Connection
- Authentication: API key (Programmatic access token).
- Required settings:
- Account identifier — Account identifier in the organization-account format, lowercase (Admin → Accounts, or account selector → View account details). The legacy locator.region format (ab12345.eu-west-1) is not accepted.
In Snowsight: user menu (bottom-left) → Settings → Authentication → Programmatic access tokens → Generate new token (an admin can also do it for a service user: Governance & security → Users & roles → the user → Programmatic access tokens). Name it, restrict it to a role (a read-only role is recommended — it bounds everything the agents can do) and pick an expiration, then copy the token: it is shown only once. By default Snowflake only accepts a token from a user covered by a network policy: your admin may need to add one (or relax it through an authentication policy). Account identifier: account selector → View account details → the part of the account URL before .snowflakecomputing.com, in lowercase (e.g. myorg-myaccount).See Snowflake’s documentation.