snowflake-mcp
Allows querying and interacting with Snowflake databases, including executing SELECT queries, listing databases, schemas, and tables, and describing table structures.
Click on "Install Server".
Wait a few minutes for the server to deploy. Once ready, it will show a "Started" state.
In the chat, type
@followed by the MCP server name and your instructions, e.g., "@snowflake-mcpshow the first 10 rows from the customers table"
That's it! The server will respond to your query, and you can continue using it as needed.
Here is a step-by-step guide with screenshots.
Node-based Snowflake MCP
A TypeScript-based MCP (Model Context Protocol) server that enables Large Language Models (LLMs) like Claude to directly query and interact with Snowflake databases.
๐ Features
๐ Easy Integration - Simple setup with Claude Desktop, Cursor, or any MCP-compatible tool
๐ Secure - Multiple authentication methods including environment variables and key-pair authentication
๐ High Performance - Built with TypeScript and the native Snowflake Node.js driver
๐ Full Database Access - Query, explore schemas, list tables, and analyze data
๐ ๏ธ Developer Friendly - Comprehensive TypeScript types and error handling
Related MCP server: Snowflake MCP Server
๐ Prerequisites
Node.js 18 or higher
npm or yarn
Snowflake account with appropriate access permissions
MCP-compatible client (Claude Desktop, Cursor, Continue, etc.)
๐ Quick Start
Installation Options
Option 1: Install via MCPB Package (Recommended for Claude Desktop)
The easiest way to install this MCP server in Claude Desktop is using the pre-built MCPB package:
Download the latest release:
Go to Releases
Download the
snowflake-mcp-v1.0.0.mcpbfile
Install in Claude Desktop:
Open Claude Desktop
Navigate to Settings โ Developer โ MCP Servers
Click "Install from file"
Select the downloaded
.mcpbfileConfigure your Snowflake credentials when prompted
Option 2: Build MCPB Package from Source
# Clone the repository
git clone https://github.com/patrickfreyer/mcp-server-snowflake.git
cd mcp-server-snowflake
# Install dependencies
npm install
# Build the TypeScript server
npm run build
# Create the MCPB package
./build-mcpb.sh
# The package will be created as snowflake-mcp-v1.0.0.mcpb
# Install this file in Claude Desktop as described aboveOption 3: Manual Installation (For Development)
# Clone the repository
git clone https://github.com/patrickfreyer/mcp-server-snowflake.git
cd mcp-server-snowflake
# Install dependencies
npm install
# Build the server
npm run buildConfiguration
Configuration depends on your installation method:
For MCPB Package Users
When you install the MCPB package, Claude Desktop will automatically prompt you for:
Snowflake Account (e.g.,
your-account.region.provider)Warehouse name
Username (typically your email)
Password
Role (optional)
Database (optional)
Schema (optional)
These credentials are securely stored in Claude Desktop's configuration.
For Manual Installation
Set up environment variables:
# Copy the example environment file
cp .env.example .env
# Edit .env with your Snowflake credentials
SNOWFLAKE_ACCOUNT=your-account.region.provider
SNOWFLAKE_USER=your.email@company.com
SNOWFLAKE_PASSWORD=your-password
SNOWFLAKE_WAREHOUSE=YOUR_WAREHOUSE # Optional
SNOWFLAKE_DATABASE=YOUR_DATABASE # Optional
SNOWFLAKE_SCHEMA=YOUR_SCHEMA # Optional
SNOWFLAKE_ROLE=YOUR_ROLE # OptionalConfigure your MCP client:
Claude Desktop
Add to ~/Library/Application Support/Claude/claude_desktop_config.json:
{
"mcpServers": {
"snowflake": {
"command": "node",
"args": ["/absolute/path/to/mcp-server-snowflake/dist/index.js"],
"env": {
"SNOWFLAKE_ACCOUNT": "your-account.region.provider",
"SNOWFLAKE_USER": "your.email@company.com",
"SNOWFLAKE_PASSWORD": "your-password",
"SNOWFLAKE_WAREHOUSE": "YOUR_WAREHOUSE",
"SNOWFLAKE_DATABASE": "YOUR_DATABASE",
"SNOWFLAKE_SCHEMA": "YOUR_SCHEMA",
"SNOWFLAKE_ROLE": "YOUR_ROLE"
}
}
}
}Cursor
Add to Cursor settings:
{
"mcp.servers": {
"snowflake": {
"command": "node",
"args": ["/path/to/mcp-server-snowflake/dist/index.js"],
"env": {
"SNOWFLAKE_ACCOUNT": "your-account",
"SNOWFLAKE_USER": "your-user",
"SNOWFLAKE_PASSWORD": "your-password"
}
}
}
}๐ Available Tools
The MCP server provides the following tools for interacting with Snowflake:
read_query
Execute SELECT queries on your Snowflake database.
// Example
{
"query": "SELECT * FROM customers LIMIT 10"
}list_databases
List all available databases in your Snowflake account.
list_schemas
List all schemas in a specific database.
// Example
{
"database": "MY_DATABASE" // Optional
}list_tables
List all tables in a specific schema.
// Example
{
"database": "MY_DATABASE", // Optional
"schema": "MY_SCHEMA" // Optional
}describe_table
Get detailed information about a table's structure.
// Example
{
"table_name": "DATABASE.SCHEMA.TABLE"
}๐ Security
Environment Variables
The recommended approach for credentials:
export SNOWFLAKE_ACCOUNT="your-account"
export SNOWFLAKE_USER="your-user"
export SNOWFLAKE_PASSWORD="your-password"Key-Pair Authentication (Production)
For production environments, we recommend using key-pair authentication:
Generate a key pair
Configure your Snowflake user with the public key
Update the server configuration to use the private key
File Permissions
Secure your configuration files:
chmod 600 ~/.env
chmod 600 ~/Library/Application\ Support/Claude/claude_desktop_config.json๐ฆ Building MCPB Packages
The MCPB (MCP Bundle) format allows for easy distribution and installation of MCP servers in Claude Desktop.
Building a Package
# Ensure the project is built
npm run build
# Create the MCPB package
./build-mcpb.shThis will create a snowflake-mcp-v1.0.0.mcpb file containing:
Compiled server code
Manifest with configuration schema
Production dependencies
Installation metadata
Package Contents
The MCPB package includes:
manifest.json- Defines configuration parameters and server entry pointdist/- Compiled TypeScript server codenode_modules/- Production dependencies onlyREADME.md- Package documentation
Manifest Configuration
The manifest.json file defines:
User configuration parameters (without default values for security)
Server entry point and environment variable mapping
Tool definitions for Snowflake operations
Package metadata (name, version, author, etc.)
๐งช Development
Setup Development Environment
# Install dependencies
npm install
# Run in development mode
npm run dev
# Run tests
npm test
# Lint code
npm run lint
# Type check
npm run type-checkProject Structure
mcp-server-snowflake/
โโโ src/
โ โโโ index.ts # Main server implementation
โโโ dist/ # Compiled JavaScript (generated)
โโโ tests/ # Test files
โโโ .env.example # Environment variable template
โโโ .github/
โ โโโ workflows/ # CI/CD workflows
โโโ manifest.json # MCPB package configuration
โโโ build-mcpb.sh # Script to build MCPB package
โโโ package.json # Node.js dependencies
โโโ tsconfig.json # TypeScript configuration
โโโ LICENSE # MIT License
โโโ CONTRIBUTING.md # Contribution guidelines
โโโ README.md # This file๐ค Contributing
We welcome contributions! Please see our Contributing Guide for details.
How to Contribute
Fork the repository
Create your feature branch (
git checkout -b feature/AmazingFeature)Commit your changes (
git commit -m 'Add some AmazingFeature')Push to the branch (
git push origin feature/AmazingFeature)Open a Pull Request
๐ License
This project is licensed under the MIT License - see the LICENSE file for details.
๐ Support
If you encounter any issues or have questions:
Check the Troubleshooting section below
Search existing issues
Create a new issue
๐ง Troubleshooting
Common Issues
"Missing required Snowflake configuration"
Ensure all required environment variables are set
Check for typos in variable names
Verify the .env file is in the correct location
Connection Failed
Verify your Snowflake account format:
account.region.providerCheck network connectivity and firewall settings
Ensure your IP is whitelisted in Snowflake network policies
Permission Denied
Verify your Snowflake role has necessary permissions
Check warehouse access rights
Ensure database and schema permissions are granted
Debug Mode
Enable verbose logging:
export DEBUG=mcp:*
node dist/index.js๐ Roadmap
Add support for write operations (INSERT, UPDATE, DELETE)
Implement connection pooling
Add support for Snowflake stored procedures
Create a web-based configuration UI
Add support for multiple Snowflake accounts
Implement query result caching
Add data visualization capabilities
๐ฅ Authors
Patrick Freyer - Initial work
๐ Acknowledgments
Anthropic for the MCP protocol specification
Snowflake for their excellent Node.js SDK
The open-source community for continuous support and contributions
๐ Stats
Made with โค๏ธ by Patrick Freyer
Available Tools
5 toolsdescribe_tableB
Get table schema information
| Name | Required | Description | Default |
|---|---|---|---|
| table_name | Yes | The table name (can include database.schema.table) |
TDQS
Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?
No annotations provided, and description is minimal. It does not disclose what schema information is returned (e.g., columns, types), whether it is a safe read operation, or any permission requirements.
Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.
Is the description appropriately sized, front-loaded, and free of redundancy?
Extremely concise at one sentence, but may be too sparse. It conveys the basic action but lacks helpful details that would not be excessive.
Shorter descriptions cost fewer tokens and are easier for agents to parse. Every sentence should earn its place.
Given the tool's complexity, does the description cover enough for an agent to succeed on first attempt?
With no output schema, the description should clarify the return format. It does not mention what the schema information includes (e.g., columns, data types, constraints), leaving the agent guessing.
Complex tools with many parameters or behaviors need more documentation. Simple tools need less. This dimension scales expectations accordingly.
Does the description clarify parameter syntax, constraints, interactions, or defaults beyond what the schema provides?
Schema coverage is 100% and the parameter description is clear. The tool description adds no extra meaning beyond what the schema already provides.
Input schemas describe structure but not intent. Descriptions should explain non-obvious parameter relationships and valid value ranges.
Does the description clearly state what the tool does and how it differs from similar tools?
Description clearly states 'Get table schema information', with a specific verb and resource. It distinguishes from siblings like list_tables (list names) and read_query (read data) by focusing on schema metadata.
Agents choose between tools based on descriptions. A clear purpose with a specific verb and resource helps agents select the right tool.
Does the description explain when to use this tool, when not to, or what alternatives exist?
No explicit when-to-use or when-not-to-use guidance. Usage is somewhat implied by the name and purpose, but no alternatives or exclusions are mentioned.
Agents often have multiple tools that could apply. Explicit usage guidance like "use X instead of Y when Z" prevents misuse.
list_databasesA
List all available databases
| Name | Required | Description | Default |
|---|---|---|---|
No parameters | |||
TDQS
Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?
The description implies a read-only, non-destructive operation, which is appropriate. However, it lacks details about potential side effects, authentication requirements, or behavior when no databases exist. Since annotations are absent, more transparency would be beneficial.
Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.
Is the description appropriately sized, front-loaded, and free of redundancy?
The description is a single, concise sentence that conveys the entire purpose without any unnecessary words. It is well front-loaded and every word earns its place.
Shorter descriptions cost fewer tokens and are easier for agents to parse. Every sentence should earn its place.
Given the tool's complexity, does the description cover enough for an agent to succeed on first attempt?
Given the tool's simplicity (no parameters, no output schema), the description fully captures its functionality. The sibling tools provide context for differentiation. No additional information is necessary.
Complex tools with many parameters or behaviors need more documentation. Simple tools need less. This dimension scales expectations accordingly.
Does the description clarify parameter syntax, constraints, interactions, or defaults beyond what the schema provides?
There are zero parameters, and schema coverage is 100%. The description adds no parameter information, which is acceptable because no parameters exist. Baseline is 4 per the scoring rules.
Input schemas describe structure but not intent. Descriptions should explain non-obvious parameter relationships and valid value ranges.
Does the description clearly state what the tool does and how it differs from similar tools?
The description succinctly states 'List all available databases', which is a specific verb and resource. It clearly distinguishes from sibling tools like list_tables or list_schemas by specifying the scope (all databases) and the action (list).
Agents choose between tools based on descriptions. A clear purpose with a specific verb and resource helps agents select the right tool.
Does the description explain when to use this tool, when not to, or what alternatives exist?
No guidance is provided on when to use this tool versus alternatives. There is no mention of prerequisites, such as being connected to a database system, or when to prefer list_schemas or list_tables instead.
Agents often have multiple tools that could apply. Explicit usage guidance like "use X instead of Y when Z" prevents misuse.
list_schemasB
List all schemas in a database
| Name | Required | Description | Default |
|---|---|---|---|
| database | No | The database name (optional, uses current if not specified) |
TDQS
Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?
No annotations provided, so description carries full burden. It only states the operation without disclosing potential side effects, authorization needs, or performance implications. As a read-only listing, minimal transparency is acceptable but still lacking.
Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.
Is the description appropriately sized, front-loaded, and free of redundancy?
Single sentence, front-loaded with action and resource, no wasted words. Perfectly concise.
Shorter descriptions cost fewer tokens and are easier for agents to parse. Every sentence should earn its place.
Given the tool's complexity, does the description cover enough for an agent to succeed on first attempt?
For a simple list tool with one optional parameter and no output schema, the description sufficiently conveys purpose. However, it could be slightly more informative about what schemas are or how they relate to siblings.
Complex tools with many parameters or behaviors need more documentation. Simple tools need less. This dimension scales expectations accordingly.
Does the description clarify parameter syntax, constraints, interactions, or defaults beyond what the schema provides?
Input schema covers the only parameter 'database' with a description. The description adds no further meaning, so baseline score of 3 is appropriate.
Input schemas describe structure but not intent. Descriptions should explain non-obvious parameter relationships and valid value ranges.
Does the description clearly state what the tool does and how it differs from similar tools?
Description clearly states the action 'List' and resource 'schemas' with scope 'in a database'. It distinguishes from sibling tools like list_tables and list_databases by targeting schemas specifically.
Agents choose between tools based on descriptions. A clear purpose with a specific verb and resource helps agents select the right tool.
Does the description explain when to use this tool, when not to, or what alternatives exist?
No guidance on when to use this tool versus alternatives like list_tables or list_databases. The description does not mention prerequisites, typical use cases, or exclusions.
Agents often have multiple tools that could apply. Explicit usage guidance like "use X instead of Y when Z" prevents misuse.
list_tablesB
List all tables in a schema
| Name | Required | Description | Default |
|---|---|---|---|
| database | No | The database name (optional) | |
| schema | No | The schema name (optional) |
TDQS
Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?
With no annotations, the description carries the full burden but only states the basic action. It does not disclose authentication needs, behavior when parameters are omitted, or potential side effects.
Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.
Is the description appropriately sized, front-loaded, and free of redundancy?
The description is a single sentence that is front-loaded and contains no extraneous information. It is appropriately concise.
Shorter descriptions cost fewer tokens and are easier for agents to parse. Every sentence should earn its place.
Given the tool's complexity, does the description cover enough for an agent to succeed on first attempt?
Given optional parameters and no output schema, the description lacks details on return format, behavior when parameters are omitted, and potential limitations. It is incomplete for effective use.
Complex tools with many parameters or behaviors need more documentation. Simple tools need less. This dimension scales expectations accordingly.
Does the description clarify parameter syntax, constraints, interactions, or defaults beyond what the schema provides?
Schema coverage is 100%, so the schema already documents both parameters adequately. The description adds no extra meaning beyond the schema, meeting the baseline of 3.
Input schemas describe structure but not intent. Descriptions should explain non-obvious parameter relationships and valid value ranges.
Does the description clearly state what the tool does and how it differs from similar tools?
The description 'List all tables in a schema' uses a specific verb ('List') and resource ('tables'), clearly distinguishing the tool from siblings like describe_table, list_databases, and list_schemas.
Agents choose between tools based on descriptions. A clear purpose with a specific verb and resource helps agents select the right tool.
Does the description explain when to use this tool, when not to, or what alternatives exist?
No guidance is provided on when to use this tool versus alternatives (e.g., when to use describe_table instead). The description lacks context on prerequisites or scenarios.
Agents often have multiple tools that could apply. Explicit usage guidance like "use X instead of Y when Z" prevents misuse.
read_queryB
Execute a SELECT query on Snowflake
| Name | Required | Description | Default |
|---|---|---|---|
| query | Yes | The SELECT query to execute |
TDQS
Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?
No annotations provided, so the description carries the burden. It only states the basic action, omitting details like read-only nature, potential for large results, permission requirements, or side effects.
Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.
Is the description appropriately sized, front-loaded, and free of redundancy?
The description is a single, direct sentence with no extraneous words, achieving perfect conciseness.
Shorter descriptions cost fewer tokens and are easier for agents to parse. Every sentence should earn its place.
Given the tool's complexity, does the description cover enough for an agent to succeed on first attempt?
For a simple tool with one parameter and no output schema, the description is minimally complete but lacks details on return format, read-only confirmation, or performance expectations.
Complex tools with many parameters or behaviors need more documentation. Simple tools need less. This dimension scales expectations accordingly.
Does the description clarify parameter syntax, constraints, interactions, or defaults beyond what the schema provides?
Schema coverage is 100% with a parameter description. The tool description does not add meaning beyond what the schema already provides, so baseline 3 is appropriate.
Input schemas describe structure but not intent. Descriptions should explain non-obvious parameter relationships and valid value ranges.
Does the description clearly state what the tool does and how it differs from similar tools?
The description clearly states it executes a SELECT query on Snowflake, identifying the verb and resource. However, it does not explicitly indicate it is read-only or what it returns, which could be improved.
Agents choose between tools based on descriptions. A clear purpose with a specific verb and resource helps agents select the right tool.
Does the description explain when to use this tool, when not to, or what alternatives exist?
No guidance on when to use this tool versus sibling tools like describe_table or list_tables. The purpose is implied but not differentiated.
Agents often have multiple tools that could apply. Explicit usage guidance like "use X instead of Y when Z" prevents misuse.
Tool Schema Changelog
Recent tool additions, removals, and schema changes observed during successful MCP inspections. Dates show when Glama detected each change.
5 tool updates
v1.0.0- First observed
describe_table - First observed
list_databases - First observed
list_schemas - First observed
list_tables - First observed
read_query
TDQS
Each tool has a clearly distinct purpose: browsing databases, schemas, tables, describing table schema, and executing SELECT queries. No overlap or ambiguity.
All tool names follow a consistent verb_noun pattern in snake_case (e.g., list_databases, describe_table, read_query), making them predictable and easy for an agent to interpret.
With 5 tools, the server is well-scoped for exploring a Snowflake database and executing queries. The count is neither too few nor excessive.
The tools cover the core workflow of discovering database objects and querying them. Missing operations like listing views or running DDL are minor gaps, but the set feels complete for typical read-only exploration.
Maintenance
Resources
Unclaimed servers have limited discoverability.
Looking for Admin?
If you are the server author, to access and configure the admin panel.
Related MCP Connectors
Query BigQuery, Snowflake, Redshift & Azure Synapse with natural language
Query 40 databases from Claude, ChatGPT, or Cursor โ on any device. Read-only, encrypted, audited.
Query PostgreSQL databases in plain English โ LLM-generated, safety-validated SQL.
Your Databricks Lakehouse in natural language: run SQL on your SQL warehouses, track long-running qu
Related MCP Servers
- AlicenseBqualityDmaintenanceEnables interaction with Snowflake databases through SQL queries, schema exploration, and data analysis. Supports read/write operations, table management, and automatic insight tracking for comprehensive database operations through natural language.7GPL 3.0
- AlicenseAqualityNot gradedmaintenanceEnables AI assistants to securely connect to Snowflake data warehouses and execute SQL queries through natural language interactions. Supports multiple authentication methods and provides formatted query results with built-in security controls.12-
- AlicenseNot gradedqualityDmaintenanceEnables AI assistants to perform comprehensive Snowflake database operations including DDL, DML, and warehouse management. It allows users to query data, manage database objects, and configure permissions using natural language commands.MIT
- AlicenseAqualityDmaintenanceEnables AI agents to execute SQL queries and explore Snowflake databases using natural language, with schema discovery, table inspection, and readonly mode.11679MIT
Latest Blog Posts
- Who's Calling? MCP Hosts Are an Identity Blind Spot (And the Spec Knows It)By Om-Shree-0709 on .mcpAgent IdentityOAuth 2.1
- Your AI Chatbot Just Exposed Your CEO's Salary to an InternBy Om-Shree-0709 on .Agent IdentityMCP SecurityOAuth Delegation
- Why MCP Servers Need Execution Sandboxing (And Why Your Current Stack Isn't Enough)By Om-Shree-0709 on .Agentic AiPrompt InjectionWebAssembly
MCP directory API
We provide all the information about MCP servers via our MCP API.
curl -X GET 'https://glama.ai/api/mcp/v1/servers/patrickfreyer/mcp-server-snowflake'
If you have feedback or need assistance with the MCP directory API, please join our Discord server