---
sourceDocument: Brazil Enable AI
sourceDocumentLink: https://www.servicenow.com/docs/r/intelligent-experiences

 Release :

    - brazil

ft:locale :

    - en-US

ft:publication_title :

    - Brazil Enable AI

ft:clusterId :

    - platai

bundleId :

    - platai

workflow :

    - Platform


---

# Govern tools and data

# Governing MCP server tools and data {#ariaid-title1}

Release version: Brazil  
Updated October 22, 2026  
![](https://www.servicenow.com/docs/portal-asset/ico-clock) 2 minutes to read  
Review scan results for an MCP server's tools, decide which tools agents can call, and choose the tools that the Data Sensitivity Check applies to.

## Overview of governing tools and data {#ai-gw-governing-tools-data__cf-using-parent-workflow}

The settings on the AI Gateway settings page apply to every MCP server connected through AI Gateway. To work with one server, navigate to InventoryAssetsMCP servers, select the server name, and then select the AI Gateway tab. While AI Gateway or the server's connection is paused, a warning appears and you can't change the server's tools or policies. The
Tools and Policies sub-tabs apply to that server only. For a description of the tab, see [Managing your AI Gateway](https://www.servicenow.com/docs/GEbD9UjzNJ6OtaJV1kjh4g "Manage your AI Gateway tab on the MCP server record.").

## Tools sub-tab {#ai-gw-governing-tools-data__ai-gw-governing-tools-data-tools-sub-tab}

The All tools list shows every tool that the server exposes, with a count. Select Refresh tools to scan the server's tools again. If the server's authorization has expired, select
Reauthorize first.
{#ai-gw-governing-tools-data__table_ai-gw-governing-tools-data__entry__2}

| Column | Description |
|-|-|
| Name | The tool's name, as defined by the MCP server. |
| Description | The tool's description, as provided by the MCP server. |
| Scan status | The result of the tool's security scan, such as Passed, Failed, or Safe. |
| Threat category | The type of threat that the scan found, or none. |
| Active | A toggle that controls whether agents can call the tool through AI Gateway, after you confirm. AI Gateway is set up to block every call to a tool when it's inactive. The toggle is unavailable while AI Gateway or the server's connection is paused. |
[ ]

{#ai-gw-governing-tools-data__table_ai-gw-governing-tools-data}

## Policies sub-tab {#ai-gw-governing-tools-data__ai-gw-governing-tools-data-policies-sub-tab}

The Policy categories list shows Data sensitivity, with the number of policy types in the category. When client access control is on for the instance, the list starts with Access management, which opens by default and shows the number of client access policies on the server. For details, see [Controlling which tools clients can access](https://www.servicenow.com/docs/vdbnwpXstkbsfKFUA2BcLQ "Limit each client to the MCP server tools that it requires by turning on access management for the server and creating client access policies."). When you select Data sensitivity, the Data sensitivity check card shows whether the policy is
activated for the server and has a button to activate or deactivate it, after you confirm. The button is unavailable until the policy is activated for all servers on the AI Gateway settings page, and while connections are paused. To
define what sensitive data is detected, select Advanced settings, which opens the Data Privacy configuration in a new browser tab.

The Tools list below the card shows each tool's Policy status, for example Active, with a button to deactivate or activate the policy for that
tool.
The buttons are unavailable until the policy is activated for the server, and each change asks you to confirm.

* [Activate or deactivate a tool](https://www.servicenow.com/docs/Lmba6JcC8zArlS8zzPrtxw "Allow agents to call one MCP server tool through AI Gateway, or block every call to it."): allow or block calls to one tool.
* [Apply the Data Sensitivity Check to a server's tools](https://www.servicenow.com/docs/B73hHHvIsA4nFo2uH6fhGw "Choose which of an MCP server's tools the Data Sensitivity Check inspects."): choose which of a server's tools the policy inspects.
* [Controlling which tools clients can access](https://www.servicenow.com/docs/vdbnwpXstkbsfKFUA2BcLQ "Limit each client to the MCP server tools that it requires by turning on access management for the server and creating client access policies."): limit each client to specific tools on a server.
{#ai-gw-governing-tools-data__ul_ai-gw-governing-tools-data}

*[\>]: and then