33 Connect Snowflake
Connect Snowflake to Claude Tag so it can run read-only queries on your warehouse. Covers the dedicated user to create, the access token field, and the host to allow.
export const BetaNote = () => Claude Tag is in public beta. Features and behavior described here may change before general availability.;
Connections are added inside an Access bundle. At claude.ai/admin-settings/claude-tag, open Access bundles in the left navigation, click into a bundle (or Create one), and go to its Credentials tab.
Connecting Snowflake lets Claude run queries against your warehouse from any channel under the bundle’s scope. You add it as a connection inside an Access bundle; the credential belongs to the agent, not to any person.
This is an HTTP API connection, not a personal claude.ai connector.
33.1 Create the credential in Snowflake
Create a dedicated Snowflake user for the agent with a read-only role scoped to the databases and schemas Claude should query. In Snowsight (Snowflake’s web interface), under Governance & security and then Users & roles, generate a programmatic access token for that user. Tokens expire after 15 days by default, so plan to rotate the credential.
Snowflake’s guide for programmatic access tokens is at docs.snowflake.com. The connection authenticates with this token; key-pair authentication is not currently supported.
33.2 Add the connection to a bundle
In the bundle, click Connect next to Snowflake.
| Field | Value |
|---|---|
| Claude’s programmatic access token | The programmatic access token from Snowflake |
| Allowed websites | Your account’s host, for example yourorg-youraccount.snowflakecomputing.com |
The preset prefills Allowed websites with an example host that cannot resolve. Replace it with your account’s host before saving, or every request fails. To change the host later, open the ⋮ menu on this connection in the bundle’s Credentials tab and choose Edit.
The Agent Proxy injects the credential at the network boundary; the model and the sandbox are not given the key. See how Agent Proxy works.
33.3 Verify the connection
In a channel under the bundle’s scope, in a new thread:
text wrap theme={null} @Claude what can you access from this channel?
Snowflake appears in the list once the connection is live. New threads pick up the connection on their own; in an existing thread, ask Claude to use the service by name.