Brazil, Australia, Zurich, Yokohama
Integration
- Introduces the foundational MCP server framework (transport, OAuth, capability registry, session/invocation lifecycle, and AIUtil data-access layer) for use by Proven Optics scoped applications.
- Ships a REST API (OAuth-protected Internal API) and 7 supporting REST operations.
- Delivers 13 framework tables, 9 script includes, 18 business rules, and role-based ACL enforcement (56 ACLs across framework tables and endpoints).
- First consuming application: Budget Clarity AI, which registers 25 scripted tools against this framework.
- Native MCP server framework for ServiceNow — implements the Model Context Protocol (JSON-RPC 2.0) over HTTP, supporting four protocol revisions (2024-11-05, 2025-03-26, 2025-06-18, 2025-11-25), so any MCP-compatible AI client (Claude, Claude Code, ChatGPT, Copilot, Codex, Gemini) can connect to ServiceNow data and logic.
- OAuth 2.1 secured transport — authorization-code + PKCE (S256) flow, RFC 7591 Dynamic Client Registration, and RFC 8414/9728 discovery documents, layered on ServiceNow's native OAuth provider (no third-party auth dependency).
- Admin-gated client approval workflow — every new AI client registration lands in a Requested state; nothing connects until an admin explicitly implements or denies it.
- Extensible capability registry — a table-inheritance model for tools (scripted or subflow-backed), prompts, and resources (static or dynamic), letting downstream Proven Optics apps register their own capabilities without reimplementing MCP.
- Two-tier role-based access control — independent role gating at both the server and individual-capability level, so a single server URL can present a role-tailored toolset per user (e.g., general vs. privileged tools).
- ACL-aware generic data-access engine (AIUtil) — GlideRecordSecure-based reads, aggregation, and schema reflection utilities that respect ServiceNow row/field ACLs, callable by any consuming scoped app.
- Full session and audit lifecycle — automatic session state management (init → active → idle → expired/closed) with a scheduled cleanup job, plus a complete per-call invocation audit trail (request/response, duration, status).
- Token-efficient serialization (TOON) — compact, LLM-optimized output format that reduces token consumption versus standard JSON for large data reads.
- Zero outbound third-party HTTP — the only external calls are loopbacks to the instance's own internal API for token validation and request forwarding.
Initial release of Proven Optics AI Core.
- Introduces the foundational MCP server framework (transport, OAuth, capability registry, session/invocation lifecycle, and AIUtil data-access layer) for use by Proven Optics scoped applications.
- Ships two REST APIs (public Gateway + OAuth-protected Internal API) and 7 supporting REST operations.
- Delivers 13 framework tables, 9 script includes, 18 business rules, and role-based ACL enforcement (56 ACLs across framework tables and endpoints).
- Ships with 6 pre-registered OAuth client entities for common AI hosts (Claude, Claude Code, ChatGPT, Copilot, Codex, Gemini).
- First consuming application: Budget Clarity AI, which registers 25 scripted tools against this framework.
Not applicable for this application version.
- Dependencies: None required to install AI Core itself. Consuming applications (e.g., Budget Clarity AI) declare AI Core as their own dependency.
- Roles required for admin configuration: x_prop_aic.admin (registry management), platform admin (client implementation, script-field edits).
- Network: No outbound third-party connectivity required; only internal (same-instance) HTTP loopback calls.
- Client-side: Any MCP-compliant AI client supporting OAuth 2.1 + PKCE and Dynamic Client Registration (RFC 7591).