MCP or Not?

Draft: research not yet reviewed. Hidden from search engines and production.

OfficialClaude connector: not verified

Snowflake MCP server & Claude connector

Does Snowflake have an official MCP server or Claude connector?

Official

As of October 2026, Snowflake offers an official Snowflake-managed MCP server, created inside your account with CREATE MCP SERVER and documented on docs.snowflake.com. It uses Snowflake OAuth, exposes Cortex Agents, Search, Analyst, SQL execution and custom tools, and enforces role-based access per tool. The older Snowflake-Labs local server is deprecated.

Last checked

Verdict and evidence

What we checked
Snowflake-managed MCP server
Published by
Snowflake (official)
Runs
Hosted (remote)
Sign-in
OAuth sign-in
Stage
unknown
Plan
Not stated on the docs page. Requires CREATE MCP SERVER privilege and per-tool grants.

Evidence

What an AI can do in Snowflake

Read

  • Query a Cortex Search serviceCORTEX_SEARCH_SERVICE_QUERY
  • Ask Cortex Analyst over semantic viewsCORTEX_ANALYST_MESSAGE

Run

  • Run a Cortex AgentCORTEX_AGENT_RUN
  • Execute SQLSYSTEM_EXECUTE_SQL
  • Call UDFs and stored proceduresGENERIC

From the publisher’s documentation for the version we checked. Not every tool is listed.

Setup

Claude (claude.ai / Desktop)

In claude.ai or Claude Desktop: Settings > Connectors, add a custom connector with the MCP server URL plus the client ID and secret from your Snowflake security integration; sign in via the browser flow.

Source

Cursor

Add to ~/.cursor/mcp.json, then click Sign in under Cursor Settings > MCP.

{
  "mcpServers": {
    "snowflake": {
      "url": "https://<account_url>/api/v2/databases/<database>/schemas/<schema>/mcp-servers/<name>",
      "auth": {
        "CLIENT_ID": "${env:MCP_CLIENT_ID}",
        "CLIENT_SECRET": "${env:MCP_CLIENT_SECRET}"
      }
    }
  }
}
Source

Safety check

  • Pass

    Publisher verified

    Documented on docs.snowflake.com; the server runs inside the customer's own Snowflake account.

  • Pass

    Auth model

    Snowflake OAuth by default (External OAuth such as Okta/Entra optional); PATs also supported with a warning against hardcoding. Dynamic client registration is not supported, so Claude needs a client ID/secret from a security integration.

  • Flag

    Write and delete access

    SYSTEM_EXECUTE_SQL can run arbitrary SQL within the role's privileges, and GENERIC tools can call procedures. Snowflake itself warns that exposing SQL execution next to a Cortex Agent lets clients bypass agent governance. Each tool needs its own grant; no global read-only switch.

  • Pass

    Tool-description injection scan

    Read the documentation page (tool types and security guidance); found no text addressed to the AI. The docs themselves warn about tool poisoning in third-party servers. Tool descriptions are admin-authored per server.

  • Unknown

    Repo maintenance

    Managed service, no repo. GA/preview status not stated on the docs page.

Community alternatives

Built and maintained by third parties, not Snowflake. Check the safety notes before connecting one to a real account.

Snowflake-Labs MCP server (deprecated)

Snowflake Labs · Runs locally · API key or token
  • ⚠ Write and delete access: README lists object management and SQL execution with configurable statement permissions; project is deprecated.
  • ⚠ Repo maintenance: README states the project is deprecated and no longer maintained and points to the managed server. Last push 2026-05-15 (not archived), 300 stars.

FAQ

Does Snowflake have an official MCP server?

Yes. Snowflake documents a Snowflake-managed MCP server that you create inside your account.

What happened to the Snowflake-Labs MCP server?

Its README says it is deprecated and no longer maintained, and directs users to the Snowflake-managed MCP server.

Does it work with Claude?

Snowflake's docs describe adding it to claude.ai or Claude Desktop as a custom connector using the server URL and OAuth client credentials.

Is it safe to expose SQL execution?

Snowflake advises least privilege per tool and warns that exposing SYSTEM_EXECUTE_SQL alongside a Cortex Agent lets clients bypass the agent's governance.

Is the Snowflake MCP server GA?

The docs page does not state GA or preview status; check Snowflake release notes or your account team.

Last reviewed .

Get your badge

Work at Snowflake? Show that your MCP server is independently checked. The badge reflects this page: it updates when we re-check, and it links readers to the evidence.

MCP or Not: Official · Checked Oct 2026

Markdown (README)

[![MCP or Not: Official · Checked Oct 2026](https://mcpornot.com/badge/snowflake.svg)](https://mcpornot.com/snowflake)

HTML

<a href="https://mcpornot.com/snowflake"><img src="https://mcpornot.com/badge/snowflake.svg" alt="MCP or Not: Official · Checked Oct 2026" height="20"></a>

Compare Snowflake

Something changed?

Vendors ship MCP updates often. If Snowflake launched, changed or retired a server, tell us and we will re-check it against primary sources. Submit a correction.

New official MCP servers, weekly

One short email when vendors ship, change or retire an official server or Claude connector. Checked against primary sources, like every verdict here.