Snowflake
Snowflake MCP for warehouse queries. Enterprise data teams use it to let Claude run analytical SQL against the lake.
Delv Safety Grade: A
Score 83/100 · assessed 2026-04-28
Snowflake's official MCP server provides Claude with direct SQL query access to your data warehouse. The maintainer score is excellent given Snowflake's enterprise standing and active development in their Labs repository. Permissions are moderately scoped: it can read and write to your warehouse (SQL queries can modify data via INSERT/UPDATE/DELETE), and requires network access plus credential environment variables. Supply chain is solid via PyPI distribution, though the uvx install method and YAML config file add minor complexity. Transparency is good with open source code and clear documentation, though being in a Labs repo means slightly less polish than mainline products. No known security incidents. The main risk is the breadth of database access granted once credentials are provided.
Lethal Trifecta (prompt-injection exposure)
ONE OF THREESame shape as BigQuery.
Green flags
- Official Snowflake vendor implementation with enterprise backing
- Open source on GitHub with visible code and issue tracking
- Standard PyPI distribution via snowflake-labs-mcp package
- Scoped to Snowflake API, no filesystem or shell access
- Active maintenance in Snowflake-Labs organization
Red flags
- Full warehouse access with write capabilities via SQL execution
- Credentials stored in environment variables without additional auth layers
- Labs repo suggests experimental status, potentially less security review
- YAML config file requirement adds configuration complexity
Permissions requested
Install
uvx snowflake-labs-mcp --service-config-file config.yaml
SNOWFLAKE_ACCOUNTSNOWFLAKE_USERSNOWFLAKE_PASSWORDReview
Install this if you're a Snowflake user doing regular exploratory analysis and want Claude as a query assistant. Skip it if you need write access, production-grade query controls, or aren't already paying for Snowflake. The official vendor stamp means it'll stay current with Snowflake's API changes.
Good at
- Official Snowflake build means it tracks API changes and security updates without community lag.
- Conversational query refinement is faster than switching between Claude and the Snowflake console for exploratory work.
- Read-only by design prevents accidental data mutations during analysis sessions.
- Handles authentication and connection pooling so you don't write boilerplate.
Watch out
- No write access means you can't use it for transformations or table creation workflows.
- Requires hardcoded credentials in config, which is awkward for team environments without a secrets manager.
- No built-in row limits or cost controls, so a vague query can run up warehouse charges.
- Only supports Claude Desktop and Cursor officially, other hosts need manual configuration.
- No query plan or performance visibility, so it's not useful for optimisation tasks.
Getting started
Works with
Similar MCPs
- NeonNeon's official MCP for serverless Postgres. Manage projects, branches, and run SQL against any of your databases.
- SupabaseSupabase's official MCP — query Postgres, manage auth, inspect storage buckets, all from your agent.
- PostgresQuery Postgres databases with natural language. Read-only access by default - the agent sees your schema and runs SELECT queries safely.
- ClickHouseClickHouse MCP for fast analytical queries. Built by ClickHouse Inc, supports cluster topology discovery.