External OAuth and configurable scopes for MCP servers (General availability)

GAJul 22, 2026VerifiedAdded Sep 22, 2026

Two new hierarchical parameters let you bind MCP servers to your organization’s existing identity provider (IdP) and control which OAuth scopes MCP clients discover. This enables MCP clients such as Claude, Cursor, and ChatGPT to authenticate against your corporate IdP instead of Snowflake OAuth.

LLMs MCP Security Coding agents

Read Snowflake's release notes

https://docs.snowflake.com/en/release-notes/2026/other/2026-07-22-mcp-external-oauth

Summaries of vendors' own notes. Product names and logos belong to their owners; logos via logo.dev.

More Snowflake releases

SnowflakeJul 22, 2026

Refresh multiple dynamic tables in one ALTER statement

You can now refresh multiple dynamic tables in a single ALTER DYNAMIC TABLE ... REFRESH statement by supplying a comma-separated list of table names. Snowflake merges the upstream dependencies of every listed dynamic table into one pipeline and refreshes all of them at a single data timestamp. Shared upstreams refresh exactly once.

UpdateStreamingData integrationSource

SnowflakeJul 23, 2026

SQL environment variable and private Git package support for dbt Projects on Snowflake

Environment variable support for dbt Projects on Snowflake is now generally available. Manage per-developer schemas, dynamic runtime values, secrets, and multiple environments in a single, Git-versioned env.yml file that Snowflake resolves before each run.

GASQLSecuritySource

SnowflakeJul 23, 2026

Snowflake Data Clean Rooms updates

Clean room UI users: New updates are applied to the UI automatically when a user starts a new session after a new update is deployed. To ensure new updates are applied, make sure to log out and log back into the UI. Clean room API users: API updates are applied either manually or automatically to an account. Learn how to manage updates for Data Clean Rooms.

UpdateSQLObservabilityDeveloper toolsSource

SnowflakeJul 23, 2026

SERVICE_AGENT user type (General availability)

With this release, the SERVICE_AGENT user type is generally available. Use this user type for automated AI agents that interact with Snowflake using their own identity and privileges.

GAAI agentsSQLSecuritySource

SnowflakeJul 21, 2026

Improved Google Cloud Storage query performance for credential-vended Iceberg tables

You can now set the VENDED_CREDENTIAL_STORAGE_REGION parameter on Google Cloud Storage-backed externally managed Iceberg tables that use catalog-vended credentials. Setting this parameter to your Google Cloud Storage bucket’s region can significantly improve query latency.

UpdateSQLGovernanceApache IcebergSource

SnowflakeJul 20, 2026

OIDC federated authentication (Public Preview)

OpenID Connect (OIDC) security integrations for federated single sign-on (SSO) are available in Public Preview. Multiple OIDC integrations, or OIDC alongside an existing SAML2 integration, require identifier-first login . Without identifier-first login, only one SSO integration (SAML2 or OIDC) can be ENABLED=TRUE at a time.

PreviewSecurityDeveloper toolsSource

SnowflakeJul 20, 2026

Built-in network rules for additional Microsoft applications

Snowflake now maintains built-in network rules for five additional Microsoft partner applications: Built-in network rules define the set of allowed IP addresses that a frequently used, third-party partner application uses to connect with Snowflake.

UpdateGovernanceSource

SnowflakeJul 20, 2026

DML into frozen regions of dynamic tables (General availability)

You can now use DML statements (INSERT, UPDATE, MERGE, DELETE) to modify rows directly in the frozen region of a dynamic table. This enables use cases such as GDPR-required row deletions or correcting specific records without triggering a full refresh of the active region. For more information, see DML into a frozen region .

GARegionsSource

Also shipped on Jul 22, 2026

Databricks Databricks Data Intelligence PlatformJul 22, 2026

Variant and Variant shredding are now generally available

Variant is now generally available . Variant is a flexible data type for semi-structured data that delivers structured-like query performance through Variant shredding, which is also generally available.

GASQLStreamingGovernanceSource

Databricks Databricks Data Intelligence PlatformJul 22, 2026

Transactions are now generally available

Transactions that write to Unity Catalog managed Delta tables are now generally available. Group multiple SQL statements across one or more tables into a single atomic transaction using BEGIN ATOMIC ... END; or BEGIN TRANSACTION; ... COMMIT; syntax. All changes succeed together or roll back together, ensuring data consistency across your operations.

GASQLGovernanceApache IcebergSource

Databricks Databricks Data Intelligence PlatformJul 22, 2026

Email notifications for expiring service principal tokens are now generally available

Databricks now automatically sends an email notification when a service principal token is set to expire within seven days. Because service principals don't have their own mailboxes, Databricks sends these notifications to workspace admins.

GASource

Databricks Unity CatalogJul 22, 2026

Role-based access control (RBAC) is in Public Preview

Role-based access control (RBAC) is now in Public Preview. RBAC lets users assume a role in Databricks using only that role's permissions for the duration of the session instead of their own accumulated permissions. This enables exclusive access.

PreviewSecuritySource

Databricks Unity CatalogJul 22, 2026

Governance Hub is in Beta

Governance Hub is in Beta . Governance Hub is a centralized, account-level UI in the account console for monitoring governance across your Databricks account. It provides a unified view of data health and coverage, AI usage and spend, and cost drivers, with prioritized insights and recommendations. All views respect existing permissions.

BetaGovernanceSecurityPricingSource

Databricks Agent Bricks and Mosaic AIJul 22, 2026

Priority pay-per-token for Foundation Model APIs

Priority pay-per-token, also referred to as priority mode, for Foundation Model APIs pay-per-token is generally available for partner models and in preview for open source models. Priority mode is for latency-sensitive, real-time applications that need more consistent availability under load.

GAStreamingPerformanceSource