Cortex AI Gateway: Snowflake's agent governance layer
Governing 100+ MCP servers, Snowflake's Cortex AI Gateway centralizes AI agent access and cost, but most features are still in private preview.
RBAC, masking policies, row access policies, and tags: locking Snowflake down without grinding the data team to a halt.
Governing 100+ MCP servers, Snowflake's Cortex AI Gateway centralizes AI agent access and cost, but most features are still in private preview.
Snowflake tag-based data protection policies entered public preview on July 21, 2026, letting you attach row access, aggregation, projection, and join policies to tags. Objects with the tag auto-inherit the policy, cutting policy attachments from thousands to one per group.
With GA workload identity federation, Snowflake acts as an OIDC provider so workloads use short-lived tokens instead of static credentials, at no extra cost.
Granting privileges to roles instead of users collapses thousands of Snowflake grants to a few hundred, and one masking policy protects many columns.