
Security News
Opengrep Adds Apex Support and New Rule Controls in Latest Updates
The latest Opengrep releases add Apex scanning, precision rule tuning, and performance gains for open source static code analysis.
snow-flow
Advanced tools
ServiceNow development framework with MCP server integration. Executes background scripts using ES5 JavaScript only (ServiceNow Rhino engine requirement). Provides 17 MCP servers for complete ServiceNow operations including widget deployment with coherenc
ServiceNow development framework with AI-powered automation through 17 MCP servers and 200+ specialized tools.
# Install globally
npm install -g snow-flow
# Verify installation
snow-flow --version
# Clone repository
git clone https://github.com/groeimetai/snow-flow.git
cd snow-flow
# Install dependencies
npm install
# Build project
npm run build
# Link globally (optional)
npm link
# Create project directory
mkdir my-servicenow-project
cd my-servicenow-project
# Initialize Snow-Flow
snow-flow init
This creates:
.env
file for ServiceNow credentials.snow-flow/
configuration directory.claude/
MCP server configurationsCLAUDE.md
with comprehensive documentationEdit the .env
file with your ServiceNow instance details:
# ServiceNow Instance Configuration
SNOW_INSTANCE=your-instance.service-now.com
SNOW_USERNAME=admin.username
SNOW_PASSWORD=admin.password
# OAuth Configuration (recommended for production)
SNOW_CLIENT_ID=your-oauth-client-id
SNOW_CLIENT_SECRET=your-oauth-client-secret
# Optional: Claude API Key
ANTHROPIC_API_KEY=your-claude-api-key
Snow-Flow OAuth
http://localhost:3000/callback
86400
(24 hours)# Login to ServiceNow
snow-flow auth login
# Verify connection
snow-flow auth status
IMPORTANT: If you encounter "dangerously skip permissions" errors in Claude Code, you must first authenticate with Claude:
# 1. First, login to Claude (required for MCP servers to work)
claude login
# 2. Then start Claude Code with MCP servers
claude --mcp-config .claude/claude_desktop_config.json
The claude login
step is crucial - without it, MCP servers cannot authenticate with ServiceNow.
During snow-flow init
, you'll be prompted to automatically activate all MCP servers:
š Would you like to start Claude Code with MCP servers? (Y/n)
Selecting Y will:
If you need to manually activate MCP servers:
# Mac/Linux
claude --mcp-config .claude/claude_desktop_config.json
# Windows
claude.exe --mcp-config .claude/claude_desktop_config.json
Snow-Flow includes 17 specialized MCP servers with 200+ tools:
Widget and artifact deployment with coherence validation
snow_deploy
- Create new artifactssnow_update
- Update existing artifactssnow_delete
- Delete artifactssnow_validate_deployment
- Validate before deploymentsnow_rollback_deployment
- Rollback failed deploymentssnow_preview_widget
- Preview widgetssnow_widget_test
- Test widget functionalitysnow_batch_deploy
- Deploy multiple artifactsCore ServiceNow operations and queries
snow_query_table
- Query any table with paginationsnow_query_incidents
- Query and analyze incidentssnow_cmdb_search
- Search CMDBsnow_user_lookup
- Find userssnow_operational_metrics
- Get metricssnow_knowledge_search
- Search knowledge basesnow_create_incident
- Create incidentssnow_update_incident
- Update incidentsScript execution and automation
snow_execute_background_script
- Execute background scripts (ES5 only)snow_execute_script_with_output
- Execute with output capturesnow_execute_script_sync
- Synchronous executionsnow_confirm_script_execution
- Confirm executionsnow_create_scheduled_job
- Create scheduled jobssnow_create_atf_test
- Create automated testssnow_execute_atf_test
- Run testssnow_property_manager
- Manage propertiesCreate platform artifacts
snow_create_script_include
- Create Script Includessnow_create_business_rule
- Create Business Rulessnow_create_client_script
- Create Client Scriptssnow_create_ui_policy
- Create UI Policiessnow_create_ui_action
- Create UI Actionssnow_create_ui_page
- Create UI PagesREST/SOAP and data management
snow_create_rest_message
- Create REST integrationssnow_create_transform_map
- Create transform mapssnow_create_import_set
- Manage import setssnow_test_web_service
- Test web servicessnow_configure_email
- Configure emailSystem property management
snow_property_get
- Get property valuessnow_property_set
- Set property valuessnow_property_list
- List propertiessnow_property_delete
- Delete propertiessnow_property_bulk_update
- Bulk updatessnow_property_export
- Export to JSONsnow_property_import
- Import from JSONChange management and deployment
snow_update_set_create
- Create update setssnow_update_set_switch
- Switch active update setsnow_update_set_current
- Get current update setsnow_update_set_complete
- Complete update setsnow_update_set_export
- Export as XMLsnow_ensure_active_update_set
- Ensure active setIntelligent artifact management
snow_find_artifact
- Find any artifactsnow_edit_artifact
- Edit existing artifactssnow_get_by_sysid
- Get by sys_idsnow_analyze_artifact
- Analyze dependenciessnow_comprehensive_search
- Deep searchsnow_analyze_requirements
- Analyze requirementsSecurity and compliance management
snow_create_security_policy
- Create policiessnow_audit_compliance
- Audit compliancesnow_scan_vulnerabilities
- Scan vulnerabilitiessnow_assess_risk
- Risk assessmentsnow_review_access_control
- Review ACLsReporting and visualization
snow_create_report
- Create reportssnow_create_dashboard
- Create dashboardssnow_define_kpi
- Define KPIssnow_schedule_report
- Schedule reportssnow_analyze_data_quality
- Data qualityAI/ML capabilities with TensorFlow.js
ml_train_incident_classifier
- Train classifiersml_predict_change_risk
- Predict risksml_detect_anomalies
- Detect anomaliesml_forecast_incidents
- Forecast incidentsml_performance_analytics
- Performance MLml_hybrid_recommendation
- RecommendationsMulti-agent coordination
swarm_init
- Initialize swarmsagent_spawn
- Create agentstask_orchestrate
- Orchestrate tasksmemory_search
- Search memoryneural_train
- Train neural networksperformance_report
- Performance reportsKnowledge and service catalog
snow_create_knowledge_article
- Create articlessnow_search_knowledge
- Search knowledgesnow_create_catalog_item
- Create catalog itemssnow_create_catalog_variable
- Create variablessnow_order_catalog_item
- Order itemssnow_discover_catalogs
- Discover catalogsChange management and Virtual Agent
snow_create_change_request
- Create changessnow_schedule_cab_meeting
- Schedule CABsnow_create_va_topic
- Create VA topicssnow_send_va_message
- Send VA messagessnow_create_pa_indicator
- Create PA indicatorssnow_get_pa_scores
- Get PA scoresFlow Designer and Workspace
snow_list_flows
- List flowssnow_execute_flow
- Execute flowssnow_get_flow_details
- Get flow detailssnow_get_flow_execution_status
- Execution statussnow_get_flow_execution_history
- Execution historysnow_import_flow_from_xml
- Import flowssnow_create_workspace
- Create workspacessnow_configure_mobile_app
- Configure mobilesnow_send_push_notification
- Push notificationsCMDB and event management
snow_create_ci
- Create Configuration Itemssnow_create_ci_relationship
- Create relationshipssnow_run_discovery
- Run discoverysnow_create_event
- Create eventssnow_create_hr_case
- Create HR casessnow_employee_onboarding
- Onboardingsnow_create_customer_case
- Customer casessnow_create_devops_pipeline
- DevOps pipelinesBatch operations and optimization
snow_batch_api
- Batch API (80% reduction)snow_get_table_relationships
- Table relationshipssnow_analyze_query
- Query optimizationsnow_detect_code_patterns
- Pattern detectionsnow_discover_process
- Process discoverysnow_analyze_workflow_execution
- Workflow analysissnow_generate_documentation
- Auto-documentation// In Claude Code with MCP tools
await snow_deploy({
type: 'widget',
config: {
name: 'incident_dashboard',
title: 'Incident Dashboard',
template: '<div>{{data.message}}</div>',
script: 'data.message = "Hello World";',
client_script: 'function($scope) { var c = this; }'
}
});
// IMPORTANT: ServiceNow uses Rhino engine - ES5 only!
await snow_execute_script_with_output({
script: `
var gr = new GlideRecord('incident');
gr.addQuery('active', true);
gr.query();
gs.info('Active incidents: ' + gr.getRowCount());
`
});
await snow_query_table({
table: 'incident',
query: 'active=true^priority=1',
fields: ['number', 'short_description', 'assigned_to'],
limit: 10
});
snow-flow start # Start orchestration system
snow-flow status # System status
snow-flow monitor # Real-time monitoring
snow-flow agent spawn <type> # Create agents
snow-flow agent list # List active agents
snow-flow task create # Create tasks
snow-flow task list # View task queue
snow-flow memory store <key> <data> # Store data
snow-flow memory get <key> # Retrieve data
snow-flow memory list # List all keys
snow-flow sparc "<task>" # Orchestrator mode
snow-flow sparc run <mode> "<task>" # Specific mode
snow-flow sparc tdd "<feature>" # Test-driven development
Available modes: orchestrator, coder, researcher, tdd, architect, reviewer, debugger, tester, analyzer, optimizer, documenter, designer, innovator, swarm-coordinator, memory-manager, batch-executor, workflow-manager
snow-flow swarm "<objective>" [options]
Options:
--strategy
(research, development, analysis, testing, optimization, maintenance)--mode
(centralized, distributed, hierarchical, mesh, hybrid)--max-agents <n>
(default: 5)--parallel
Enable parallel execution--monitor
Real-time monitoring--output <format>
(json, sqlite, csv, html)# Check MCP server status
snow-flow mcp status
# Restart MCP servers
snow-flow mcp restart
# Debug mode
snow-flow mcp debug
# Clear cached credentials
snow-flow auth logout
# Re-authenticate
snow-flow auth login
# Verify OAuth configuration
snow-flow auth test
Always run claude login
before starting Claude Code with MCP servers.
ServiceNow uses Rhino engine. Always use ES5 syntax:
var
instead of const/let
function()
instead of arrow functionsfor...of
# Enable verbose logging
export DEBUG=snow-flow:*
# Check configuration
snow-flow config validate
# Test ServiceNow connection
snow-flow test connection
# View logs
snow-flow logs --tail 100
snow-flow/
āāā src/
ā āāā mcp/ # 17 MCP server implementations
ā āāā queen/ # Queen agent orchestration
ā āāā utils/ # Utilities and helpers
ā āāā types/ # TypeScript definitions
āāā .snow-flow/ # Configuration directory
āāā .claude/ # MCP server configs
āāā website/ # Documentation website
āāā package.json # NPM package configuration
# Install dependencies
npm install
# Run tests
npm test
# Lint code
npm run lint
# Type checking
npm run typecheck
# Build project
npm run build
# Development mode
npm run dev
MIT License - see LICENSE file for details.
Current version: 3.4.38
Snow-Flow - ServiceNow Development Automation with AI
FAQs
ServiceNow development framework with MCP server integration. Executes background scripts using ES5 JavaScript only (ServiceNow Rhino engine requirement). Provides 17 MCP servers for complete ServiceNow operations including widget deployment with coherenc
The npm package snow-flow receives a total of 6,499 weekly downloads. As such, snow-flow popularity was classified as popular.
We found that snow-flow demonstrated a healthy version release cadence and project activity because the last version was released less than a year ago.Ā It has 1 open source maintainer collaborating on the project.
Did you know?
Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.
Security News
The latest Opengrep releases add Apex scanning, precision rule tuning, and performance gains for open source static code analysis.
Security News
npm now supports Trusted Publishing with OIDC, enabling secure package publishing directly from CI/CD workflows without relying on long-lived tokens.
Research
/Security News
A RubyGems malware campaign used 60 malicious packages posing as automation tools to steal credentials from social media and marketing tool users.