Search / io.github.Snowflake-Labs/mcp
protogridL0· runs locallyMCP Server for Snowflake from Snowflake Labs
v1.3.5 · active · repository · descriptor JSON · versions
{
"mcpServers": {
"Snowflake-Labs": {
"command": "uvx",
"args": [
"snowflake-labs-mcp==1.3.5",
"--service-config-file",
"--account",
"--host",
"--user",
"--password",
"--role",
"--warehouse",
"--passcode-in-password",
"--passcode",
"--private-key",
"--private-key-file",
"--private-key-file-pwd",
"--authenticator",
"snowflake",
"--connection-name",
"--transport",
"stdio",
"--server-host",
"0.0.0.0",
"--port",
"9000",
"--endpoint",
"/mcp"
],
"env": {
"SNOWFLAKE_PASSWORD": "${SNOWFLAKE_PASSWORD}",
"SNOWFLAKE_PRIVATE_KEY": "${SNOWFLAKE_PRIVATE_KEY}"
}
}
}
}claude mcp add Snowflake-Labs -e "SNOWFLAKE_PASSWORD=${SNOWFLAKE_PASSWORD}" -e "SNOWFLAKE_PRIVATE_KEY=${SNOWFLAKE_PRIVATE_KEY}" -- uvx snowflake-labs-mcp==1.3.5 --service-config-file --account --host --user --password --role --warehouse --passcode-in-password --passcode --private-key --private-key-file --private-key-file-pwd --authenticator snowflake --connection-name --transport stdio --server-host 0.0.0.0 --port 9000 --endpoint /mcp[mcp_servers.Snowflake-Labs]
command = "uvx"
args = ["snowflake-labs-mcp==1.3.5", "--service-config-file", "--account", "--host", "--user", "--password", "--role", "--warehouse", "--passcode-in-password", "--passcode", "--private-key", "--private-key-file", "--private-key-file-pwd", "--authenticator", "snowflake", "--connection-name", "--transport", "stdio", "--server-host", "0.0.0.0", "--port", "9000", "--endpoint", "/mcp"]
env = { "SNOWFLAKE_PASSWORD" = "${SNOWFLAKE_PASSWORD}", "SNOWFLAKE_PRIVATE_KEY" = "${SNOWFLAKE_PRIVATE_KEY}" }
{
"$schema": "https://opencode.ai/config.json",
"mcp": {
"Snowflake-Labs": {
"type": "local",
"command": [
"uvx",
"snowflake-labs-mcp==1.3.5",
"--service-config-file",
"--account",
"--host",
"--user",
"--password",
"--role",
"--warehouse",
"--passcode-in-password",
"--passcode",
"--private-key",
"--private-key-file",
"--private-key-file-pwd",
"--authenticator",
"snowflake",
"--connection-name",
"--transport",
"stdio",
"--server-host",
"0.0.0.0",
"--port",
"9000",
"--endpoint",
"/mcp"
],
"enabled": true,
"environment": {
"SNOWFLAKE_PASSWORD": "{env:SNOWFLAKE_PASSWORD}",
"SNOWFLAKE_PRIVATE_KEY": "{env:SNOWFLAKE_PRIVATE_KEY}"
}
}
}
}{
"mcpServers": {
"Snowflake-Labs": {
"command": "uvx",
"args": [
"snowflake-labs-mcp==1.3.5",
"--service-config-file",
"--account",
"--host",
"--user",
"--password",
"--role",
"--warehouse",
"--passcode-in-password",
"--passcode",
"--private-key",
"--private-key-file",
"--private-key-file-pwd",
"--authenticator",
"snowflake",
"--connection-name",
"--transport",
"stdio",
"--server-host",
"0.0.0.0",
"--port",
"9000",
"--endpoint",
"/mcp"
],
"env": {
"SNOWFLAKE_PASSWORD": "${SNOWFLAKE_PASSWORD}",
"SNOWFLAKE_PRIVATE_KEY": "${SNOWFLAKE_PRIVATE_KEY}"
}
}
},
"deeplink": "cursor://anysphere.cursor-deeplink/mcp/install?name=Snowflake-Labs&config=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%3D"
}{
"servers": {
"Snowflake-Labs": {
"type": "stdio",
"command": "uvx",
"args": [
"snowflake-labs-mcp==1.3.5",
"--service-config-file",
"--account",
"--host",
"--user",
"--password",
"--role",
"--warehouse",
"--passcode-in-password",
"--passcode",
"--private-key",
"--private-key-file",
"--private-key-file-pwd",
"--authenticator",
"snowflake",
"--connection-name",
"--transport",
"stdio",
"--server-host",
"0.0.0.0",
"--port",
"9000",
"--endpoint",
"/mcp"
],
"env": {
"SNOWFLAKE_PASSWORD": "${SNOWFLAKE_PASSWORD}",
"SNOWFLAKE_PRIVATE_KEY": "${SNOWFLAKE_PRIVATE_KEY}"
}
}
}
}{
"mcpServers": {
"Snowflake-Labs": {
"command": "uvx",
"args": [
"snowflake-labs-mcp==1.3.5",
"--service-config-file",
"--account",
"--host",
"--user",
"--password",
"--role",
"--warehouse",
"--passcode-in-password",
"--passcode",
"--private-key",
"--private-key-file",
"--private-key-file-pwd",
"--authenticator",
"snowflake",
"--connection-name",
"--transport",
"stdio",
"--server-host",
"0.0.0.0",
"--port",
"9000",
"--endpoint",
"/mcp"
],
"env": {
"SNOWFLAKE_PASSWORD": "${SNOWFLAKE_PASSWORD}",
"SNOWFLAKE_PRIVATE_KEY": "${SNOWFLAKE_PRIVATE_KEY}"
}
}
}
}extensions:
"Snowflake-Labs":
enabled: true
name: "Snowflake-Labs"
type: stdio
cmd: "uvx"
args:
- "snowflake-labs-mcp==1.3.5"
- "--service-config-file"
- "--account"
- "--host"
- "--user"
- "--password"
- "--role"
- "--warehouse"
- "--passcode-in-password"
- "--passcode"
- "--private-key"
- "--private-key-file"
- "--private-key-file-pwd"
- "--authenticator"
- "snowflake"
- "--connection-name"
- "--transport"
- "stdio"
- "--server-host"
- "0.0.0.0"
- "--port"
- "9000"
- "--endpoint"
- "/mcp"
envs:
"SNOWFLAKE_PASSWORD": "${SNOWFLAKE_PASSWORD}"
"SNOWFLAKE_PRIVATE_KEY": "${SNOWFLAKE_PRIVATE_KEY}"
timeout: 300
Placeholders to fill from your own secret store: ${SNOWFLAKE_PASSWORD}, ${SNOWFLAKE_PRIVATE_KEY}. The registry never accepts secret values.
This is a local package: the command runs on your machine.
Not scored: fewer than three checks apply, usually because no remote answered a credential-free probe or the server is a local package.
protocol.modern, protocol.stateless, protocol.transport, protocol.list_ttlno remote answered a protocol handshake (not probed yet, unreachable, or local-only)auth.prm, auth.as_metadata, auth.cimdno remote uses OAuthauth.secret_in_urlno templated URLtools.descriptions, tools.description_length, tools.schemas, tools.annotations, tools.directory_hints, tools.token_cost, tools.api_dumptool list unknown (behind auth, not probed, or empty)stability.changes, stability.rug_pulltool list unknowndeps.known_vulns7 advisories to act on (malicious, or rated high or critical with a fix available): GHSA-537c-gmf6-5ccf in [email protected] (indirect, fixed in 48.0.1), GHSA-g6cj-pr64-35w5 in [email protected] (indirect, fixed in 50.0.0), GHSA-jwv3-5hgf-82ww in [email protected] (indirect, fixed in 49.0.0), ...; 7 more of lower severity or without a fixdeps.mcp_sdk_versionmcp 1.30.0, no known advisorydeps.resolvable[email protected] resolved: 97 packagesNo tool definition changes recorded. A server's first observation is its baseline; later probes record what changes.
Checks run on what our credential-free, read-only probes observe; tools are never called and no code audit is performed. How it is computed.
+repository +namespace-matches-repo ~liveness-unmeasured -stale-356d
Derived from observable signals (official registry feed and our own credential-free probes); no code audit performed. How it is computed.
[email protected] PyPI96 dependencies, resolved · MCP SDK mcp 1.30.0 · advisories checked 2026-10-19
| advisory | severity | package | fixed in |
|---|---|---|---|
| GHSA-vv7q-7jx5-f767FastMCP OpenAPI Provider has an SSRF & Path Traversal Vulnerability | critical | [email protected]direct | fixed in 3.2.0 |
| GHSA-537c-gmf6-5ccfVulnerable OpenSSL included in cryptography wheels | high | [email protected]indirect | fixed in 48.0.1 |
| GHSA-g6cj-pr64-35w5cryptography: PKCS#7 EnvelopedData decryption exposes a Bleichenbacher oracle through distinguishable errors and timing | high | [email protected]indirect | fixed in 50.0.0 |
| GHSA-jwv3-5hgf-82wwpython-cryptography: Duplicate self-signed intermediates can cause exponential path-building | high | [email protected]indirect | fixed in 49.0.0 |
| GHSA-r6ph-v2qm-q3c2cryptography Vulnerable to a Subgroup Attack Due to Missing Subgroup Validation for SECT Curves | high | [email protected]indirect | fixed in 46.0.5 |
| GHSA-rww4-4w9c-7733FastMCP: Missing Consent Verification in OAuth Proxy Callback Facilitates Confused Deputy Vulnerabilities | high | [email protected]direct | fixed in 3.2.0 |
| GHSA-5pwr-322w-8jr4pyOpenSSL DTLS cookie callback buffer overflow | high | [email protected]indirect | fixed in 26.0.0 |
| GHSA-m2h6-j472-rp4cpython-cryptography verifier accepts wildcard DNS names allowing escape from permittedSubtrees | moderate | [email protected]indirect | fixed in 49.0.0 |
| GHSA-p423-j2cm-9vmqCryptography vulnerable to buffer overflow if non-contiguous buffers were passed to APIs | moderate | [email protected]indirect | fixed in 46.0.7 |
| GHSA-m8x7-r2rg-vh5gFastMCP has a Command Injection vulnerability - Gemini CLI | moderate | [email protected]direct | fixed in 3.2.0 |
4 more advisories in the dependencies endpoint.
Dependency graphs from deps.dev; advisories from OSV.dev, including the GitHub Advisory Database and the PyPI Advisory Database; all CC BY 4.0. The graph is what a clean install of this version resolves today; nothing was installed or run. How it is checked.
| package | registry | version | runtime | secrets |
|---|---|---|---|---|
snowflake-labs-mcp | pypi | 1.3.5 | – | SNOWFLAKE_PASSWORD, SNOWFLAKE_PRIVATE_KEY |
No tools observed. Local packages are never executed by the registry.
Schemas: list_tools.
{
"name": "io.github.Snowflake-Labs/mcp",
"title": "OSS Snowflake MCP Server",
"$schema": "https://static.modelcontextprotocol.io/schemas/2025-10-17/server.schema.json",
"version": "1.3.5",
"packages": [
{
"version": "1.3.5",
"transport": {
"type": "stdio"
},
"identifier": "snowflake-labs-mcp",
"registryType": "pypi",
"registryBaseUrl": "https://pypi.org",
"packageArguments": [
{
"name": "--service-config-file",
"type": "named",
"isRequired": true,
"description": "Path to service specification file"
},
{
"name": "--account",
"type": "named",
"description": "Account identifier (e.g. xy12345.us-east-1)"
},
{
"name": "--host",
"type": "named",
"description": "Snowflake host URL"
},
{
"name": "--user",
"type": "named",
"description": "Username for authentication"
},
{
"name": "--password",
"type": "named",
"description": "Password or programmatic access token"
},
{
"name": "--role",
"type": "named",
"description": "Role to use for connection"
},
{
"name": "--warehouse",
"type": "named",
"description": "Warehouse to use for queries"
},
{
"name": "--passcode-in-password",
"type": "named",
"description": "Whether passcode is embedded in password"
},
{
"name": "--passcode",
"type": "named",
"description": "MFA passcode for authentication"
},
{
"name": "--private-key",
"type": "named",
"description": "Private key for key pair authentication"
},
{
"name": "--private-key-file",
"type": "named",
"description": "Path to private key file"
},
{
"name": "--private-key-file-pwd",
"type": "named",
"description": "Password for encrypted private key"
},
{
"name": "--authenticator",
"type": "named",
"default": "snowflake",
"description": "Authentication type"
},
{
"name": "--connection-name",
"type": "named",
"description": "Name of connection from connections.toml (or config.toml) file"
},
{
"name": "--transport",
"type": "named",
"choices": [
"stdio",
"http",
"sse",
"streamable-http"
],
"default": "stdio",
"description": "Transport for the MCP server"
},
{
"name": "--server-host",
"type": "named",
"default": "0.0.0.0",
"description": "Host address to bind the server to (default: 0.0.0.0)"
},
{
"name": "--port",
"type": "named",
"default": "9000",
"description": "Port number for the server to listen on (default: 9000)"
},
{
"name": "--endpoint",
"type": "named",
"default": "/mcp",
"description": "Custom endpoint path for HTTP transports"
}
],
"environmentVariables": [
{
"name": "SNOWFLAKE_ACCOUNT",
"format": "string",
"description": "Account identifier (e.g. xy12345.us-east-1)"
},
{
"name": "SNOWFLAKE_HOST",
"format": "string",
"description": "Snowflake host URL"
},
{
"name": "SNOWFLAKE_USER",
"format": "string",
"description": "Username for authentication"
},
{
"name": "SNOWFLAKE_PASSWORD",
"format": "string",
"isSecret": true,
"description": "Password or programmatic access token"
},
{
"name": "SNOWFLAKE_ROLE",
"format": "string",
"description": "Role to use for connection"
},
{
"name": "SNOWFLAKE_WAREHOUSE",
"format": "string",
"description": "Warehouse to use for queries"
},
{
"name": "SNOWFLAKE_PASSCODE",
"format": "string",
"description": "MFA passcode for authentication"
},
{
"name": "SNOWFLAKE_PRIVATE_KEY",
"format": "string",
"isSecret": true,
"description": "Private key for key pair authentication"
},
{
"name": "SNOWFLAKE_PRIVATE_KEY_FILE",
"format": "string",
"description": "Path to private key file"
},
{
"name": "SNOWFLAKE_PRIVATE_KEY_FILE_PWD",
"format": "string",
"description": "Password for encrypted private key"
},
{
"name": "SNOWFLAKE_MCP_HOST",
"format": "string",
"description": "Host address to bind the server to (default: 0.0.0.0)"
},
{
"name": "SNOWFLAKE_MCP_PORT",
"format": "number",
"description": "Port number for the server to listen on (default: 9000)"
},
{
"name": "SNOWFLAKE_MCP_ENDPOINT",
"format": "string",
"description": "Endpoint path for the MCP server (default: /mcp)"
}
]
}
],
"repository": {
"url": "https://github.com/Snowflake-Labs/mcp",
"source": "github"
},
"description": "MCP Server for Snowflake from Snowflake Labs"
}