Snowflake Labs MCP, the deprecated open-source Snowflake server

• Runs a SQL statement in Snowflake

  Runs SQL generated by your assistant against your Snowflake account. Which statement types are allowed is set in the server's configuration file, and it must be turned on there. Use it for ad hoc queries and approved changes.

  Try: “Run a query that counts orders by month in SALES.PUBLIC.ORDERS”

  Delete · run_snowflake_query

• Asks questions about structured data through Cortex Analyst

  Sends a natural-language question to a Cortex Analyst service built on a semantic view or semantic YAML file. It appears only when analyst services are configured. Use it for questions about your tables.

  Try: “What was revenue by region last quarter?”

  Network · cortex_analyst

• Searches unstructured data through Cortex Search

  Queries a Cortex Search service you configured, the kind used for retrieval over documents and text. It appears only when search services are configured. Use it to find passages in your own data.

  Try: “Search our support tickets for refund complaints”

  Network · cortex_search

• Hands a question to a Cortex Agent

  Sends a query to a Cortex Agent you set up in Snowflake, which can work across structured and unstructured data. It appears only when agent services are configured.

  Try: “Ask the sales agent which accounts are at risk”

  Network · cortex_agent

• Lists semantic views in an account, database or schema

  Lists the Snowflake semantic views available at the scope you choose. Use it to find what data models exist.

  Try: “List the semantic views in the SALES database”

  Network · list_semantic_views

• Describes one semantic view

  Returns the description of a semantic view. Use it to understand what a view contains before querying it.

  Try: “Describe the semantic view REVENUE_VIEW”

  Network · describe_semantic_view

• Lists semantic dimensions

  Shows the semantic dimensions in an account, database or schema. Use it to see what you can group or filter by.

  Try: “Show the dimensions in the SALES schema”

  Network · show_semantic_dimensions

• Lists semantic metrics

  Shows the semantic metrics in an account, database or schema. Use it to see which measures you can ask for.

  Try: “Show the metrics in the SALES schema”

  Network · show_semantic_metrics

• Gets the definition of a semantic view

  Returns the DDL statement for a semantic view. Use it to see how a view is built or to recreate it elsewhere.

  Try: “Get the DDL for REVENUE_VIEW”

  Network · get_semantic_view_ddl

• Queries a semantic view directly

  Runs a query against a Snowflake semantic view for the metrics and dimensions you choose. Use it to get answers from a governed data model.

  Try: “Query REVENUE_VIEW for revenue by month”

  Network · query_semantic_view

• Lists Snowflake objects of a given type

  Lists objects such as databases, schemas, tables, views, warehouses, roles, stages and users. It must be enabled in the configuration. Use it to see what exists.

  Try: “List the tables in the ANALYTICS schema”

  Network · list_objects

• Describes one Snowflake object

  Returns details of an object such as a table or warehouse. Use it to inspect columns or settings.

  Try: “Describe the table ORDERS”

  Network · describe_object

• Creates a Snowflake object

  Creates an object of a supported type, such as a database, schema, table or warehouse. It is governed by the create permission in the server's configuration. Use it for basic setup.

  Try: “Create a schema named STAGING in the SALES database”

  Write · create_object

• Creates or updates a Snowflake object

  Creates an object, or alters it if it already exists. It is governed by the create permission in the configuration. Use it to bring an object to a desired state.

  Try: “Create or alter the view DAILY_SALES”

  Write · create_or_alter_object

• Deletes a Snowflake object

  Drops an object of a supported type. It is governed by the drop permission in the server's configuration. Use it with care because it removes the object.

  Try: “Drop the table TEMP_ORDERS”

  Delete · drop_object

• Used by the assistant behind the scenes

  Drafts a query for a semantic view

  Helps the assistant write a query against a semantic view. Use it to build the query before running it.

  Try: “Write a query for monthly revenue by region from REVENUE_VIEW”

  Read · write_semantic_view_query_tool

Watch out for

• Sample config allows writes and drops

  The template turns on Create, Drop, Delete, Update, Insert, Merge and TruncateTable. Set them to False and connect with a role that only has SELECT. github.com

• No longer maintained

  Snowflake deprecated it, so more security fixes are unlikely and capped dependencies block known ones. Move to the managed server. github.com

• Semantic view tools skip the statement filter

  An open report says these tools bypass the statement permission check. Keep the role SELECT-only so the database refuses writes. github.com

• Secondary roles widen what it can see

  With DEFAULT_SECONDARY_ROLES set to ALL the session gets all your roles, even if you pass one. Use a dedicated user with no secondary roles. github.com

• Old connector range allows a TLS bug

  The allowed connector versions include ones hit by CVE-2026-15925. Upgrade snowflake-connector-python to 3.18.1 or later in your environment. github.com

• Web mode listens on all interfaces

  In sse or streamable-http mode it binds to every network address by default. Set SNOWFLAKE_MCP_HOST to 127.0.0.1 for local use. github.com

Security advisories

In their words