{ "schema": "varexis-public-evidence-record/0.3", "generated_at_utc": "2026-10-13T23:52:59.204Z", "record_id": "VXI-EXT-TOOL-TRUST-SNOWFLAKE-01-v1", "record_kind": "external_reference", "title": "Snowflake MCP: Discovery permission and downstream role grants", "system": "Snowflake-managed MCP", "evidence_family": "agent_tool_trust_review", "index_status": "PUBLIC_SAFE_SOURCE_REVIEW", "evidence_state": "PRIMARY_DOCUMENTATION_REVIEW_ONLY", "canonical_question": "Does permission to connect to Snowflake MCP also authorize every configured data tool?", "near_questions": [ "Does Snowflake MCP USAGE grant access to all tables?", "Which role will a Snowflake MCP session use?", "Can Snowflake MCP expose stored procedures?", "Is Snowflake-managed MCP the same as the Labs server?", "Does Snowflake MCP support dynamic client registration?", "What privileges does a Cortex Search tool need?", "What evidence establishes a custom Snowflake tool is read-only?", "Can a default warehouse problem break Snowflake MCP initialization?", "Where can Snowflake MCP query results be retained?", "What should I check before exposing a Cortex Agent through MCP?", "Does listing a Snowflake tool prove I can call it?", "What should a Snowflake connector review snapshot preserve?" ], "supported_claims": [ { "claim": "Snowflake distinguishes access to the MCP server from privileges on its underlying tools and data. OAuth configuration and the effective role matter. Search, analyst, agent and custom-function tools can require different grants; successful tool discovery is not evidence that every invocation is authorized or read-only.", "reliance": "DOCUMENTED_CAPABILITY_ONLY" } ], "not_demonstrated_claims": [ "Verified buyer configuration or effective access rights", "Independent execution, completeness or security testing", "Vendor certification, legal compliance or guaranteed suitability" ], "public_summary": "Snowflake distinguishes access to the MCP server from privileges on its underlying tools and data. OAuth configuration and the effective role matter. Search, analyst, agent and custom-function tools can require different grants; successful tool discovery is not evidence that every invocation is authorized or read-only.", "related_record_ids": [ "VXI-EXT-TOOL-TRUST-MONGODB-01-v1", "VXI-EXT-TOOL-TRUST-QDRANT-01-v1", "VXI-EXT-TOOL-TRUST-PINECONE-01-v1", "VXI-EXT-TOOL-TRUST-CLICKHOUSE-01-v1", "VXI-EXT-TOOL-TRUST-REDIS-01-v1" ], "source_review": { "source_type": "official_external_documentation", "source_title": "Snowflake managed MCP roles and tools", "source_url": "https://docs.snowflake.com/en/user-guide/snowflake-cortex/cortex-agents-mcp", "checked_on": "2026-10-14", "candidate_record_id": "VXI-EXT-TOOL-TRUST-SNOWFLAKE-01-v1", "candidate_record_sha256": "a768058aa00f42398042f7a1699839e0cf84c8afbd286a33856e307f117cfd3c", "method": "Primary documentation reviewed for the published bounded statement.", "deployment_tested_by_varexis": false, "revalidation": "The delivered snapshot preserves the review date shown. Recheck current primary documentation and deployment context before relying on present applicability; payment does not trigger fresh research." }, "answer_policy": { "classification": "DOCUMENTED_WITH_DEPLOYMENT_BOUNDARY", "bounded_answer": "Snowflake distinguishes access to the MCP server from privileges on its underlying tools and data. OAuth configuration and the effective role matter. Search, analyst, agent and custom-function tools can require different grants; successful tool discovery is not evidence that every invocation is authorized or read-only.", "required_buyer_context": "Snowflake account, MCP server object, OAuth integration, role, warehouse and configured underlying tools.", "missing_evidence": "A broader claim needs evidence matching the intended use. Payment does not upgrade the evidence state." }, "private_boundary": "Raw logs, thresholds, private paths, source code, protected mechanisms and reconstruction-level details are excluded from public and paid delivery.", "trust_profile": { "schema": "varexis-agent-tool-trust/1", "identity": { "tool": "Snowflake-managed MCP", "variant": "Snowflake-managed MCP server object; not the Snowflake Labs local server" }, "review_status": "documentation_review_only", "checked_on": "2026-10-14", "version_scope": "Dated rolling documentation snapshot; no installed or hosted runtime version independently verified.", "plan_scope": "Buyer plan, entitlement and effective configuration are not verified.", "findings": [ { "field": "operator", "label": "Publisher and operator", "status": "documented", "statement": "Snowflake provides the managed MCP server within the customer account.", "source_ids": [ "snow-main" ] }, { "field": "purpose", "label": "Purpose", "status": "documented", "statement": "A configured server exposes Snowflake search, analyst, agent and custom tools.", "source_ids": [ "snow-main" ] }, { "field": "reads", "label": "Read capability", "status": "documented", "statement": "Data retrieval depends on the configured tools and their underlying resource privileges.", "source_ids": [ "snow-main" ] }, { "field": "writes", "label": "Write capability", "status": "documented", "statement": "Custom functions and procedures can be exposed; their effects require review of the configured implementation.", "source_ids": [ "snow-main" ] }, { "field": "auth", "label": "Authentication", "status": "documented", "statement": "The managed server supports OAuth; dynamic client registration is not supported in the reviewed documentation.", "source_ids": [ "snow-main" ] }, { "field": "permissions", "label": "Permission surface", "status": "documented", "statement": "MCP server USAGE permits connection and discovery; underlying tools require their own applicable privileges.", "source_ids": [ "snow-main" ] }, { "field": "egress", "label": "Data leaving the environment", "status": "review_inference", "statement": "Tool outputs reach the external MCP client; access through a private account does not establish the model recipient policy.", "source_ids": [ "snow-main" ] }, { "field": "failures", "label": "Failure modes to consider", "status": "review_inference", "statement": "A broad role, unexpected custom procedure or incorrect default warehouse can change access or prevent execution.", "source_ids": [ "snow-main" ] }, { "field": "unknown", "label": "Unknowns and applicability", "status": "unknown", "statement": "Effective role grants, procedure behavior, data policies and client storage are not verified.", "source_ids": [] }, { "field": "gate", "label": "Suggested refusal or clarification condition", "status": "varexis_review_policy", "statement": "Inspect the named role and configured tools before treating the endpoint as an approved data-only interface.", "source_ids": [] } ], "evidence_sources": [ { "source_id": "snow-main", "url": "https://docs.snowflake.com/en/user-guide/snowflake-cortex/cortex-agents-mcp", "final_url": "https://docs.snowflake.com/en/user-guide/snowflake-cortex/cortex-agents-mcp", "title": "Snowflake managed MCP roles and tools", "checked_on": "2026-10-14", "sha256": "c998958a0ba971f707e4f7ad8aa21dc4dd50d43beb4492e15fb43fc5d80c20dc", "bytes": 412013 } ], "observed_tool_execution": false, "policy_basis": "Suggested VAREXIS review gates; apply the buyer's authorized task and policy. These conditions do not execute or enforce controls.", "commercial_reliance_boundary": "A source-linked review aid, not a vendor certification, security clearance or deployment assessment. Unknown does not mean false or unsafe.", "paid_value": { "decision_context": "Retain the distinction between connector discovery and actual data or procedure authority.", "free": "Complete review, practical questions, sources and limitations; may be saved locally.", "single_request": "Existing server-saved version-bound route snapshot for later authenticated retrieval.", "evidence_receipt": "The same snapshot plus the existing unsigned delivery receipt.", "excluded": [ "Fresh vendor research", "Continuous monitoring or change alerts", "Testing the buyer configuration", "Private evidence or vendor certification" ], "integrity": "Hashes identify content versions; they do not prove truth or provide a signature." }, "revalidation": { "trigger": "Recheck when permissions, deployment, authentication, source guidance or intended use changes; a purchase does not trigger revalidation.", "specific_watch": "Recheck roles, OAuth binding, warehouses and custom tool definitions." }, "change_history": [ { "version": 1, "date": "2026-10-14", "change": "Initial documentation review; no earlier vendor assessment claimed." } ] }, "paid_access_note": "The full published answer and boundaries are free. Paid access saves the selected route and source versions, with an unsigned receipt when purchased. Preview coverage before paying. Fresh research, bespoke assessment and protected evidence are excluded.", "service_route": { "request_guide": "/varexis-index/request.html", "request_workflow": "/varexis-index/request-workflow.json", "service_id": "single_request", "service_routes_url": "/varexis-index/service-routes.json", "payment_required": true, "availability_endpoint": "/api/index/capabilities", "operational_status": "AUTOMATIC_SERVICE_CAPABILITIES_GATED", "checkout_url": "/index-access" }, "authority_boundary": "VAREXIS-INDEX informs evidence reliance. It does not provide advice, certification, deployment authority, security assurance, production approval, or guarantee.", "human_page": "/varexis-index/catalog.html#snowflake-mcp-role-tool-authority-trust", "machine_readable_record": "/varexis-index/records/snowflake-mcp-role-tool-authority-trust.json" }