How to Give Claude Access to Snowflake Without Exposing PII

You want Claude — or Cursor, or ChatGPT, or any MCP-aware agent — to answer questions about your Snowflake data. You also do not want the agent to read social security numbers, free-text customer notes, or anything subject to GDPR / HIPAA / SOC 2. The default MCP setup hands the agent everything its connection role can see. That is the problem. This post walks through five layers of defense, ordered from cheapest to most thorough. Each is independent — pick the ones that match your risk toleran...