The safeguards map / 3.3 Gateways
ServiceNow AI Gateway
Drafted with AI
Drafted with AI from the cited sources under the direction of UnGovr staff. UnGovr holds editorial responsibility for this page. How this site is made
A commercial Model Context Protocol (MCP) proxy inside ServiceNow AI Control Tower that routes agent connections through a gateway URL, with OAuth 2.1, runtime policy enforcement, pause controls and approved-server inventory.
Where it sits
3.3 Gateways (primary): Sits between agents and MCP servers, requires every connection to pass through its gateway URL with OAuth 2.1, and applies runtime policy, sensitive data blocking and pause controls to the calls.
AI Gateway is ServiceNow's runtime enforcement layer for MCP (Model Context Protocol) connections in AI Control Tower.
captured
those agents can connect to MCP Servers through AI Gateway using the standard Gateway URL and OAuth 2.1 authentication.
captured
Runtime policy enforcement, sensitive data detection and blocking, and instant Pause controls on any server or tool.
captured
3.7 Admission and owner settings: Keeps an inventory of MCP servers and tools in which a steward approves each one, so that only approved servers and tools reach agents.
Only approved servers and tools reach agents, enforced directly in AI Agent Studio.
captured
Facts
- Concern
- security
- Names the law
- no
- Subject
- agentAI system
- Used by
- those who run it
- Runs
- at runtime
- Policy comes from
- owner-entered settings
- Traffic it sees
- tool calls (MCP)
- Can the agent bypass it
- depends
Handoffs
None recorded.
Listed, not drawn: no documented handoff and no foundation home places it on the map.
Collector's note
Every source is a ServiceNow-authored FAQ article hosted on its community site; the product documentation host was not read. The article lists tamper-evident audit logs without a named export format, so no handoff is claimed.
Every quote is verbatim from a stored capture of the page linked under it. Placement is our reading of the product's own documentation; no publisher has reviewed or endorsed it. Rows CC BY 4.0. Names, marks and logos belong to their owners; logos identify each product and are not part of the dataset.