At a glance
- Availability: Experimental (how to enable).
- Authentication: API key.
- Connection: The key from
SNOWFLAKE_PATis sent as theBearerprefixedAuthorizationheader. - Provider documentation: Authentication reference.
Credentials
Set these per environment. See Connect an integration.Setup
- Locate Your Account Identifier: Find your Snowflake account identifier in the Snowflake web interface URL (e.g., xy12345.us-east-1 from https://xy12345.us-east-1.snowflakecomputing.com)
- Create or Use Existing User: Use an existing Snowflake user or create a new one with appropriate permissions. The user needs USAGE privileges on the warehouse and database, and SELECT privileges on tables.
- Generate a Programmatic Access Token: In Snowsight, open your user profile > Settings > Authentication and generate a programmatic access token (PAT), or run ALTER USER … ADD PROGRAMMATIC ACCESS TOKEN. The SQL API does not accept username/password basic auth; the PAT is sent as a Bearer token.
- Configure Warehouse: Ensure you have a warehouse created and running. The default warehouse is typically named COMPUTE_WH.
- Set Environment Variables: Add the following environment variables to your .env file with your Snowflake credentials
- Test Connection: Test your connection by listing databases or running a simple query
Tools
Verify the connection
Call a read tool such assnowflake__list_databases with arguments for your account. Confirm that the result comes from the intended account or workspace before enabling write tools.