# DBHub vs Snowflake-managed MCP server (slim)

> DBHub scores 70.4 (BB) to Snowflake-managed's 52.7 (D) for sql databases. Prices, MCP, x402, uptime and agent notes side by side.

- Full: https://www.anchorterminal.com/compare/dbhub-vs-snowflake-managed.md (~4,650 tokens) · this version ~2,830 tokens · JSON https://www.anchorterminal.com/compare/dbhub-vs-snowflake-managed.json · canonical https://www.anchorterminal.com/compare/dbhub-vs-snowflake-managed
- Index: https://www.anchorterminal.com/llms.txt · API: https://www.anchorterminal.com/api/v1/index.json · MCP: https://www.anchorterminal.com/mcp · Updated: 2026-11-07
- Licence: CC BY 4.0, credit Anchor Terminal and link this page (https://www.anchorterminal.com/terms/#data)

DBHub scores 70.4 (BB) on agent readiness against Snowflake-managed MCP server's 52.7 (D), and leads in 5 of 7 scored categories. Snowflake-managed MCP server leads on security & auth and transparency & trust. Both do sql databases.

- DBHub: BB 70.4, rank #200 of 1486 · https://www.anchorterminal.com/tools/dbhub.min.md
- Snowflake-managed MCP server: D 52.7, rank #972 of 1486 · https://www.anchorterminal.com/tools/snowflake-managed.min.md
- DBHub, good for Coding agents exploring and querying a local or staging database across several engines. postgres-mcp-pro, mongodb-mcp, clickhouse-mcp-server and supabase-mcp are the nearest listings; MCP Toolbox for Databases covers more sources with more tools. Ahead on Reliability, 80 against 50; Schema & documentation, 73 against 61; Agent ergonomics, 85 against 46; Payments & pricing, 60 against 35; Maintenance & community, 95 against 35. Also Agent-ready, a grade of BB or better; No key needed to call it; Runs on your own machine; Open source; No incidents deducted, where Snowflake-managed MCP server loses 3 points for them.
- Snowflake-managed MCP server, good for A company that already keeps its data in Snowflake and wants outside MCP clients to query it under existing roles, best through one Cortex Agent tool. Ahead on Security & auth, 77 against 43; Transparency & trust, 84 against 61.

| Category | DBHub | Snowflake-managed MCP server |
| --- | --- | --- |
| Reliability (16%) | 80 | 50 |
| Performance (10%) | pending | pending |
| Schema & documentation (13%) | 73 | 61 |
| Agent ergonomics (13%) | 85 | 46 |
| Security & auth (14%) | 43 | 77 |
| Payments & pricing (10%) | 60 | 35 |
| Task success (10%) | pending | pending |
| Maintenance & community (7%) | 95 | 35 |
| Transparency & trust (7%) | 61 | 84 |

| Fact (where they differ) | DBHub | Snowflake-managed MCP server |
| --- | --- | --- |
| Vendor | Bytebase | Snowflake Inc. |
| Transports | stdio, Streamable HTTP | Streamable HTTP |
| Auth | None | OAuth or key |
| Pricing | Free | Pay per use |
| Licence | MIT | Proprietary service under Snowflake's terms of service |
| Tools exposed | 2 | none |
| MCP registry | `io.github.bytebase/dbhub` | not listed |
| Last release | 2026-11-03 | 2026-08-20 |
| Terms last updated | no document linked | 2026-04-16 |
| Privacy policy last updated | no document linked | 2026-07-01 |
| Customer content may train models | not read yet | not found in the text |
| Terms restrict automated access | not read yet | not found in the text |
| Terms restrict benchmarking | not read yet | not found in the text |
| Terms or service can change without notice | not read yet | not found in the text |
| Arbitration or class-action waiver | not read yet | yes |
| Popularity | 3.8k stars, 51k npm/wk | none |

Why the edge:
- Maintenance & community, DBHub +60: DBHub 95 (v1.5.1 on 3 November 2026, 3 days before this check (30). Eleven tags from v1.2.0 (1 August) to v1.5.1 in the 90 days (20). Issues and pull requests are closed quickly, most within days, and only 7 are open (22). Listed in the official MCP registry as io.github.bytebase/dbhub at the current version (15). CI on push and pull request, a Docker publish workflow and pinned pnpm (8). 30 + 20 + 22 + 15 + 8 = 95.); Snowflake-managed MCP server 35 (Per the 9 October check, not re-read on 4 November (snowflake.com's site terms bar robots). The last dated change to the MCP server is the SSE note of 20 August 2026, 76 days before 4 November, and platform release notes ran to 9 October (20). Of the three dated MCP entries recorded (22 July, 7 August and 20 August 2026), two fall in the 90 days from 6 August, and newer entries couldn't be looked for (0, cause time). A public changelog and a support route through cases and the community, whose answers were not sampled (10). The managed server is not in the official MCP registry, which lists only the separate open-source `io.github.Snowflake-Labs/mcp` (0). Nothing to install. The REST API specification repository was last updated on 10 September 2026 (5). 20+0+10+0+5 = 35.)
- Agent ergonomics, DBHub +39: DBHub 85 (Two tools by default, about 1.4k tokens by the README's count, with opt-in extras (25). max_rows caps results and flags truncation, search_objects has names, summary and full detail levels and a limit (18). Errors return as tool errors with the database's message (12). readOnlyHint and destructiveHint follow the access policy, though idempotentHint is always false (18). Few required settings, one DSN, and no SDK is needed for a local server (12). 25 + 18 + 12 + 18 + 12 = 85.); Snowflake-managed MCP server 46 (The tool list is whatever the operator declares, up to 50 a server, and Snowflake recommends one Cortex Agent tool per server with further servers for other uses (18). The search tool takes `columns` and `limit`. SQL and custom tool responses are cut at 250 KB with no paging, and agent tool responses carry every intermediate step and can pass 200 KB (8). Errors are documented as a symptom table, and `invalid_client` covers both wrong credentials and a network policy block (6). The SQL tool is read-only by default. No `readOnlyHint` or `destructiveHint` annotations and no idempotency support are documented (6). Few required arguments and standard MCP clients work with no SDK, but each client needs a hand-made OAuth integration and some clients can't choose a role (8). Per the 9 October check, not re-read on 4 November.)
- Security & auth, Snowflake-managed MCP server +34: DBHub 43 (The server holds database credentials, and the MCP side has no credential over stdio. Over HTTP a bearer token is optional and off by default while the default bind is 0.0.0.0, so an exposed port answers anyone the host allow-list admits (12). Read-only mode classifies statements and adds engine-level read-only transactions on PostgreSQL, with row limits and timeouts; there is no confirmation step for writes when read-only is off (16). Rows reach the model unmarked, and no guidance on treating results as untrusted was found beyond a blog post on the lethal trifecta (4). The workbench shows request traces (8). No SECURITY.md, disclosure policy or security.txt found (3). 12 + 16 + 4 + 8 + 3 = 43.); Snowflake-managed MCP server 77 (OAuth 2.0 with PKCE, role scopes, an allowed-roles list, binding to an external identity provider and RFC 9728 metadata. Programmatic access tokens expire (15 days by default, 365 at most), can be rotated and need a network policy by default. No dynamic client registration (28). Each tool needs its own grant, the SQL tool defaults to read-only, and the docs advise a separate least-privileged server for direct SQL. No confirmation step for writes is documented (15). The docs warn about tool poisoning, tool shadowing and recursive loops and cap recursion at 10. Nothing covers instructions arriving in query or search results (6). Account Usage has query, login and access history and a Cortex Agent usage view. No log of MCP tool calls was found (10). security.txt valid to 17 August 2027 with a HackerOne policy, SOC 2 Type II, ISO 27001, HITRUST and FedRAMP per the Security Addendum. The HackerOne page was not read (18). Per the 9 October check, not re-read on 4 November.)
- Reliability, DBHub +30: DBHub 80 (Scored as a local stdio and HTTP package. Official npm package @bytebase/dbhub with Node.js 22.5 or later stated (20). A run-tests workflow runs unit and container-based integration suites on push and pull request; the pass state wasn't read (15). Of the latest 25 issues, 22 are closed, most crash and regression reports fixed within days, such as the dropped-connection crash closed 21 October and duplicate column names closed 3 November (22). Semver tags for every release but no changelog file, and release notes weren't read (8). 1.0.0 since 28 July 2026 (15). 20 + 15 + 22 + 8 + 15 = 80.); Snowflake-managed MCP server 50 (Graded as a hosted service. Snowflake's site terms (14 April 2025) bar robots, spiders and scrapers on snowflake.com, so the docs, the status page and www.snowflake.com were not re-read on 4 November and the 9 October readings stand. Statuspage at status.snowflake.com with components by cloud region, and no component for Cortex or the MCP server was recorded (15, the value for a vendor status page with no component for the product). Only the front page's 15 days to 9 October were read, with two incidents marked critical (one region for 68 minutes on 25 September 2026, other regions for 35 minutes on 27 September), one marked major (Snowsight connectivity, 6 October) and one minor (8 October). The rest of the window from 6 August is unread and gets no credit, so the incident line is held at the recorded 10. No rate limit for the MCP endpoint found (0). The REST API's OpenAPI files describe 429 and retry with backoff, but the MCP page gives no retry or idempotency guidance (5, partial value held). 99.9 per cent monthly SLA with service credits (10). Generally available since 4 November 2025 (10). 15+10+0+5+10+10 = 50.)
- Payments & pricing, DBHub +25: DBHub 60 (Free, self-hosted, nothing to buy, so 20 + 20 + 20. No payment protocol (0).); Snowflake-managed MCP server 35 (No x402, MPP or L402 (0). Per-credit prices by region and edition and per-unit AI rates are public in the Service Consumption Table of 2 October 2026, though the MCP server has no line of its own (20). A 30-day trial needs only an email address, and Cortex tools stay off until a card is added (15). A person signs up in a browser and an administrator creates the server and the OAuth integration (0). Per the 9 October check, not re-read on 4 November.)
- Transparency & trust, Snowflake-managed MCP server +23: DBHub 61 (MIT (30). A local server that sends data only to the configured database; no privacy statement, but nothing to state for hosted processing (15). Removed flags fail loudly with a message pointing at the TOML replacement (--readonly, READONLY, MAX_ROWS), but there is no written deprecation policy (10). No telemetry found in the source, though the README doesn't say so (12). 30 + 15 + 10 + 12 = 67.); Snowflake-managed MCP server 84 (Closed service with clear published terms, an acceptable use policy and a consumption table (15). A DPA and Security Addendum of 11 January 2026 with 72-hour incident notice and customer-chosen regions. The DPA says leftover data is deleted promptly after termination without a day count, and the Privacy Notice excludes Customer Data (22). A written behaviour change policy with an eight-week bundle period and dated notes, though the August 2026 MCP change shipped outside it (15). Four sub-processors and 28 affiliates listed with locations and 28 days' notice of additions. AI model providers are not named on the list (16). Per the 9 October check, not re-read on 4 November.)