Adding internal gateway auth

Signed-off-by: Eran Ifrach <[email protected]>

Author: eifrach

src/config.py

@@ -16,6 +16,7 @@
 SNOWFLAKE_DATABASE = os.environ.get("SNOWFLAKE_DATABASE")
 SNOWFLAKE_SCHEMA = os.environ.get("SNOWFLAKE_SCHEMA")
 SNOWFLAKE_WAREHOUSE = os.environ.get("SNOWFLAKE_WAREHOUSE", "DEFAULT")
+INTERNAL_GATEWAY = os.environ.get("INTERNAL_GATEWAY", "false")
 
 # Snowflake token handling - for stdio transport, get from environment
 # For other transports, it will be retrieved from request context in tools layer

src/tools.py

@@ -3,7 +3,7 @@
 
 from mcp.server.fastmcp import FastMCP
 
-from config import MCP_TRANSPORT, SNOWFLAKE_TOKEN
+from config import MCP_TRANSPORT, SNOWFLAKE_TOKEN, INTERNAL_GATEWAY
 from database import (
     execute_snowflake_query,
     format_snowflake_row,
@@ -18,7 +18,7 @@
 
 def get_snowflake_token(mcp: FastMCP) -> Optional[str]:
     """Get Snowflake token from either config (stdio) or request headers (non-stdio)"""
-    if MCP_TRANSPORT == "stdio":
+    if MCP_TRANSPORT == "stdio" or INTERNAL_GATEWAY.lower() == "true":
         return SNOWFLAKE_TOKEN
     else:
         try: