Analysis
Snowflake introduced Cortex AI Gateway on Tuesday, a new product aimed squarely at two problems enterprises have struggled with as they deploy AI agents at scale: securing what those agents can actually access inside company systems, and giving finance and security teams centralized visibility into AI consumption costs that can spiral quickly once agents start making autonomous decisions.
The product builds directly on Snowflake's acquisition of Natoma in May, folding Natoma's enterprise Model Context Protocol platform capabilities into the core Snowflake product rather than operating it as a bolted-on separate offering. That integration lets Snowflake pitch Cortex AI Gateway as native infrastructure rather than another vendor layer enterprises need to separately procure and maintain.
“That integration lets Snowflake pitch Cortex AI Gateway as native infrastructure rather than another vendor layer enterprises need to separately procure and maintain.”
Alongside the launch, Snowflake announced new secure third-party agent access integrations with Aembit, 1Password, Linx Security, Okta, SailPoint and Saviynt -- naming several established identity and access management players rather than trying to own every layer of agent governance itself. That's a deliberate interoperability play, positioning Cortex as the control plane that plugs into existing enterprise security stacks rather than a closed replacement for them.
The timing is notable: Cortex AI Gateway launches the same week the Model Context Protocol itself ships its biggest specification update since its 2024 launch, moving to a stateless protocol core with hardened OAuth 2.1 authentication. Together, the two announcements suggest the enterprise AI agent governance and interoperability stack is consolidating quickly around a shared set of standards, rather than fragmenting into competing proprietary approaches -- a dynamic that tends to benefit large infrastructure incumbents like Snowflake more than point-solution startups.
What to watch: how quickly enterprise customers actually adopt Cortex AI Gateway versus continuing to patch together point solutions, whether Snowflake's identity-partner integrations meaningfully reduce agent-related security incidents in practice, and whether competitors like Databricks respond with comparable governance products of their own.
