Agentic artificial intelligence is no longer a futuristic promise but an operational reality in enterprises. However, its massive deployment brings a critical challenge: how to govern, secure, and audit these agents when they interact with internal systems, APIs, and enterprise workflows? Snowflake, the well-known cloud data platform, has decided to answer this question by acquiring the US startup Natoma, specialized in the emerging Model Context Protocol (MCP) standard.

What does Natoma bring to Snowflake?

Natoma offers a platform that combines access to MCP-based tools with governance and observability capabilities. Its integration into Snowflake will allow enterprises to securely connect Cortex Agents, Snowflake Intelligence, Cortex Code, and other AI platforms with heterogeneous enterprise systems: SaaS applications, cloud environments, VPCs, and on-premises infrastructures. In essence, Natoma provides the control and governance fabric for these connections, an increasingly demanded element by CIOs.

MCP governance: a must for CIOs

According to Phil Fersht, CEO of HFS Research, “MCP is becoming the connective tissue of enterprise agents, but without identity, policies, privileged access controls, and auditability, it can quickly become a shadow AI risk.” His colleague Robert Kramer, managing director at KramerERP, adds that “MCP is not infallible” by itself: “it can standardize connections, but it can also standardize risk if access is too broad, tools are poorly governed, or agents are trusted too quickly.”

The value for enterprise clients, as Fersht points out, is not simply in saying “we support MCP,” but in providing a governed MCP with verified servers, identity-aware authorizations, policy enforcement, auditability, and gateway control. This echoes the principles of hardening and maintaining Linux servers, where security is built from the ground up.

Are enterprises ready for MCP?

Despite the enthusiasm, analysts warn that most organizations are not yet ready for massive MCP adoption. “They want the productivity and context benefits, but their governance, identity, data classification, and access control models are still catching up,” says Fersht. CIOs must avoid treating MCP as a plug-and-play miracle, as agents can expose sensitive information, trigger incorrect actions, or bypass established workflow controls if policies are weak.

Critical points to watch include identity-based permissions, least-privilege access, audit logs, human-in-the-loop for high-risk actions, data leakage controls, and clear ownership when an agent makes a bad decision. These challenges are similar to those addressed in resource tuning in Kubernetes, where trust in existing solutions is limited.

Snowflake in the race for the AI control plane

For Michael Ni, principal analyst at Constellation Research, the acquisition reflects Snowflake's efforts to seize the AI control plane. “Data platforms won the analytics era. Whoever governs agents, context, and autonomous actions will win the agentic era. Natoma brings Snowflake the missing layer between insight and execution.”

This strategy is part of a broader industry trend, where SaaS providers like Salesforce, ServiceNow, and Workday integrate agentic orchestration capabilities, while hyperscalers like Microsoft, AWS, and Google consolidate their agent development tools. Snowflake thus enters direct competition, similar to what is observed in IBM and Red Hat's Project Lightwell, where security and governance are key.

The integration challenge

The real test for Snowflake will be to seamlessly integrate Natoma's governance capabilities into its offering, allowing CIOs to manage permissions, policies, and agent controls at scale without adding another layer of complexity. The company's efforts seem aligned with enterprise initiatives to operationalize AI agents, a path already explored in the transition from pilot to production in AI.

Snowflake has not disclosed the financial terms of the acquisition nor the expected closing date, but the move is already generating expectations in the sector. As in EuroQCS-Spain's analog quantum leap, the bet on governance and technological sovereignty is shaping up as a key differentiator.

Original source: ComputerWorld. Analysis and adaptation by ForgeNEX.