Skip to main content
Connections are added inside an Access bundle. At claude.ai/admin-settings/claude-tag, open Access bundles in the left navigation, click into a bundle (or Create one), and go to its Credentials tab.
Connecting Snowflake lets Claude run queries against your warehouse from any channel under the bundle’s scope. You add it as a connection inside an Access bundle; the credential belongs to the agent, not to any person. This is an HTTP API connection, not a personal claude.ai connector.

​
Create the credential in Snowflake

Create a dedicated Snowflake user for the agent with a read-only role scoped to the databases and schemas Claude should query. In Snowsight (Snowflake’s web interface), under Governance & security and then Users & roles, generate a programmatic access token for that user. Tokens expire after 15 days by default, so plan to rotate the credential. Snowflake’s guide for programmatic access tokens is at docs.snowflake.com. The connection authenticates with this token; key-pair authentication is not currently supported.

​
Add the connection to a bundle

In the bundle, click Connect next to Snowflake. The preset prefills Allowed websites with an example host that cannot resolve. Replace it with your account’s host before saving, or every request fails. To change the host later, open the ⋮ menu on this connection in the bundle’s Credentials tab and choose Edit. The Agent Proxy injects the credential at the network boundary; the model and the sandbox are not given the key. See how Agent Proxy works.

​
Verify the connection

In a channel under the bundle’s scope, in a new thread:
Snowflake appears in the list once the connection is live. New threads pick up the connection on their own; in an existing thread, ask Claude to use the service by name.