Snowflake MCP server and Dome

1. 01

   Add the Snowflake MCP server

   Create a Snowflake OAuth security integration with https://api.domesystems.ai/oauth/callback as its redirect URI. Dome holds each user's tokens and injects them on calls made for them.

   $ dome tools add --name snowflake \
     --url https://myorg-myaccount.snowflakecomputing.com/api/v2/databases/SUPPORT_DB/schemas/MCP/mcp-servers/support_mcp \
     --auth-method oauth --credential-type per-user \
     --oauth-authorize-url https://myorg-myaccount.snowflakecomputing.com/oauth/authorize \
     --oauth-token-url https://myorg-myaccount.snowflakecomputing.com/oauth/token-request \
     --oauth-client-id "$SNOWFLAKE_CLIENT_ID" \
     --oauth-client-secret "$SNOWFLAKE_CLIENT_SECRET" \
     --gateway data-gateway

2. 02

   Sync the catalog

   Run it once your own Snowflake consent is attached. Until then the sync fails, and agents get “tool not available in this gateway”.

   $ dome tools catalog sync snowflake

3. 03

   Apply the rules

   Scope them to one agent while you try them. Simulate before you deploy.

   $ dome rules apply snowflake-columns.cedar \
     --agent churn-researcher --name snowflake-columns

Commands and rules tested against a Dome workspace on October 1, 2026. For anything about Snowflake itself, see Snowflake's documentation.

permit (principal, action == Dome::Action::"mcp:call", resource is Dome::MCPTool)
when { resource.connection_name == "snowflake" };
 
forbid (principal, action == Dome::Action::"mcp:call", resource is Dome::MCPTool)
when {
  resource.connection_name == "snowflake" &&
  resource.tool_name == "ticket-search" &&
  resource has arguments &&
  (!(resource.arguments has columns) ||
   resource.arguments.columns.contains("customer_email"))
};
 
forbid (principal, action == Dome::Action::"mcp:call", resource is Dome::MCPTool)
when {
  resource.connection_name == "snowflake" &&
  resource.tool_name == "ticket-search" &&
  resource has arguments &&
  resource.arguments has limit &&
  resource.arguments.limit > 50
};
 
forbid (principal, action == Dome::Action::"mcp:call", resource is Dome::MCPTool)
when {
  resource.connection_name == "snowflake" &&
  resource.tool_name == "sql_exec_tool"
};