OpenAI and ServiceNow are expanding their partnership to bring OpenAI models and agents directly into ServiceNow products, connecting core enterprise workflows with ChatGPT and Codex. This expansion builds on a previous partnership announced in January, shifting artificial intelligence from isolated chat interfaces into operational workflows spanning development, cybersecurity, and incident management.
As OpenAI and ServiceNow push autonomous agents deeper into enterprise operations, the primary question facing executives is whether rigid corporate permission structures and Action Fabric rules can genuinely prevent autonomous agents from triggering catastrophic failures in complex infrastructure. The alliance alters how businesses approach software deployment and security tasks, raising the stakes for IT governance and operational budgets, though specific financial data, pricing models, and API cost projections have not yet been disclosed by the companies.
Automated Workflows and Permissions in ChatGPT
The integration brings business context and workflow actions directly into ChatGPT, allowing teams to investigate issues and execute operational steps within a single conversation. An IT team member can find similar incidents, assess the risk of a change, and update a ServiceNow record without leaving the interface. According to ServiceNow, customers connect ChatGPT to their own instance and choose which capabilities to make available.
ServiceNow’s Action Fabric applies existing business rules and permissions, so the actions people can take reflect their organization’s configuration and access.
This mechanism attempts to solve the governance dilemma by tethering autonomous capabilities to pre-existing enterprise access controls. ServiceNow is also previewing interactive experiences inside ChatGPT, such as an on-call engineer reviewing linked monitoring alerts, recent changes, and affected services before assigning the right team to work toward a fix within the chat interface.
Expanding Into Development, Security, and Voice
The partnership roadmap outlines dedicated capabilities across application development, cybersecurity, and voice-controlled interfaces. A planned Codex integration in ServiceNow’s AI Workflow Factory will help developers build applications using platform capabilities and business context, while OpenAI models will power Build Agent and Autonomous Engineer to support application modernization. A joint security solution will combine OpenAI’s cybersecurity capabilities with ServiceNow’s asset, identity, and business context to help teams investigate vulnerabilities, prioritize risks, and coordinate remediation. Furthermore, an OpenAI-powered experience in ServiceNow’s Super Intelligence Control Tower will let people describe an AI use case aloud to populate assessment fields and gather missing information through follow-up questions.
Demonstrating self-sufficiency in AI adoption, ServiceNow plans to give all employees access to ChatGPT Work and Codex, expanding usage beyond its engineering organization. Engineers can use Codex to explore codebases, make changes, and run tests, while teams across the business use ChatGPT Work in their day-to-day operations. OpenAI is also using ServiceNow workflows in its own operations, supported by the Super Intelligence Control Tower.
Deployment Timeline and Availability
The ServiceNow MCP plugin is available in the OpenAI marketplace today, with enhanced capabilities expected by the end of 2026. Voice capabilities in the Super Intelligence Control Tower are expected in the first quarter of 2027. The OpenAI-powered security capabilities are expected to enter early access in January 2027, with general availability planned for the second quarter of 2027, and Codex in AI Workflow Factory is expected to be available in 2027.
What’s behind it
Why bind mission-critical enterprise workflows directly to a conversational chat window? The expanded partnership between ServiceNow and OpenAI aims to turn ChatGPT into a primary control panel for IT operations, handling incident triage and workflow updates in a single interface. Yet routing autonomous agents deep into production infrastructure creates a stark operational tradeoff against permissions and security rules. Enterprises are invited to put critical infrastructure operations inside a chat window, though neither vendor has disclosed what the API bill will look like.