Prerequisites & environment
Connect via the mcp-client skill against the servicenow-api MCP server.
| Variable | Required | Notes |
|---|---|---|
SERVICENOW_INSTANCE |
✅ | Instance URL (alias SERVICENOW_URL) |
SERVICENOW_USERNAME |
✅ | Basic-auth user |
SERVICENOW_PASSWORD |
✅ | Basic-auth password |
SERVICENOW_CLIENT_ID / SERVICENOW_CLIENT_SECRET |
optional | OAuth2 |
SERVICENOW_SSL_VERIFY |
optional | TLS verification toggle |
Full env/tag matrix (do not re-document here): the mcp-client reference
agent-tools/mcp-client/references/servicenow-api.md. MCP_TOOL_MODE
(condensed|verbose|both) selects the condensed surface (used below) vs. the
one-to-one verbose tools.
Tools & actions
Prefer the condensed tool; it takes action + a params_json JSON string
whose keys are passed straight to the client method.
| Condensed tool | Actions |
|---|---|
servicenow_incidents |
get_incidents, get_incident, create_incident |
Key parameters
sys_id— required forget_incident.data— object of field→value forcreate_incident(short_description,urgency,impact,caller_id, …).- Query/pagination controls (
sysparm_query,sysparm_fields,sysparm_limit,sysparm_offset,sysparm_display_value) follow Table-API encoded-query syntax — seeservicenow-table-apifor the cheat-sheet.
What ships with it
1 file beside SKILL.md in the same directory: the scripts, references and assets a skill reads on demand. Not counted in the per-session cost; read them before you install if any of them is executable.
What this file has done since we first saw it
Hashed on every crawl. A supply-chain change to an agent config is a question of when, not whether, so the history is kept rather than the latest state alone.
- 12d ago First seen · 97 lines · 133 tokens per session scan A 5a4b41183220
servicenow-incident-management is a skill published in the GitHub repository Knuckles-Team/servicenow-api (19 stars, last pushed 14d ago), licensed MIT. It adds 133 tokens to every session and 1,145 once invoked, about $0.0007 per session on Opus 5. A static security scan graded it A with 0 findings. No closer match exists in the catalogue, so it is treated as the original; first seen 2026-08-30.
Other skills, from other repositories
incident-response-skill
A skill that uses object-style tool references with purpose descriptions and required flags, plus strict validation.
servicenow-expert
Expert in ServiceNow platform development, scripting, workflows, Service Portal, CMDB, ITSM modules, and integrations. Use when the user mentions ITSM, ITOM, workflow, automation, CMDB, or service portal, or when the task involves ServiceNow Platform, Development Components, Scripting APIs, or GlideRecord Query and…
servicenow-ticket
Create a ServiceNow incident via the Table API. Requires SERVICENOWINSTANCE, SERVICENOWUSER, and SERVICENOWPASSWORD environment variables on the server. Trigger on: create a ServiceNow incident, raise an ITSM ticket, log an incident.
teamdynamix
Use this skill when the user needs TeamDynamix ITSM operations through MCP: ticket triage and updates, KB article maintenance, asset/CI relationships, service catalog lookups, project issue/risk workflows, or time entry queries. Always discover IDs first, use read-before-write patterns, and enforce write safety gates.
tdx-knowledge-base
This skill should be used when the user asks about TeamDynamix knowledge base articles or documentation. Common queries include "search the KB", "find a knowledge article", "create documentation", "write a how-to article", "find instructions for", "look up a FAQ", "browse KB categories".
tdx-tickets
This skill should be used when the user asks about TeamDynamix tickets, incidents, service requests, or work orders. Common queries include "create a ticket", "find my open tickets", "ticket status", "assign a ticket", "update a support ticket", "submit a service request", "check on my help desk request", "search for…