metatate

Metatate Claude Plugins

Bring Metatate's structured context and decision layer into Claude Code.

Metatate gives agents structured, machine-readable context for data workflows: data meaning, business logic, policies, lineage, access rules, runtime conditions, and decision evidence. The metatate plugin lets Claude Code query that context through the Snowflake-managed MCP server installed by the Metatate Snowflake Native App.

Claude Code remains the developer workspace. Metatate remains the source of truth for governed data context, intended-use validation, authorization decisions, explanations, and audit evidence. This plugin does not run a Metatate-hosted MCP gateway and it does not store Snowflake credentials in the plugin repository.

What You Get

• Slash commands that map to Metatate's decision workflows: discover governed assets, inspect meaning and rules, authorize use, validate query context, explain decisions, review policy coverage, and run advisory release gates.
• A Claude skill that keeps Claude grounded in Metatate as the decision layer instead of guessing from schema names, copied policy text, or local code alone.
• A small local helper script that generates the correct Claude MCP registration command for Snowflake OAuth.
• Customer-facing setup docs for Snowflake administrators and Claude Code users.

Repository Layout

metatate-claude-plugins/
  .claude-plugin/
    marketplace.json
  plugins/
    metatate/
      .claude-plugin/
        plugin.json
      bin/
        metatate-mcp-add
      commands/
      skills/
      README.md
  docs/
    claude-code-install.md
    snowflake-admin-setup.md
    troubleshooting.md
  examples/
    prompts.md
  SECURITY.md
  CHANGELOG.md
  LICENSE

Requirements

For the Snowflake administrator:

• Metatate Snowflake Native App installed in the target Snowflake account. If it is not installed yet, start from the Snowflake Marketplace listing.
• The app exposes the managed MCP server, normally METATATE_APP.CORE.METATATE_MCP.
• A Snowflake role for Claude users. Use a least-privilege role that is allowed to use Metatate, not an account administration role.
• Privilege to create or manage a Snowflake OAuth security integration.

For each Claude Code user:

• Claude Code installed.
• Access to the target Snowflake account in a role authorized for Metatate.
• A Snowflake OAuth client ID from the administrator.
• The OAuth client secret entered only into Claude Code's secure prompt.

Install The Plugin

In Claude Code, add this public marketplace:

/plugin marketplace add metatateai/metatate-claude-plugins

Install the Metatate plugin:

/plugin install metatate@metatate-claude-plugins

Restart Claude Code after installation if Claude prompts you to do so.

Configure The Snowflake MCP Connection

The plugin and the MCP connection are separate:

• The plugin adds Claude commands and guidance.
• The MCP connection gives Claude Code access to the Snowflake-managed Metatate tools.

If you cloned this repository locally, register the MCP server with the helper. Replace the placeholders with values from your Snowflake administrator:

./plugins/metatate/bin/metatate-mcp-add \
  --account-url https://<account-url> \
  --client-id <snowflake-oauth-client-id> \
  --snowflake-role <snowflake-role> \
  --config-scope user \
  --run

Claude Code will prompt for the OAuth client secret. Do not paste the client secret into a shell command, README, issue, ticket, or committed file.

The session:role:<snowflake-role> scope is required. It makes Snowflake issue the OAuth session for the intended Metatate role instead of falling back to the user's default role or secondary role ALL.

The helper generates the equivalent claude mcp add-json command:

claude mcp add-json --scope user --client-secret metatate '{
  "type": "http",
  "url": "https://<account-url>/api/v2/databases/METATATE_APP/schemas/CORE/mcp-servers/METATATE_MCP",
  "oauth": {
    "clientId": "<snowflake-oauth-client-id>",
    "callbackPort": 8080,
    "scopes": "session:role:<snowflake-role>"
  }
}'

The JSON payload in that command is:

{
  "type": "http",
  "url": "https://<account-url>/api/v2/databases/METATATE_APP/schemas/CORE/mcp-servers/METATATE_MCP",
  "oauth": {
    "clientId": "<snowflake-oauth-client-id>",
    "callbackPort": 8080,
    "scopes": "session:role:<snowflake-role>"
  }
}

Authenticate

Start Claude Code and open the MCP menu:

/mcp