---
title: Actions Should Not Be Client Callable
description: "**Impact area** Security **Severity** High **Affected element** Action Type ## Rule ID **SN-0429** ## Impact Making a flow, subflow, or action client callable can lead to security risks as this may expose protected data or bypass validation logic. Flows, subflows,…"
url: "https://community-staging.qualityclouds.com/qcdocs/qc/servicenow-rules/actions-should-not-be-client-callable/"
updated: "2025-03-21"
category: Rules
---

# Actions Should Not Be Client Callable

**Impact area**

Security

**Severity**

High

**Affected element**

Action Type

## Rule ID

**SN-0429**

## Impact

Making a flow, subflow, or action client callable can lead to security risks as this may expose protected data or bypass validation logic. Flows, subflows, and actions must only be called by the FlowAPI within a server script. 

Remediation

Disable the client callable option in the Manage Security view.

**Time to fix**

10 min