Snowflake MCP Server

io.github.nsphung/mcp-snowflake-server·v0.13.0·Databases

A Snowflake MCP server — SQL queries, schema exploration, and data insights for AI assistants

Trust verdict · v1 advisory · method

NOT YET SCREENEDno verdict on file

Verdict not yet evaluated for this tool. The semantic screen takes adversarial cases first; coverage rolls out as the corpus expands (15/150 labels to graduation). The deterministic conformance probe is built but has not yet run on the public corpus, so a recorded verdict here is REVIEW or UNVERIFIED, never a clearing ALLOW. Until a verdict is recorded, an agent should treat this tool as not-yet-cleared and fall back to its own checks. Method: the eval, four-state verdict, honest limits.

Own this server? Screen its description →

Environment variables

SNOWFLAKE_ACCOUNT

Snowflake account identifier

SNOWFLAKE_USER

Snowflake username

SNOWFLAKE_PASSWORD

secret

Password (not required for key-pair / SSO)

SNOWFLAKE_WAREHOUSE

Virtual warehouse to use

SNOWFLAKE_DATABASE

Default database

SNOWFLAKE_SCHEMA

Default schema

SNOWFLAKE_ROLE

Role to assume

SNOWFLAKE_AUTHENTICATOR

Authentication method. Defaults to 'snowflake' if not set. Valid values: snowflake, externalbrowser, snowflake_jwt, oauth, oauth_client_credentials

SNOWFLAKE_PRIVATE_KEY_FILE

Absolute path to .p8 private key file

SNOWFLAKE_PRIVATE_KEY_FILE_PWD

secret

Passphrase for encrypted private key

SNOWFLAKE_OAUTH_CLIENT_ID

OAuth 2.0 client ID (required for oauth_client_credentials authenticator)

SNOWFLAKE_OAUTH_CLIENT_SECRET

secret

OAuth 2.0 client secret (required for oauth_client_credentials authenticator)

SNOWFLAKE_OAUTH_TOKEN_REQUEST_URL

OAuth 2.0 token endpoint URL (required for oauth_client_credentials authenticator)

SNOWFLAKE_OAUTH_SCOPE

OAuth 2.0 scope (optional, e.g. session:role:MY_ROLE)

SNOWFLAKE_TOKEN

secret

Pre-fetched OAuth bearer token (required for oauth authenticator)

SNOWFLAKE_ACCOUNT

Snowflake account identifier

SNOWFLAKE_USER

Snowflake username

SNOWFLAKE_PASSWORD

secret

Password (not required for key-pair / SSO)

SNOWFLAKE_WAREHOUSE

Virtual warehouse to use

SNOWFLAKE_DATABASE

Default database

SNOWFLAKE_SCHEMA

Default schema

SNOWFLAKE_ROLE

Role to assume

SNOWFLAKE_AUTHENTICATOR

Authentication method. Defaults to 'snowflake' if not set. Valid values: snowflake, externalbrowser, snowflake_jwt, oauth, oauth_client_credentials

SNOWFLAKE_PRIVATE_KEY_FILE

Absolute path to .p8 private key file

SNOWFLAKE_PRIVATE_KEY_FILE_PWD

secret

Passphrase for encrypted private key

SNOWFLAKE_OAUTH_CLIENT_ID

OAuth 2.0 client ID (required for oauth_client_credentials authenticator)

SNOWFLAKE_OAUTH_CLIENT_SECRET

secret

OAuth 2.0 client secret (required for oauth_client_credentials authenticator)

SNOWFLAKE_OAUTH_TOKEN_REQUEST_URL

OAuth 2.0 token endpoint URL (required for oauth_client_credentials authenticator)

SNOWFLAKE_OAUTH_SCOPE

OAuth 2.0 scope (optional, e.g. session:role:MY_ROLE)

SNOWFLAKE_TOKEN

secret

Pre-fetched OAuth bearer token (required for oauth authenticator)

MCP quality score · maturity, not trust · methodology

freshness

completeness

installability

documentation

stability

Alternatives in Databases

ai.haymon/dbmcp

Database MCP server for MySQL, MariaDB, PostgreSQL & SQLite with PII redaction and write-prevention

ai.smithery/MisterSandFR-supabase-mcp-selfhosted

Manage Supabase projects end to end across database, auth, storage, realtime, and migrations. Moni…

ai.smithery/afgong-sqlite-mcp-server

Explore your Messages SQLite database to browse tables and inspect schemas with ease. Run flexible…

Install

Claude Desktop (uvx)

{
  "mcpServers": {
    "mcp-snowflake-server": {
      "command": "uvx",
      "args": [
        "mcp-snowflake-server-nsp"
      ],
      "env": {
        "SNOWFLAKE_ACCOUNT": "<snowflake_account>",
        "SNOWFLAKE_USER": "<snowflake_user>",
        "SNOWFLAKE_PASSWORD": "<your-snowflake_password>",
        "SNOWFLAKE_WAREHOUSE": "<snowflake_warehouse>",
        "SNOWFLAKE_DATABASE": "<snowflake_database>",
        "SNOWFLAKE_SCHEMA": "<snowflake_schema>",
        "SNOWFLAKE_ROLE": "<snowflake_role>",
        "SNOWFLAKE_AUTHENTICATOR": "<snowflake_authenticator>",
        "SNOWFLAKE_PRIVATE_KEY_FILE": "<snowflake_private_key_file>",
        "SNOWFLAKE_PRIVATE_KEY_FILE_PWD": "<your-snowflake_private_key_file_pwd>",
        "SNOWFLAKE_OAUTH_CLIENT_ID": "<snowflake_oauth_client_id>",
        "SNOWFLAKE_OAUTH_CLIENT_SECRET": "<your-snowflake_oauth_client_secret>",
        "SNOWFLAKE_OAUTH_TOKEN_REQUEST_URL": "<snowflake_oauth_token_request_url>",
        "SNOWFLAKE_OAUTH_SCOPE": "<snowflake_oauth_scope>",
        "SNOWFLAKE_TOKEN": "<your-snowflake_token>"
      }
    }
  }
}

Claude Desktop (Docker)

{
  "mcpServers": {
    "mcp-snowflake-server": {
      "command": "docker",
      "args": [
        "run",
        "--rm",
        "-i",
        "docker.io/nsphung/mcp-snowflake-server-nsp:0.13.0"
      ],
      "env": {
        "SNOWFLAKE_ACCOUNT": "<snowflake_account>",
        "SNOWFLAKE_USER": "<snowflake_user>",
        "SNOWFLAKE_PASSWORD": "<your-snowflake_password>",
        "SNOWFLAKE_WAREHOUSE": "<snowflake_warehouse>",
        "SNOWFLAKE_DATABASE": "<snowflake_database>",
        "SNOWFLAKE_SCHEMA": "<snowflake_schema>",
        "SNOWFLAKE_ROLE": "<snowflake_role>",
        "SNOWFLAKE_AUTHENTICATOR": "<snowflake_authenticator>",
        "SNOWFLAKE_PRIVATE_KEY_FILE": "<snowflake_private_key_file>",
        "SNOWFLAKE_PRIVATE_KEY_FILE_PWD": "<your-snowflake_private_key_file_pwd>",
        "SNOWFLAKE_OAUTH_CLIENT_ID": "<snowflake_oauth_client_id>",
        "SNOWFLAKE_OAUTH_CLIENT_SECRET": "<your-snowflake_oauth_client_secret>",
        "SNOWFLAKE_OAUTH_TOKEN_REQUEST_URL": "<snowflake_oauth_token_request_url>",
        "SNOWFLAKE_OAUTH_SCOPE": "<snowflake_oauth_scope>",
        "SNOWFLAKE_TOKEN": "<your-snowflake_token>"
      }
    }
  }
}

Verdict API

curl -s mcpindex.ai/api/v1/trust/server/io-github-nsphung-mcp-snowflake-server

Free-tier verdict as JSON: decision + dimensions + severity. Call it from your agent before it invokes a tool it just discovered.

Details

version: v0.13.0
category: Databases
quality: 85 / 100
operator: nsphung

Provenance

Verdict history is anchored to Bitcoin via OpenTimestamps. The free tier returns the current verdict only; the anchored record is served on the authenticated tier.

Links

Repository →