Atlas / MCP servers / mikdanjey / snowflake-mcp-server

snowflake-mcp-serverSAFE

Name: snowflake-mcp-server
Author: mikdanjey

mcp/mikdanjey/snowflake-mcp-server

MCP server by mikdanjey · Audited 2026-10-12

A Model Context Protocol (MCP) server that enables LLM agents to securely connect to and query Snowflake databases. This server acts as a bridge between natural language processing agents and Snowflake's data warehouse, allowing for seamless SQL execution through structured input/output over STDIO.

Verdict

SAFE

Grade

Trust score

89 /100

Exposed tools

1 0r · 1w · 0d

Transport

stdio

License

MIT

Stars

Overview

From the repository's own README, as read at the audited commit. Badges and raw HTML are left out.

Features

MCP Protocol Compliance: Full compatibility with the Model Context Protocol specification
Secure Authentication: Support for both password and external browser (SSO) authentication
SQL Validation: Comprehensive input validation and sanitization using Zod schemas
Error Handling: Robust error handling with detailed diagnostic information
Performance Optimized: Async query execution with connection pooling and timeout management
Comprehensive Logging: Structured logging with configurable levels
TypeScript: Full TypeScript support with comprehensive type definitions

Quick Start

Prerequisites

Node.js 20.0.0 or higher
Access to a Snowflake account
Valid Snowflake credentials

Usage

Basic MCP Integration

The server exposes a snowflake.query resource that accepts SQL queries and returns structured results. Here's how to integrate it with an MCP client:

{
"mcpServers": {
"snowflake-mcp-server": {
"command": "npx",
"args": ["-y", "snowflake-mcp-server"],
"env": {
"SNOWFLAKE_ACCOUNT": "NLTFXXX-KB70000",
"SNOWFLAKE_USER": "MIKDANJEY",
"SNOWFLAKE_DATABASE": "DEMO",
"SNOWFLAKE_SCHEMA": "PUBLIC",
"SNOWFLAKE_WAREHOUSE": "COMPUTE_WH",
"SNOWFLAKE_ROLE": "SYSADMIN",
"SNOWFLAKE_AUTHENTICATOR": "snowflake",
"SNOWFLAKE_PASSWORD": "HZtJXuz6Efq2MNC",
"LOG_LEVEL": "info"
}
}
}
}

Installation

Clone and install dependencies:

git clone https://github.com/mikdanjey/snowflake-mcp-server.git
cd snowflake-mcp-server
npm install

**Configure environmen

Read from source at commit d1cc75c8743dOBSERVED · 2026-10-12

Connect

Built from this server's own package name, version and transport as found in its source — not copied from anyone's documentation, so it cannot drift against a page we do not control. Replace the environment placeholders with a token scoped to the least it needs.

claude-code

claude mcp add snowflake-mcp-server --env SNOWFLAKE_AUTHENTICATOR=${SNOWFLAKE_AUTHENTICATOR} --env SNOWFLAKE_PASSWORD=${SNOWFLAKE_PASSWORD} -- npx -y [email protected]

claude-desktop

{
  "mcpServers": {
    "snowflake-mcp-server": {
      "command": "npx",
      "args": [
        "-y",
        "[email protected]"
      ],
      "env": {
        "SNOWFLAKE_AUTHENTICATOR": "${SNOWFLAKE_AUTHENTICATOR}",
        "SNOWFLAKE_PASSWORD": "${SNOWFLAKE_PASSWORD}"
      }
    }
  }
}

Exposed tools (1)

0 read · 1 write · 0 destructive.

Tool	Risk	Description
`snowflake_query`	write	Execute SQL queries against Snowflake database

Trust audit

SAFEgrade B · trust 89/100 Nothing in the source contradicts what it says it does. Grade A is reserved for packages that have also passed the behavioural sandbox.

Layer	What it checks	Result
L0	Provenance & inventory	PASS
L1	Static analysis of the code	PASS
L2	Instruction surface (what it tells the agent)	PASS
L3	Class-specific surface	PASS
L4	Behavioural (sandbox)	SKIPPED

What the source does

Filesystem: none-observed
Network: none-observed
Shell: none-observed
Dependencies: not all pinned
Secrets in source: none-found

Findings (10)

LOWInventory / provenance · inv.hidden_file · CWE-1104

.prettierignore

.prettierignore

Why it matters. hidden member outside the usual dotfiles

Fix. review its purpose