Snowflake buys Natoma to help freeze out rogue agents
Snowflake is buying Natoma to add permission checks and audit controls for AI agents that act inside enterprise apps.
Intelligence analysis by GPT-5.4 Mini
Snowflake plans to fold Natoma into its agentic control plane so AI agents can use tools like Slack, email, calendars, Jira, and Google Drive from governed environments with identity checks, policy enforcement, and audit trails.
Snowflake is like a big office full of important files and tools. It wants smart computer helpers to do chores, but only the right chores.
Natoma is like a security desk for those helpers. It checks whether a helper is allowed to open a door, send a message, or make a change.
The idea is to let the helpers save time without letting them wander around the office doing things they should not do. That is the big safety part.
Analysis
What Snowflake is buying
Snowflake said it will buy Natoma, a startup that built a gateway for managing AI agent permissions across enterprise applications. The pitch is straightforward: let agents do useful work inside business systems, but keep those actions inside a controlled environment instead of letting them roam freely across tools and data.
Security and control
Natoma sits in front of Model Context Protocol servers, which let agents connect to external software tools. According to the article, the platform checks identity, applies access rules, and records audit information at the level of individual tool calls. That means the system can decide whether a request should go through based on who asked, what permissions they have, and what action the agent is trying to take.
Snowflake’s CEO framed Natoma as part of a broader “agentic control plane,” where agents can send email, summarize Slack conversations, check calendars, or open Jira tickets while still being governed by enterprise security controls. The company says the goal is not just convenience but controlled action with permissions, observability, and policy enforcement built in.
Broader strategy
The deal fits a larger push by Snowflake into AI and infrastructure. The article says this is the company’s sixth acquisition announcement since June 2025, following deals for Crunchy Data, Datometry, Select Star, Observe, and TensorStax. Snowflake also signed a five-year, $6 billion agreement with AWS on the same day, centered on Graviton-powered compute and AI infrastructure.
Financial terms for Natoma were not disclosed. If the transaction closes, Natoma’s 20 employees would join Snowflake.
Key points
- Snowflake plans to buy Natoma, a startup focused on AI agent permissions and governance.
- Natoma works as a gateway for MCP servers and checks identity, access, and audit controls for tool calls.
- Snowflake says the acquisition supports its broader "agentic control plane" strategy for governed AI actions.
- The deal terms were not disclosed, and Snowflake said Natoma has 20 employees.
- The announcement came the same day Snowflake signed a five-year, $6 billion AWS agreement.
