{
  "name": "com.top-mcps/snowflake-mcp-server",
  "description": "Snowflake-managed MCP servers are a generally available Snowflake feature, not a package you install. You declare one as an account object with `CREATE MCP SERVER … FROM SPECIFICATION`, listing exactly which tools it exposes, and clients connect to it at `https://<account_url>/api/v2/databases/{database}/schemas/{schema}/mcp-servers/{name}` over Snowflake OAuth. Five tool types are available: CORTEX_AGENT_RUN, CORTEX_ANALYST_MESSAGE, CORTEX_SEARCH_SERVICE_QUERY, SYSTEM_EXECUTE_SQL, and GENERIC for your own UDFs and stored procedures.",
  "status": "active",
  "version": "remote",
  "_meta": {
    "com.top-mcps/lastVerified": "2026-09-05",
    "com.top-mcps/score": {
      "value": 55,
      "rubricVersion": "2026-09",
      "lastComputed": "2026-09-14T10:51:09.234Z",
      "methodology": "https://top-mcps.com/about/methodology"
    }
  },
  "homepage": "https://docs.snowflake.com/en/user-guide/snowflake-cortex/cortex-agents-mcp",
  "author": {
    "name": "Snowflake"
  },
  "packages": [
    {
      "registryType": "npm",
      "registryBaseUrl": "https://registry.npmjs.org",
      "identifier": "MCP",
      "version": "remote",
      "transport": {
        "type": "streamable-http"
      },
      "runtimeArguments": [
        {
          "type": "positional",
          "value": "SERVER"
        },
        {
          "type": "positional",
          "value": "<name>"
        },
        {
          "type": "positional",
          "value": "FROM"
        },
        {
          "type": "positional",
          "value": "SPECIFICATION"
        },
        {
          "type": "positional",
          "value": "$$"
        },
        {
          "type": "positional",
          "value": "…"
        },
        {
          "type": "positional",
          "value": "$$;"
        },
        {
          "type": "positional",
          "value": "then"
        },
        {
          "type": "positional",
          "value": "point"
        },
        {
          "type": "positional",
          "value": "your"
        },
        {
          "type": "positional",
          "value": "client"
        },
        {
          "type": "positional",
          "value": "at"
        },
        {
          "type": "positional",
          "value": "https://<account_url>/api/v2/databases/<db>/schemas/<schema>/mcp-servers/<name>"
        }
      ]
    }
  ],
  "capabilities": {
    "security": {
      "scope": "read-write",
      "sandbox": "Hosted by Snowflake inside the account. Authorisation is Snowflake OAuth (or a programmatic access token) resolving to a real Snowflake role, so every tool call is evaluated against that role's privileges, row-access policies, and masking policies. No credentials leave the account and no local process runs.",
      "gotchas": [
        "SYSTEM_EXECUTE_SQL exposes arbitrary SQL under the caller's role — include it only when the roles that can reach the server are ones you would hand a SQL console.",
        "A GENERIC tool runs your own UDF or stored procedure, so its blast radius is whatever that procedure does, not what the MCP layer allows.",
        "MCP server objects are not replicated in failover groups; a failover leaves agents pointing at an endpoint that no longer exists.",
        "Responses from SQL and generic tools are truncated at 250 KB, so a broad query returns a silently partial answer rather than an error."
      ]
    }
  },
  "_links": {
    "html": "https://top-mcps.com/mcp/snowflake-mcp-server",
    "markdown": "https://top-mcps.com/mcp/snowflake-mcp-server.md",
    "methodology": "https://top-mcps.com/about/methodology"
  }
}
