Snowflake
Snowflake MCP for warehouse queries. Enterprise data teams use it to let Claude run analytical SQL against the lake.
Delv Safety Grade: A
Score 83/100 · assessed 2026-04-28
Snowflake's official MCP server provides Claude with direct SQL query access to your data warehouse. The maintainer score is excellent given Snowflake's enterprise standing and active development in their Labs repository. Permissions are moderately scoped: it can read and write to your warehouse (SQL queries can modify data via INSERT/UPDATE/DELETE), and requires network access plus credential environment variables. Supply chain is solid via PyPI distribution, though the uvx install method and YAML config file add minor complexity. Transparency is good with open source code and clear documentation, though being in a Labs repo means slightly less polish than mainline products. No known security incidents. The main risk is the breadth of database access granted once credentials are provided.
Lethal Trifecta (prompt-injection exposure)
ONE OF THREESame shape as BigQuery.
Green flags
- Official Snowflake vendor implementation with enterprise backing
- Open source on GitHub with visible code and issue tracking
- Standard PyPI distribution via snowflake-labs-mcp package
- Scoped to Snowflake API, no filesystem or shell access
- Active maintenance in Snowflake-Labs organization
Red flags
- Full warehouse access with write capabilities via SQL execution
- Credentials stored in environment variables without additional auth layers
- Labs repo suggests experimental status, potentially less security review
- YAML config file requirement adds configuration complexity
Permissions requested
Install
uvx snowflake-labs-mcp --service-config-file config.yaml
SNOWFLAKE_ACCOUNTSNOWFLAKE_USERSNOWFLAKE_PASSWORDReview
Install this if you're a Snowflake user doing regular exploratory analysis and want Claude as a query assistant. Skip it if you need write access, production-grade query controls, or aren't already paying for Snowflake. The official vendor stamp means it'll stay current with Snowflake's API changes.
Good at
- Official Snowflake build means it tracks API changes and security updates without community lag.
- Conversational query refinement is faster than switching between Claude and the Snowflake console for exploratory work.
- Read-only by design prevents accidental data mutations during analysis sessions.
- Handles authentication and connection pooling so you don't write boilerplate.
Watch out
- No write access means you can't use it for transformations or table creation workflows.
- Requires hardcoded credentials in config, which is awkward for team environments without a secrets manager.
- No built-in row limits or cost controls, so a vague query can run up warehouse charges.
- Only supports Claude Desktop and Cursor officially, other hosts need manual configuration.
- No query plan or performance visibility, so it's not useful for optimisation tasks.
Getting started
Works with
Similar MCPs
- MySQLRead-only MySQL access for Claude. Schema-aware, runs SELECTs safely, perfect for ad-hoc analytics on a production replica.
- MongoDBMongoDB's official MCP for natural-language queries against your collections. Read-only by default, with explicit write toggles.
- dbtdbt Labs' official MCP. Run models, explore the semantic layer, query the discovery API, and search project docs from your agent.
- NeonNeon's official MCP for serverless Postgres. Manage projects, branches, and run SQL against any of your databases.