How to Connect Snowflake to Meta Muse — via MCP

💡 No install? Use cloud.anythingmcp.com directly. Sign in, click Connectors → Snowflake, paste your credentials, mint an MCP API key — done. No Docker, no git clone, no local server.

Snowflake + Meta Muse

Ask your Snowflake data questions from Claude, ChatGPT or Copilot through Snowflake's official managed MCP server: Cortex Agents, Cortex Analyst semantic views, Cortex Search and your own functions, governed by your Snowflake roles.

Prerequisites

See the full setup instructions baked into the connector (visible in the in-app store when you select the connector). The required environment variables for this connector are:

SNOWFLAKE_ACCOUNT_HOST, SNOWFLAKE_DATABASE, SNOWFLAKE_SCHEMA, SNOWFLAKE_MCP_SERVER, SNOWFLAKE_PAT

Step 1 — Get credentials

AnythingMCP bridges the Snowflake-managed MCP server, Snowflake's official MCP server that runs inside your own Snowflake account. You create an MCP server object in a database and schema, and it serves the tools you define in it: Cortex Agents, Cortex Analyst semantic views, Cortex Search services, SQL execution, and your own UDFs and stored procedures. AnythingMCP connects with a programmatic access token (PAT).

The tools are the ones you define. Your server object decides which tools exist (at most 50 per server) and what they are called. At install AnythingMCP asks the server for its list, so you get exactly your tools. The five tools in the table below are the examples from Snowflake's documentation, one per tool type; they are only used if the server cannot be reached at install. After you change the server object (CREATE OR REPLACE MCP SERVER with a new specification), open the connector and click Discover tools.

Setup takes about 15 minutes and needs a Snowflake admin (ACCOUNTADMIN or a delegated admin).

1. In a worksheet, create the MCP server object in the database and schema that should hold it. Snowflake recommends exposing a Cortex Agent for governed business questions:

   CREATE OR REPLACE MCP SERVER analytics_db.mcp.business_mcp
     FROM SPECIFICATION $$
     tools:
       - name: "business_data_agent"
         type: "CORTEX_AGENT_RUN"
         identifier: "analytics_db.mcp.sales_agent"
         title: "Governed business data agent"
         description: "Use this agent for governed business data questions."
     $$;
   

   The other tool types are CORTEX_ANALYST_MESSAGE (a semantic view), CORTEX_SEARCH_SERVICE_QUERY (a Cortex Search service), SYSTEM_EXECUTE_SQL (direct SQL, read-only by default) and GENERIC (a UDF or stored procedure, with an input_schema).
2. Create a least-privileged role and grant it only what the tools need:

   GRANT USAGE ON MCP SERVER analytics_db.mcp.business_mcp TO ROLE mcp_access;
   

   Add USAGE on the database, the schema and the warehouse, USAGE on each agent, Cortex Search service, function or procedure, SELECT on each semantic view, and for agents the database role SNOWFLAKE.CORTEX_AGENT_USER. Access to the server does not give access to its tools: each tool needs its own grant. Grant the role to the user AnythingMCP connects as, ideally a service user (TYPE = SERVICE), and give that user a default warehouse.
3. Create the token, restricted to that role and with an expiry, and copy token_secret (Snowflake shows it once):

   ALTER USER mcp_service ADD PROGRAMMATIC ACCESS TOKEN amcp_token
     ROLE_RESTRICTION = 'MCP_ACCESS' DAYS_TO_EXPIRY = 90;
   

   In Snowsight the same is under Governance & security > Users & roles > the user > Programmatic access tokens > Generate new token, with One specific role.
4. Allow the network. By default a PAT only works for a user under a network policy, and that policy must allow the address AnythingMCP calls from. On AnythingMCP Cloud, ask support for the current egress IP:

   CREATE NETWORK RULE amcp_ingress MODE = INGRESS TYPE = IPV4 VALUE_LIST = ('<egress IP>');
   ALTER NETWORK POLICY <your_policy> ADD ALLOWED_NETWORK_RULE_LIST = ('amcp_ingress');
   

5. In AnythingMCP, install Snowflake from the catalog and fill in:
   • SNOWFLAKE_ACCOUNT_HOST: the account host without https://, for example myorg-myaccount.snowflakecomputing.com. Use hyphens, not underscores: a host such as myorg-my_account fails to connect, write myorg-my-account instead.
   • SNOWFLAKE_DATABASE, SNOWFLAKE_SCHEMA and SNOWFLAKE_MCP_SERVER: where the server object lives and its name (SHOW MCP SERVERS IN ACCOUNT lists them).
   • SNOWFLAKE_PAT: the token from step 3. It is stored encrypted and sent as a Bearer token with X-Snowflake-Authorization-Token-Type: PROGRAMMATIC_ACCESS_TOKEN.

Safety: the role is the real boundary, the AI sees whatever that role sees. Prefer a Cortex Agent or Cortex Analyst over raw SQL; Snowflake advises putting a SYSTEM_EXECUTE_SQL tool on a separate server with its own least-privileged role. The SQL execution example (snowflake_sql_exec_tool) installs switched off; if your server has such a tool, keep read_only: true in its configuration before you switch it on. Tools run on your warehouse and Cortex calls consume Snowflake credits. You can revoke the token at any time with ALTER USER mcp_service REMOVE PROGRAMMATIC ACCESS TOKEN amcp_token;

First calls: ask an agent or Cortex Analyst tool a plain question in message (Cortex Analyst also returns the SQL it generated); give a Cortex Search tool a query and a limit. Responses of SQL execution and custom tools are cut at 250 KB, so select fewer columns or rows; agent responses can be large because they include reasoning steps and citations.

If something fails: a 401 means the token is wrong or expired, or the network policy blocks the call; tools missing from the list mean the role lacks USAGE on the MCP server; a listed tool that fails means the role lacks the grant on the underlying object, or the user has no default warehouse.

Step 2 — Install the adapter

curl -fsSL https://raw.githubusercontent.com/HelpCode-ai/anythingmcp/main/docker-compose.quickstart.yml -o docker-compose.yml
printf 'JWT_SECRET=%s\nENCRYPTION_KEY=%s\n' "$(openssl rand -hex 32)" "$(openssl rand -hex 32)" > .env
docker compose up -d

Step 3 — Add the connector in Muse

Your server URL: in AnythingMCP, open MCP Servers → the server this connector is on, and copy its URL (https://cloud.anythingmcp.com/mcp/…). Use it wherever this guide shows YOUR_SERVER_ID.

Muse adds remote MCP servers as custom connectors and signs in to them with OAuth.

1. In Muse, open Settings → Connectors and choose Add custom connector.
2. Paste the MCP server URL https://cloud.anythingmcp.com/mcp/YOUR_SERVER_ID.
3. Muse opens the AnythingMCP sign-in page: sign in and approve access.
4. In a chat, ask Muse for something that needs the Snowflake tools.

You can also set it up from a chat, on the web, in the iOS and Android apps or in WhatsApp. Send Muse this message:

Create a Custom Connector for a new remote MCP server, then connect to it:
Name: AnythingMCP
Transport: remote streamable HTTP
URL: https://cloud.anythingmcp.com/mcp/YOUR_SERVER_ID
Auth: OAuth

Self-hosting? Use your instance's public HTTPS address instead of https://cloud.anythingmcp.com. Muse connects from Meta's cloud, so localhost does not work.

Available tools

FAQ

Where is Muse available? Meta currently offers Muse in the US and Canada, on the web, in the iOS and Android apps and in WhatsApp.

Does Meta review this connector? No. Meta doesn't review custom connectors. Muse sees only the tools you switched on for this MCP server in AnythingMCP, and you can disconnect it anytime under Settings → Connectors.

Next steps

• Connector landing page
• Connect to Claude
• Connect to ChatGPT