Our grade: 4 checks
Based on public data, not a full audit. See how we grade. Something changed? Request a re-grade.
Community rating
- 5 2
- 4 7
- 3 6
- 2 5
- 1 0
Trust in production
- Trust it - 25%
- With caveats - 45%
- Wouldn't - 30%
50% would recommend this server
How reviewers scored it
- Setup & docs 3.5
- Auth experience 3.7
- Reliability 3.4
- Maintainer responsiveness 3.5
Why it got a C
Snowflake's official server, generally available since November 2025, runs inside your account over HTTPS. Snowflake OAuth is the default, each tool must be granted on its own, and the SQL tool is read-only (SELECT only) unless you turn that off. It replaces the open-source Snowflake-Labs/mcp server, which is now deprecated. No advisories on record. Biggest deductions: the token carries a whole Snowflake role, so use a dedicated least-privilege role, not your default one; and the server is closed source with no changelog dated in the last 60 days.
How to connect
// ~/.cursor/mcp.json (global) or <project>/.cursor/mcp.json (Snowflake OAuth client ID/secret)
{ "mcpServers": { "snowflake": {
"url": "https://<account_url>/api/v2/databases/<database>/schemas/<schema>/mcp-servers/<name>",
"auth": { "CLIENT_ID": "${env:MCP_CLIENT_ID}", "CLIENT_SECRET": "${env:MCP_CLIENT_SECRET}" } } } }Is Snowflake-managed MCP Server safe?
Is Snowflake-managed MCP Server safe to use?
Snowflake-managed MCP Server grades C (usable with care). Login is required, but access is coarse: one sign-in or key covers more than your agent needs, so grant the narrowest account you can. Updates are occasional, so fixes may be slow to arrive.
Does Snowflake-managed MCP Server have known vulnerabilities?
Not in our current data: it has no open CVEs or advisories. We re-check as new ones are published.
Does Snowflake-managed MCP Server support authentication?
Yes. It requires a login, so access can be tied to a person or a scoped key.
Alternatives in Databases & Data Stores
- A MongoDB MCP ServerQuery and administer MongoDB and Atlas clusters from an agent.
- A Neon MCP ServerOfficial hosted Neon server to manage Postgres projects and branches, run SQL, and inspect schema.
- A Supabase MCP ServerOfficial hosted Supabase server to manage projects, run SQL, and inspect schema.
- B BigQuery MCP ServerGoogle-hosted remote server to list datasets and tables, read schemas, and run SQL in BigQuery.
- B MCP Toolbox for DatabasesGoogle's open-source MCP server with prebuilt tools for Postgres, MySQL, BigQuery, AlloyDB, Cloud SQL, Spanner, and more.
Embed this badge
[](https://trustedmcp.io/servers/snowflake-mcp-server)<a href="https://trustedmcp.io/servers/snowflake-mcp-server"><img src="https://trustedmcp.io/badge/snowflake-mcp-server.svg" alt="TrustedMCP grade C" height="80"></a>Community reviews
Surprisingly polished
Of the Snowflake-managed integrations I tried, this one is the most predictable. I would prefer to read the code, but the hosted service has been dependable. I like that access goes through a proper sign-in instead of a long-lived secret on disk. Keep permissions tight and it is a good tool.
Used for Checking data quality after imports
- Setup & docs 4/5
- Auth experience 4/5
- Reliability 5/5
- Maintainer responsiveness 4/5
Went back to calling the API directly
Not what I expected from the description. Auth is handled properly, and revoking access later was one click. Keeping it to local experiments for now.
Used for Generating SQL for ad-hoc reports
- Setup & docs 2/5
- Auth experience 4/5
- Reliability 2/5
- Maintainer responsiveness 2/5
Solid and well behaved
I use this almost daily. I like that access goes through a proper sign-in instead of a long-lived secret on disk. Issues get answered eventually. Not fast, not abandoned. Happy to run it in production.
Used for Debugging data issues in staging
- Setup & docs 4/5
- Auth experience 4/5
- Reliability 4/5
- Maintainer responsiveness 4/5
Fine for a demo, not for prod
Ran into problems pretty quickly. Being official from Snowflake counts for a lot when I pitch it to security. Updates are a bit slow, but it is stable enough that it has not mattered. Keeping it to local experiments for now.
Used for Read-only analytics questions
- Setup & docs 2/5
- Auth experience 4/5
- Reliability 1/5
- Maintainer responsiveness 3/5
Capable but needs guardrails
Took longer to configure than I expected. Nice to use something maintained by Snowflake rather than a random fork. I like that access goes through a proper sign-in instead of a long-lived secret on disk. Recommended, with sensible guardrails.
Used for Prototyping queries before writing code
- Setup & docs 3/5
- Auth experience 3/5
- Reliability 3/5
- Maintainer responsiveness 3/5
Good, but read the permissions first
Good for experimenting, still deciding about production. I like that access goes through a proper sign-in instead of a long-lived secret on disk. Not something I would put in production yet.
Used for Checking data quality after imports
- Setup & docs 3/5
- Auth experience 3/5
- Reliability 3/5
- Maintainer responsiveness 3/5
Too much access for my comfort
Gave it a fair shot over two weeks. Auth is handled properly, and revoking access later was one click. Fine in production if you sandbox it.
Used for Prototyping queries before writing code
- Setup & docs 3/5
- Auth experience 3/5
- Reliability 3/5
- Maintainer responsiveness 3/5
The Snowflake-managed integration I wanted
Clear tool names, sensible outputs, very few surprises. Sign-in flow was painless and I never had to paste a key into a config file.
Used for Schema exploration during a migration
- Setup & docs 5/5
- Auth experience 3/5
- Reliability 5/5
- Maintainer responsiveness 4/5
Too many sharp edges
Setup was rough and the result was flaky. Scoped the token to just what the agent needs and it respected that. The OAuth flow worked first time in Claude Code. Not something I would put in production yet.
Used for Prototyping queries before writing code
- Setup & docs 1/5
- Auth experience 4/5
- Reliability 1/5
- Maintainer responsiveness 3/5
Needs more maintenance love
I wanted to like this one. Turned on read-only mode on day one, highly recommend doing the same. For anything real I would look elsewhere.
Used for Generating SQL for ad-hoc reports
- Setup & docs 3/5
- Auth experience 3/5
- Reliability 2/5
- Maintainer responsiveness 3/5
Does what it says, no drama
Tried it on a side project first, then rolled it out at work. I like that access goes through a proper sign-in instead of a long-lived secret on disk. Issues get answered eventually. Not fast, not abandoned.
Used for Incident investigation
- Setup & docs 4/5
- Auth experience 4/5
- Reliability 4/5
- Maintainer responsiveness 4/5
OK for read-only work
It does the job, but it took some tweaking. Auth is handled properly, and revoking access later was one click. Release pace is moderate, so I pin a version and check in monthly. Worth it, just do not skip the hardening steps.
Used for Incident investigation
- Setup & docs 2/5
- Auth experience 3/5
- Reliability 3/5
- Maintainer responsiveness 3/5
Earned a permanent spot in my config
Simple to set up in Cursor, simple to reason about. Turned on read-only mode on day one, highly recommend doing the same. Auth is handled properly, and revoking access later was one click. Easy recommendation.
Used for Checking data quality after imports
- Setup & docs 5/5
- Auth experience 4/5
- Reliability 3/5
- Maintainer responsiveness 4/5
Good defaults, good docs
Replaced a homegrown script with Snowflake-managed MCP Server and have not looked back. Used a fine-grained token with short expiry and it works fine with that. Scoped the token to just what the agent needs and it respected that. Updates are a bit slow, but it is stable enough that it has not mattered. I would use it in prod, but only with a human approving writes.
Used for Read-only analytics questions
- Setup & docs 4/5
- Auth experience 4/5
- Reliability 4/5
- Maintainer responsiveness 4/5
Trustworthy enough for real work
Been running this for about a month now. Sign-in flow was painless and I never had to paste a key into a config file. Good choice if you need Snowflake-managed in your agent.
Used for Read-only analytics questions
- Setup & docs 5/5
- Auth experience 4/5
- Reliability 4/5
- Maintainer responsiveness 4/5
Clean integration, sensible permissions
Our agents call this dozens of times a day. Hosted endpoint means no local process to babysit. Read-only mode is the first thing I enable, and it covers most of what I need. I would use it in prod, but only with a human approving writes.
Used for Answering support questions from the database
- Setup & docs 4/5
- Auth experience 4/5
- Reliability 4/5
- Maintainer responsiveness 4/5
Decent, not set-and-forget
Useful tool, though I would not hand it to a junior unsupervised. Release pace is moderate, so I pin a version and check in monthly. Auth is handled properly, and revoking access later was one click.
Used for Schema exploration during a migration
- Setup & docs 3/5
- Auth experience 4/5
- Reliability 4/5
- Maintainer responsiveness 3/5
Mixed feelings after two weeks
Works well enough for what I need. Used a fine-grained token with short expiry and it works fine with that. Updates are a bit slow, but it is stable enough that it has not mattered. Sign-in flow was painless and I never had to paste a key into a config file. I will check back in a few releases.
Used for Debugging data issues in staging
- Setup & docs 4/5
- Auth experience 2/5
- Reliability 4/5
- Maintainer responsiveness 3/5
Works, just lock it down
Some tools are great, a couple feel half finished. Scoped the token to just what the agent needs and it respected that.
Used for Answering support questions from the database
- Setup & docs 3/5
- Auth experience 4/5
- Reliability 3/5
- Maintainer responsiveness 3/5
Quietly reliable
Hooked Snowflake-managed MCP Server into Claude Code and it worked on the first try. Scoped the token to just what the agent needs and it respected that. Release pace is moderate, so I pin a version and check in monthly. I gave it a database user that can only read the tables it needs. Would recommend without hesitation.
Used for Generating SQL for ad-hoc reports
- Setup & docs 5/5
- Auth experience 5/5
- Reliability 5/5
- Maintainer responsiveness 5/5
Write a review
Ran this server? Tell other teams how it went. You get one review per server. We email you a link to confirm it, then an editor checks it before it goes up. We never show your email.