← Back to search

snowflake-readonly-mcp

GitHub Actions Scanned 13d ago

A Snowflake read-only MCP server with key-pair and browser SSO authentication

npm
C
71.2 / 100

Versions

1.0.1latest
Jun 30, 2026
1.0.0
Jun 4, 2026
0.2.3
May 5, 2026
0.2.2
May 5, 2026
0.2.1
May 5, 2026
+ show 8 moreshow less
0.1.19
Mar 24, 2026
0.1.18
Mar 24, 2026
0.1.17
Mar 10, 2026
0.1.16
Mar 10, 2026
0.1.15
Mar 10, 2026
0.1.13
Mar 10, 2026
0.1.12
Mar 10, 2026
0.1.9
Mar 3, 2026
PermissionsTool SafetyAuthAnnotationsCode QualityStabilitySpecVuln HistoryAuthorTransparencyCommunity

Tools 7

find_tables_tool
annotations: none low

Search for tables by keyword in names and comments across all databases.

search_term str
describe_table_tool
annotations: none low

Get detailed column information for a specific table.

table str schema str database str
refresh_catalog_tool
annotations: none low

Refresh the schema catalog cache.

force bool resume bool
show_tables_tool
annotations: none low

Browse databases, schemas, and tables hierarchically with pattern filtering.

table_pattern string schema_pattern string database_pattern string
execute_query_tool
annotations: none low

Execute a read-only SQL query. Wraps the text payload in a ToolResult with ONLY content set so FastMCP emits a single TextContent block and never duplicates it as structuredContent. This is version-safe across FastMCP 2.x and 3.x (which disagree on how `output_schema` disables structured output), because a ToolResult is passed through untouched by both.

sql str schema string database string
execute_query_to_file_tool
annotations: none low

Execute a query and stream results to a file at a chosen path.

sql str schema string database string file_path str timeout_seconds int
server_status
annotations: none low

Report the startup error and remediation steps.

Permissions 3

filesystem low
Server uses filesystem capabilities via: fs, fs sync ops, glob, open(), os, path, pathlib, shutil, tempfile
shell high
Server uses shell capabilities via: child_process, execSync(), spawn()
env_vars low
Server uses env_vars capabilities via: os.environ, os.getenv(), process.env

Scan Findings 72

medium
Vulnerable dependency: starlette@0.47.1 (GHSA-82w8-qh3p-5jfq) dependency_analyzer · 95%
medium
Vulnerable dependency: starlette@0.47.1 (GHSA-86qp-5c8j-p5mr) dependency_analyzer · 95%
medium
Vulnerable dependency: fastmcp@2.9.2 (PYSEC-2026-1365) dependency_analyzer · 95%
medium
Vulnerable dependency: fastmcp@2.9.2 (PYSEC-2026-2474) dependency_analyzer · 95%
medium
Vulnerable dependency: fastmcp@2.9.2 (PYSEC-2026-2475) dependency_analyzer · 95%
medium
Vulnerable dependency: fastmcp@2.9.2 (PYSEC-2026-2476) dependency_analyzer · 95%
medium
Vulnerable dependency: fastmcp@2.9.2 (PYSEC-2026-338) dependency_analyzer · 95%
medium
Vulnerable dependency: starlette@0.47.1 (GHSA-jp82-jpqv-5vv3) dependency_analyzer · 95%
medium
Vulnerable dependency: starlette@0.47.1 (GHSA-wqp7-x3pw-xc5r) dependency_analyzer · 95%
medium
Vulnerable dependency: starlette@0.47.1 (GHSA-x746-7m8f-x49c) dependency_analyzer · 95%
medium
Vulnerable dependency: starlette@0.47.1 (PYSEC-2026-161) dependency_analyzer · 95%
medium
Vulnerable dependency: starlette@0.47.1 (PYSEC-2026-1941) dependency_analyzer · 95%
medium
Vulnerable dependency: snowflake-connector-python@3.0.0 (GHSA-2vpq-fh52-j3wv) dependency_analyzer · 95%
low
Tool 'refresh_catalog_tool' has no annotations annotation_checker · 100%
low
Tool 'show_tables_tool' has no annotations annotation_checker · 100%
low
Tool 'find_tables_tool' has no annotations annotation_checker · 100%
low
Tool 'describe_table_tool' has no annotations annotation_checker · 100%
low
Tool 'execute_query_tool' has no annotations annotation_checker · 100%
low
Tool 'execute_query_to_file_tool' has no annotations annotation_checker · 100%
low
Tool 'server_status' has no annotations annotation_checker · 100%
medium
OAuth implementation without PKCE auth_checker · 75%
info
Sandbox failed to start for behavioral verification behavioral_verifier · 100%
medium
Vulnerable dependency: fastmcp@2.9.2 (GHSA-5h2m-4q8j-pqpj) dependency_analyzer · 95%
medium
Vulnerable dependency: fastmcp@2.9.2 (GHSA-c2jp-c369-7pvx) dependency_analyzer · 95%
medium
Vulnerable dependency: fastmcp@2.9.2 (GHSA-m8x7-r2rg-vh5g) dependency_analyzer · 95%
medium
Vulnerable dependency: fastmcp@2.9.2 (GHSA-mxxr-jv3v-6pgc) dependency_analyzer · 95%
medium
Vulnerable dependency: fastmcp@2.9.2 (GHSA-rcfx-77hg-w2wv) dependency_analyzer · 95%
medium
Vulnerable dependency: fastmcp@2.9.2 (GHSA-rj5c-58rq-j5g5) dependency_analyzer · 95%
medium
Vulnerable dependency: fastmcp@2.9.2 (GHSA-rww4-4w9c-7733) dependency_analyzer · 95%
medium
Vulnerable dependency: fastmcp@2.9.2 (GHSA-vv7q-7jx5-f767) dependency_analyzer · 95%
medium
Vulnerable dependency: fastmcp@2.9.2 (PYSEC-2026-1364) dependency_analyzer · 95%
medium
Vulnerable dependency: snowflake-connector-python@3.0.0 (GHSA-5vvg-pvhp-hv2m) dependency_analyzer · 95%
medium
Vulnerable dependency: snowflake-connector-python@3.0.0 (GHSA-5w5m-pfw9-c8fp) dependency_analyzer · 95%
medium
Vulnerable dependency: snowflake-connector-python@3.0.0 (GHSA-m4f6-vcj4-w5mx) dependency_analyzer · 95%
medium
Vulnerable dependency: snowflake-connector-python@3.0.0 (GHSA-r2x6-cjg7-8r43) dependency_analyzer · 95%
medium
Vulnerable dependency: snowflake-connector-python@3.0.0 (PYSEC-2023-88) dependency_analyzer · 95%
medium
Vulnerable dependency: snowflake-connector-python@3.0.0 (PYSEC-2024-191) dependency_analyzer · 95%
medium
Vulnerable dependency: snowflake-connector-python@3.0.0 (PYSEC-2025-26) dependency_analyzer · 95%
medium
Vulnerable dependency: snowflake-connector-python@3.0.0 (PYSEC-2025-27) dependency_analyzer · 95%
medium
Vulnerable dependency: snowflake-connector-python@3.0.0 (PYSEC-2025-28) dependency_analyzer · 95%
medium
Vulnerable dependency: pydantic@2.0.0 (GHSA-mr82-8j83-vxmv) dependency_analyzer · 95%
medium
Vulnerable dependency: pydantic@2.0.0 (PYSEC-2026-1812) dependency_analyzer · 95%
medium
Vulnerable dependency: sqlparse@0.4.0 (GHSA-27jp-wm6q-gp25) dependency_analyzer · 95%
medium
Vulnerable dependency: sqlparse@0.4.0 (GHSA-2m57-hf25-phgg) dependency_analyzer · 95%
medium
Vulnerable dependency: sqlparse@0.4.0 (GHSA-p5w8-wqhj-9hhf) dependency_analyzer · 95%
medium
Vulnerable dependency: sqlparse@0.4.0 (GHSA-rrm6-wvj7-cwh2) dependency_analyzer · 95%
medium
Vulnerable dependency: sqlparse@0.4.0 (PYSEC-2021-333) dependency_analyzer · 95%
medium
Vulnerable dependency: sqlparse@0.4.0 (PYSEC-2023-87) dependency_analyzer · 95%
medium
Vulnerable dependency: sqlparse@0.4.0 (PYSEC-2026-1940) dependency_analyzer · 95%
medium
Vulnerable dependency: starlette@0.47.1 (GHSA-2c2j-9gv5-cj73) dependency_analyzer · 95%
medium
Vulnerable dependency: starlette@0.47.1 (GHSA-7f5h-v6xp-fcq8) dependency_analyzer · 95%
medium
Vulnerable dependency: starlette@0.47.1 (PYSEC-2026-1942) dependency_analyzer · 95%
medium
Vulnerable dependency: starlette@0.47.1 (PYSEC-2026-2280) dependency_analyzer · 95%
medium
Vulnerable dependency: starlette@0.47.1 (PYSEC-2026-2281) dependency_analyzer · 95%
medium
Vulnerable dependency: starlette@0.47.1 (PYSEC-2026-248) dependency_analyzer · 95%
medium
Vulnerable dependency: starlette@0.47.1 (PYSEC-2026-249) dependency_analyzer · 95%
info
package.json metadata manifest_parser · 100%
info
pyproject.toml metadata manifest_parser · 100%
info
Tool: refresh_catalog_tool manifest_parser · 90%
info
Tool: show_tables_tool manifest_parser · 90%
info
Tool: find_tables_tool manifest_parser · 90%
info
Tool: describe_table_tool manifest_parser · 90%
info
Tool: execute_query_tool manifest_parser · 90%
info
Tool: execute_query_to_file_tool manifest_parser · 90%
info
Tool: server_status manifest_parser · 90%
info
Required env vars (13) manifest_parser · 80%
info
Sandbox failed to start for output poisoning scan output_poisoning · 100%
low
Permission: filesystem access detected permission_analyzer · 90%
high
Permission: shell access detected permission_analyzer · 95%
low
Permission: env_vars access detected permission_analyzer · 90%
info
SBOM generated: 8 components sbom_generator · 100%
medium
No build provenance detected (SLSA L0) slsa_assessor · 90%