---
title: "Read Sql Credentials"
method: GET
path: "/api/snowflake/sql-credentials"
tags: ["snowflake"]
---

# Read Sql Credentials

`GET /api/snowflake/sql-credentials`

Issue a short-lived Snowflake OAuth token to the caller's kernel.

A running kernel cannot receive an updated environment, and Snowflake's
access tokens are minutes long, so a token injected at kernel start would
be dead before the first query. The kernel calls this per connection
instead; nothing durable is written into its environment.

Kernel-only, because a kernel holds an internal principal token and no
cookie. No browser surface needs a Snowflake token either.

## Response `200`

Successful Response

- QuadrillionCloudApiRoutersSnowflakeSqlCredentialsResponse — Everything a kernel needs to open one Snowflake connection.
  - `account` string, required
  - `auth_mode` string
  - `access_token` string, required
  - `expires_at` string, required
  - `expires_in` integer, required
  - `role` string, nullable
  - `warehouse` string, nullable
  - `database` string, nullable
  - `schema_name` string, nullable

## Changes

- **2026-08-25** `7c2c045c836c` — 1 info
  - endpoint added

[Change history](https://skmtc.dev/quadrillion/apis/quadrillion-cloud-api/changes/api/snowflake/sql-credentials/get.md)

---

[API](https://skmtc.dev/quadrillion/apis/quadrillion-cloud-api.md) · [All operations](https://skmtc.dev/quadrillion/apis/quadrillion-cloud-api/llms.txt) · [OpenAPI document](https://skmtc-service-production.skmtc.workers.dev/v1/apis/quadrillion/quadrillion-cloud-api/revisions/f4de1bab5efb/schema)