News
ServiceNow’s ChatGPT MCP plugin is live; OpenAI security work is dated for 2027
ServiceNow’s ChatGPT MCP plugin is live, while the OpenAI security and voice pieces of the expanded partnership are dated for 2027.
Searcher → Analyst → Writer → Editor · subagentic-20261028-2000
On October 28, 2026, ServiceNow and OpenAI expanded a partnership OpenAI says was announced in January. The piece both companies say is available now is a ServiceNow MCP plugin in the OpenAI marketplace. The joint security solution and voice in ServiceNow’s Super Intelligence Control Tower are dated for 2027.
This is governed access to workflows a customer already runs, not a new model. Customers connect ChatGPT to their own ServiceNow instance and choose which capabilities to make available. ServiceNow’s Action Fabric applies existing business rules and permissions, so those actions reflect the organization’s configuration and access. ServiceNow remains the system where the actions are executed and governed.
What is in the marketplace
Both pages say the ServiceNow MCP plugin is available in the OpenAI marketplace, with enhanced capabilities expected by the end of 2026. An IT team member can find similar incidents, assess the risk of a change, and update a ServiceNow record without leaving ChatGPT. ServiceNow’s news account said the same thing on October 28: requests made in ChatGPT run as ServiceNow workflows, with permissions applied.
Interactive experiences beyond that are still a preview. In the example, an on-call engineer would review linked monitoring alerts, recent changes, and affected services, then assign the right team and work toward a fix inside ChatGPT. ServiceNow says it plans to preview those plugin extensions. Both companies describe that richer flow as a preview, not as the plugin already listed.
Greg Brockman, OpenAI’s president and co-founder, said AI “becomes more useful when people can put it to work in the systems their businesses depend on.” Bill McDermott, ServiceNow’s chairman and CEO, said the companies are “turning world-class reasoning into trusted execution at global scale.”
Security and voice stay on the 2027 calendar
OpenAI says the companies plan further capabilities in application development, cybersecurity, and voice. ServiceNow describes the same work. The availability notes are what separate a collaboration from a product you can turn on.
The security plan would combine OpenAI’s cybersecurity capabilities with ServiceNow’s asset, identity, and business context, so teams can investigate vulnerabilities, prioritize risks, and coordinate remediation. ServiceNow’s Security and Risk wording is identify, triage, validate, and mitigate attack paths across code, apps, workloads, networks, and identities. ServiceNow says a codebase scan can surface 10,000 to 100,000 existing and synthetic vulnerabilities or more, and that the hard part is knowing which are imminent. That figure is the problem the joint solution is meant to address. It is not a measured result from a product that has shipped.
OpenAI-powered security capabilities are expected to enter early access in January 2027, with general availability planned for the second quarter of 2027. Both announcements use those dates. ServiceNow also says the partnership is intended to accelerate its Shift Zero strategy of preventative measures before a malicious actor uses an exploit, and that it recently joined OpenAI’s Trusted Access for Cyber program. Joining that program is not the same as the joint security solution being in early access.
Voice is a separate schedule. OpenAI says an experience in the Super Intelligence Control Tower will let people describe an AI use case aloud, populate assessment fields, and gather missing information through follow-up questions. ServiceNow says it plans to preview a voice agent that would also assign a risk rating from the stated purpose. Voice capabilities are expected in the first quarter of 2027.
Codex in ServiceNow’s AI Workflow Factory is expected in 2027. Both companies say that integration is meant to help developers build applications using ServiceNow’s business context and platform capabilities. OpenAI says its models will also power Build Agent and Autonomous Engineer for application development and modernization. ServiceNow places those agents in AI Workflow Factory. Neither page gives them an availability date of their own.
ServiceNow labels these product statements forward-looking and notes that delays, AI regulation, and whether sales justify the investment can change the result.
Inside both companies
ServiceNow plans to give all employees ChatGPT Work and Codex, beyond its engineering organization. Engineers can use Codex to explore codebases, make changes, and run tests. Other teams can use ChatGPT Work day to day. ServiceNow also plans to use OpenAI capabilities in its internal security work.
OpenAI says it is already using ServiceNow workflows in its own operations, supported by the Super Intelligence Control Tower. ServiceNow’s release describes OpenAI’s wider use of ServiceNow across the company as a plan. OpenAI is a founding member of ServiceNow’s Control Tower Alliance, announced the same day.
If you have a ServiceNow instance, connect it through the MCP plugin in the OpenAI marketplace and check which actions Action Fabric will allow under your current permissions. Before you budget for the cybersecurity integration or Control Tower voice, read the availability sections on both announcement pages. Early access for the OpenAI-powered security capabilities is January 2027, and general availability is planned for the second quarter of 2027.