Skip to main content
Let your agents explore and query your Snowflake data warehouse — list databases, schemas and tables, describe columns, run read-only SELECT queries and, when allowed, execute SQL statements through the SQL API.

Connection

  • Authentication: API key (Programmatic access token).
  • Required settings:
    • Account identifier — Account identifier in the organization-account format, lowercase (Admin → Accounts, or account selector → View account details). The legacy locator.region format (ab12345.eu-west-1) is not accepted.
In Snowsight: user menu (bottom-left) → Settings → Authentication → Programmatic access tokens → Generate new token (an admin can also do it for a service user: Governance & security → Users & roles → the user → Programmatic access tokens). Name it, restrict it to a role (a read-only role is recommended — it bounds everything the agents can do) and pick an expiration, then copy the token: it is shown only once. By default Snowflake only accepts a token from a user covered by a network policy: your admin may need to add one (or relax it through an authentication policy). Account identifier: account selector → View account details → the part of the account URL before .snowflakecomputing.com, in lowercase (e.g. myorg-myaccount).See Snowflake’s documentation.

Read actions (6)

Write actions (2)

Permissions

Every action above must be explicitly granted to an agent before it can be used. See Permissions for the grant model and Security for how credentials are protected.