What is difference b/w Table API and Scripted API ?

SANJEEV4
Tera Contributor

why are we not using use Table API's in Inbound integrations?

 

Thanks in advance😊

1 ACCEPTED SOLUTION

Sai Shravan
Mega Sage

Hi @SANJEEV4 ,

 

Table API and Scripted API are two different approaches for interacting with ServiceNow data. Here are the main differences between the two:


Table API Scripted API
Uses pre-defined methods to read, create, update and delete records in ServiceNow tablesProvides more flexibility and control over the data manipulation process
Easier to use and requires less codingRequires more coding and technical expertise
Provides automatic audit trail and security checksDoes not provide automatic audit trail and security checks
Suitable for most use cases and standard integrationsSuitable for complex integrations, data transformations and custom business logic


Regarding the use of Table API in inbound integrations, it is not recommended to use Table API in inbound integrations due to security reasons. When inbound integrations use Table API, it exposes the instance to the risk of SQL injection attacks. Instead, Scripted REST APIs or custom scripts should be used, which allows for more granular control over the data being accessed and provides more security against such attacks.

 

In summary, Table API is a simpler and easier to use approach for most integrations, while Scripted API provides more flexibility and control over data manipulation, but requires more coding and technical expertise. It is not recommended to use Table API in inbound integrations due to security risks, and Scripted REST APIs or custom scripts should be used instead.

Regards,

Shravan.

Regards,
Shravan
Please mark this as helpful and correct answer, if this helps you

View solution in original post

5 REPLIES 5

Sai Shravan
Mega Sage

Hi @SANJEEV4 ,

 

Table API and Scripted API are two different approaches for interacting with ServiceNow data. Here are the main differences between the two:


Table API Scripted API
Uses pre-defined methods to read, create, update and delete records in ServiceNow tablesProvides more flexibility and control over the data manipulation process
Easier to use and requires less codingRequires more coding and technical expertise
Provides automatic audit trail and security checksDoes not provide automatic audit trail and security checks
Suitable for most use cases and standard integrationsSuitable for complex integrations, data transformations and custom business logic


Regarding the use of Table API in inbound integrations, it is not recommended to use Table API in inbound integrations due to security reasons. When inbound integrations use Table API, it exposes the instance to the risk of SQL injection attacks. Instead, Scripted REST APIs or custom scripts should be used, which allows for more granular control over the data being accessed and provides more security against such attacks.

 

In summary, Table API is a simpler and easier to use approach for most integrations, while Scripted API provides more flexibility and control over data manipulation, but requires more coding and technical expertise. It is not recommended to use Table API in inbound integrations due to security risks, and Scripted REST APIs or custom scripts should be used instead.

Regards,

Shravan.

Regards,
Shravan
Please mark this as helpful and correct answer, if this helps you

Ankur Bawiskar
Tera Patron
Tera Patron

@SANJEEV4 

difference is shared by Sai.

 

Regards,
Ankur
Certified Technical Architect  ||  9x ServiceNow MVP  ||  ServiceNow Community Leader

SANJEEV4
Tera Contributor

What data base is using ServiceNow backed ?

 

@Sai Shravan 

@Ankur Bawiskar 

Hi @SANJEEV4 ,

 

The MySQL database is used underneath. The ServiceNow software uses the MariaDB Java driver.
More information can be found in the stats.do page and click "Open Source Software".

 

SaiShravan_0-1678271242946.png

 

That PDF has lots of cool information about what's going on "under the covers".

 

Regards,

Shravan

Regards,
Shravan
Please mark this as helpful and correct answer, if this helps you