SN System Properties Reference
Property reference

com.snc.platform.security.oauth.mcp.aig_scope_support

The com.snc.platform.security.oauth.mcp.aig_scope_support property determines how OAuth access tokens are cached and reused for Model Context Protocol flows in AI Gateway. Setting this property to true ensures that authorization checks are enforced for cross-scope table data accesses, enhancing security and preventing token confusion risks.

Default
Not stated
Type
Not stated
Application
Not stated

Key questions about this property

The answers below summarize the purpose, scope, default effect, and review scenarios for this property.

What does it do? This property controls the caching behavior of OAuth access tokens based on requested and configured scopes, impacting how tokens are reused for different requests.
What area does it affect? OAuth access control
What does the default mean? No default value is stated in the ServiceNow documentation.
When should you review it? Review this property when configuring OAuth token management or addressing security concerns related to cross-scope access.

Property record

Facts stated in the ServiceNow documentation. No out of the box record has been read from an instance yet.

Property name com.snc.platform.security.oauth.mcp.aig_scope_support
Type Not stated
Application Not stated
Default value Not stated
Description Not stated

Sources

Official references and nearby text excerpts where this property appears.

Brazil docs View supporting context
Context preview Snippet 1
... this may cause some applications to not function correctly if they attempt to access tables outside of their scope through dot-walk. Enforce least privilege on scoped MCP OAuth tokens The com.snc.platform.security.oauth.mcp.aig_scope_support property controls how OAuth access tokens are cached and reused for Model Context Protocol (MCP‎ flows in AI Gateway (AIG‎. The MCP OAuth flows cache and reuse outbound access tokens ...

More in com.snc

Other properties in the same namespace.

com.snc.platform.security.oauth.client.id This property sets a unique, cryptographically secure client ID for OAuth, essential for identifying the Servi com.snc.platform.security.oauth.crypto.salt This property specifies the cryptographic salt utilized in OAuth processes to enhance security. com.snc.platform.security.oauth.hours.expired.credential.is.kept It specifies the minimum number of hours that expired oauth_credential records are kept in the system. com.snc.platform.security.oauth.is.active This property activates OAuth functionality, allowing the instance to engage in OAuth-based authentication and com.snc.platform.security.oauth.private.key.url This property defines the URL where the instance's OAuth private key is stored, impacting OAuth authentication com.snc.platform.security.oauth.ui.show_usage_dashboard This property controls the display of a notification for accessing the integrations usage dashboard, enhancing com.snc.platform.security.token.auth.cleanup This property configures whether expired tokens are automatically cleaned up, helping to mitigate security ris com.snc.platform.security.token.auth.days.expired.api_key This property configures the expiration duration for API keys, limiting their validity after expiration to enh

All 593 properties in com.snc →