ServiceNow is pairing a simpler way to build AI agents with a runtime identity system intended to keep those agents inside approved boundaries. Build Agent is generally available in ServiceNow Studio, while AI Passport is the announced mechanism for cryptographically proving an agent’s identity and authorized scope at each step of a workflow.
The timing matters: Build Agent is shipping, but AI Passport, shadow-AI detection and AI Cost Management were announced as expected in the fourth quarter of 2026. Organizations therefore need to distinguish available controls from planned ones when evaluating ServiceNow’s agent strategy.
![Claude AI for Beginners Bible: [5 in 1] The Ultimate Guide to Automate Your Work, Save Hours Every Week, and Use AI for Real-World Results](https://m.media-amazon.com/images/I/415+fSJacsL._SL160_.jpg)
As an Amazon Associate I earn from qualifying purchases.
What ServiceNow announced
Build Agent broadens who can create applications and agents
Build Agent became generally available in ServiceNow Studio on May 6, 2026, with support for all application scopes. ServiceNow is targeting professional developers, platform administrators, business analysts and citizen developers with natural-language and AI-assisted creation.
The Tool Desk
Outbyte Driver Updater FREEFix the driver behind crashes, sound loss and screen glitchesFind Drivers →Outbyte PC Repair FREEClear out junk files and repair common Windows errorsFree Scan →The tool is also being extended beyond the ServiceNow interface to Cursor, Windsurf, Claude Code and GitHub Copilot. ServiceNow listed additional Build Agent skills for agentic development tools, MCP Client integrations, its reimagined AI Agent Studio and an App Engine Management Center freemium tier on staged 2026 schedules. Those extensions should not be interpreted as having identical availability on the day Build Agent reached general availability.
#1 Best Overall
ServiceNow says applications deployed to its AI Platform inherit audit trails, security checks, compliance controls, scalability and performance controls. Deployment approvals and lifecycle governance are handled through App Engine Management Center rather than left entirely to the person who generated the application.
AI Passport adds enforceable identity
AI Passport is designed as a cryptographically signed credential, not merely a label attached to an audit record. At runtime, the credential is checked against the scope an enterprise has authorized. An agent operating within that scope can continue; a deviation can trigger redirection, restriction, reconnection with the correct context or a kill switch. The resulting actions are audited.
ServiceNow says the credentials use open specifications and can be issued and verified for first-party and third-party agents at every step in a multi-agent workflow. Passport decisions can be grounded in live enterprise context, including configuration-management database data, governance-risk-and-compliance policies and workflow approvals.
Free tools Windows power users keep installed
One-click scans. No signup required.
“As AI agents proliferate across the enterprise, visibility alone isn’t enough. Enterprises need confidence that every AI agent is operating within its authorized scope,” said Jon Sigler, ServiceNow’s executive vice president and general manager for AI Platform.
How the proposed runtime control works
- Issue a credential. An agent receives a signed identity that represents who it is and what authority it has been granted.
- Attach enterprise context. The authorization can be evaluated against current CMDB records, GRC rules and workflow approvals rather than a static description alone.
- Verify every action. The platform checks the credential and requested operation at runtime, including handoffs between agents.
- Apply a graduated response. An out-of-scope request can be redirected, restricted or reconnected with the proper context; an enterprise can use a kill switch for an agent that must stop.
- Record the decision. Identity checks, actions and interventions feed the audit trail needed for investigation and compliance.
This is a stronger model than discovering an unauthorized agent after it has acted, but its practical reach depends on deployment, policy configuration and the availability of the announced Passport service.
Build Agent, AI Agent Studio and the surrounding controls
These products address different parts of the agent lifecycle. ServiceNow’s releases describe the following division of labor:
| Capability | Primary users and purpose | Context and integrations | Governance and measurement | Availability |
|---|---|---|---|---|
| Build Agent | Natural-language and AI-assisted application and agent development for developers, administrators, analysts and citizen developers. | ServiceNow Studio; support for all application scopes. Extensions to Cursor, Windsurf, Claude Code and GitHub Copilot, plus MCP Client integrations, are on staged schedules. | Deployed applications inherit platform audit, security, compliance, scalability and performance controls; approvals and lifecycle management run through App Engine Management Center. | Generally available in ServiceNow Studio since May 6, 2026. |
| Reimagined AI Agent Studio | Guided, conversational creation for a broader group of builders. | Uses ServiceNow workflow and data context; the release does not establish a separate connector count for Studio. | Works with the wider agent lifecycle managed through AI Agent Studio and AI Agent Orchestrator. | AI Agent Studio and AI Agent Orchestrator were announced as generally available in the March 12, 2025 Yokohama release. |
| AI Agent Orchestrator | Coordinates agents and supports onboarding, monitoring, quality and value management across the lifecycle. | Connected through Workflow Data Fabric and Knowledge Graph/CSDM capabilities. | Tracks usage, quality and business value rather than creation alone. | Generally available in the Yokohama release; individual surrounding features can have different schedules. |
| AI Passport | Runtime identity, authorization and revocation for first-party and third-party agents. | Grounded in CMDB data, GRC policies, workflow approvals and, according to ServiceNow, discovery across more than 400 out-of-box connectors. | Signed credentials, runtime enforcement, intervention options and audited actions. | Announced for expected availability in Q4 2026, not described as generally available on October 16, 2026. |
The releases do not provide independent performance benchmarks comparing these tools. Claims about speed or generated code should therefore be treated as vendor or customer examples, not laboratory results.
What’s actually slowing this PC down?
Pick the symptom - the matching free tool is one click away.
Availability timeline and what is actually shipping
| Date | Milestone | Status described by ServiceNow or coverage |
|---|---|---|
| March 12, 2025 | Yokohama release | Preconfigured agents for CRM, HR, IT and other workflows; AI Agent Studio and AI Agent Orchestrator generally available. |
| May 6, 2026 | Build Agent | Generally available in ServiceNow Studio for all application scopes. |
| October 15–16, 2026 | AI Passport, shadow-AI detection and AI Cost Management | Announced as expected in Q4 2026. The Operational Resilience solution for financial services was described as available immediately. |
| October 15, 2026 | EmployeeWorks enhancements | ToolSmith, Productivity Assistants and Productivity Routines were reported as controlled availability. |
That distinction is important for procurement. A company can use the generally available builder and lifecycle products now, but should confirm regional, edition and staged-release eligibility before assuming that Passport enforcement or every external coding-tool integration is enabled.
Why identity and cost controls are becoming urgent
ServiceNow’s 2026 Banking AI Maturity Index says 100 percent of banks report using AI, while only 24 percent report governance to match it. The release does not include the index methodology, so the figures are best read as ServiceNow’s survey claim rather than an independently verified industry census.
Rank #4
LTM Limited CISO Chandan Pani said the company had deployed 1,500 agents, each assigned an employee ID and manager. That example illustrates the administrative problem Passport is intended to address: thousands of autonomous identities need owners, scopes and a way to stop them.
Analysts quoted in CIO coverage urged organizations to name owners, assign budgets and define explicit enforcement checks for unsupervised routines. Those comments identify operational questions, not evidence that ServiceNow’s controls fail. They do show why a signed identity alone is insufficient without policy ownership and spending limits.
ServiceNow also announced shadow-AI detection and AI Cost Management for expected Q4 2026 availability. Until those capabilities are available to a particular customer, teams should maintain their own inventory of agents, owners, credentials, data access and recurring execution costs.
Best Value
What the partner ecosystem means
ServiceNow is positioning the Build Program and ServiceNow Store as a route for ISVs, developers and technology partners to build, test, certify and distribute AI agents, applications and connectors. The company said more than 1,000 partners were transitioning to the revamped Build Program and that its global ecosystem exceeded 2,700 partners in 2026.
ServiceNow describes tiered participation and marketplace distribution, but the announcement does not establish a public affiliate commission program. The commercial opportunity is therefore an ecosystem and partner opportunity that prospective participants should verify directly.
One customer-and-partner example said Build Agent generated nearly 80 percent of an application. Elmer de Valk, CEO of Plat4mation, provided that figure; it is a company-reported example, not an independently audited benchmark.
A practical adoption checklist
- Start with Build Agent’s generally available scope, then verify which Studio edition, region and application scope your account can use.
- Assign a business owner and technical owner to every production agent before enabling autonomous actions.
- Define permitted data, tools, workflows and spending limits in writing; do not rely on a generated prompt as the policy.
- Use App Engine Management Center approvals and lifecycle records for deployment, changes and retirement.
- Connect monitoring to quality, usage and business-value measures through the agent lifecycle rather than measuring creation speed alone.
- Confirm whether AI Passport, shadow-AI detection and AI Cost Management are available to your tenant; if not, maintain equivalent inventories and stop procedures manually.
- Test an out-of-scope action in a controlled environment and document whether the configured response should redirect, restrict, reconnect or terminate the agent.
ServiceNow’s broader direction is clear: faster creation is being paired with platform governance and, eventually, enforceable runtime identity. The near-term challenge for customers is managing the gap between what is generally available today and what remains scheduled or controlled.
Quick Recap
Product prices and availability are accurate as of the date/time indicated and are subject to change. Any price and availability information displayed on Amazon at the time of purchase will apply.
