ClickHouse

io.github.ClickHouse/mcp-clickhouse·v0.4.1·Databases

Official ClickHouse MCP server for querying and exploring ClickHouse clusters and chDB.

In-path gate · all MCP tools

Using ClickHouse in Claude, Cursor, Gemini CLI, Cline, or Zed?

MCP tool contracts can change remotely with no version bump. The mcpindex gate pins each contract and HOLDs the call when it drifts-before your agent acts. Zero credentials. This is not the package install for this server itself (use Install this server for that).

Install the mcpindex gate (one command)

Rewrites your MCP host config so each server launches behind the gate. Inspect first: curl -fsSL https://mcpindex.ai/install.sh | less

curl -fsSL https://mcpindex.ai/install.sh | sh

Auditable install path →Watch it hold a drift →

Trust verdict · v1 advisory · method

NOT YET SCREENEDno verdict on file

Verdict not yet evaluated for this tool. The semantic screen takes adversarial cases first; coverage rolls out as the corpus expands (15/150 labels to graduation). The deterministic conformance probe is built but has not yet run on the public corpus, so a recorded verdict here is REVIEW or UNVERIFIED, never a clearing ALLOW. Until a verdict is recorded, an agent should treat this tool as not-yet-cleared and fall back to its own checks. Method: the eval, four-state verdict, honest limits.

Own this server? Screen its description →

Environment variables

CLICKHOUSE_HOST

required

Hostname of the ClickHouse server

CLICKHOUSE_USER

required

Username for ClickHouse authentication

CLICKHOUSE_PASSWORD

requiredsecret

Password for ClickHouse authentication

CLICKHOUSE_PORT

ClickHouse HTTP(S) port. Defaults to 8443 when CLICKHOUSE_SECURE=true, 8123 otherwise

CLICKHOUSE_SECURE

Use HTTPS to connect to ClickHouse

CLICKHOUSE_VERIFY

Verify SSL certificates

CLICKHOUSE_DATABASE

Default database to use

CLICKHOUSE_ROLE

ClickHouse role to activate for the session

CLICKHOUSE_ALLOW_WRITE_ACCESS

Allow write operations (DDL and DML). Queries run read-only by default

CLICKHOUSE_ALLOW_DROP

Allow destructive operations (DROP, TRUNCATE) when write access is also enabled

CLICKHOUSE_MCP_QUERY_TIMEOUT

Query tool timeout in seconds

CLICKHOUSE_HOST

required

Hostname of the ClickHouse server

CLICKHOUSE_USER

required

Username for ClickHouse authentication

CLICKHOUSE_PASSWORD

requiredsecret

Password for ClickHouse authentication

CLICKHOUSE_PORT

ClickHouse HTTP(S) port. Defaults to 8443 when CLICKHOUSE_SECURE=true, 8123 otherwise

CLICKHOUSE_SECURE

Use HTTPS to connect to ClickHouse

CLICKHOUSE_VERIFY

Verify SSL certificates

CLICKHOUSE_DATABASE

Default database to use

CLICKHOUSE_ROLE

ClickHouse role to activate for the session

CLICKHOUSE_ALLOW_WRITE_ACCESS

Allow write operations (DDL and DML). Queries run read-only by default

CLICKHOUSE_ALLOW_DROP

Allow destructive operations (DROP, TRUNCATE) when write access is also enabled

CLICKHOUSE_MCP_QUERY_TIMEOUT

Query tool timeout in seconds

MCP quality score · maturity, not trust · methodology

freshness

completeness

installability

documentation

stability

Alternatives in Databases

ai.haymon/dbmcp

Database MCP server for MySQL, MariaDB, PostgreSQL & SQLite with PII redaction and write-prevention

ai.smithery/MisterSandFR-supabase-mcp-selfhosted

Manage Supabase projects end to end across database, auth, storage, realtime, and migrations. Moni…

ai.smithery/afgong-sqlite-mcp-server

Explore your Messages SQLite database to browse tables and inspect schemas with ease. Run flexible…

Install this server

Claude Desktop (uvx)

{
  "mcpServers": {
    "mcp-clickhouse": {
      "command": "uvx",
      "args": [
        "mcp-clickhouse"
      ],
      "env": {
        "CLICKHOUSE_HOST": "<clickhouse_host>",
        "CLICKHOUSE_USER": "<clickhouse_user>",
        "CLICKHOUSE_PASSWORD": "<your-clickhouse_password>",
        "CLICKHOUSE_PORT": "<clickhouse_port>",
        "CLICKHOUSE_SECURE": "true",
        "CLICKHOUSE_VERIFY": "true",
        "CLICKHOUSE_DATABASE": "<clickhouse_database>",
        "CLICKHOUSE_ROLE": "<clickhouse_role>",
        "CLICKHOUSE_ALLOW_WRITE_ACCESS": "false",
        "CLICKHOUSE_ALLOW_DROP": "false",
        "CLICKHOUSE_MCP_QUERY_TIMEOUT": "30"
      }
    }
  }
}

Claude Desktop (Docker)

{
  "mcpServers": {
    "mcp-clickhouse": {
      "command": "docker",
      "args": [
        "run",
        "--rm",
        "-i",
        "ghcr.io/clickhouse/mcp-clickhouse:0.4.1"
      ],
      "env": {
        "CLICKHOUSE_HOST": "<clickhouse_host>",
        "CLICKHOUSE_USER": "<clickhouse_user>",
        "CLICKHOUSE_PASSWORD": "<your-clickhouse_password>",
        "CLICKHOUSE_PORT": "<clickhouse_port>",
        "CLICKHOUSE_SECURE": "true",
        "CLICKHOUSE_VERIFY": "true",
        "CLICKHOUSE_DATABASE": "<clickhouse_database>",
        "CLICKHOUSE_ROLE": "<clickhouse_role>",
        "CLICKHOUSE_ALLOW_WRITE_ACCESS": "false",
        "CLICKHOUSE_ALLOW_DROP": "false",
        "CLICKHOUSE_MCP_QUERY_TIMEOUT": "30"
      }
    }
  }
}

Verdict API

curl -s mcpindex.ai/api/v1/trust/server/io-github-clickhouse-mcp-clickhouse

Free-tier verdict as JSON: decision + dimensions + severity. Call it from your agent before it invokes a tool it just discovered.

Details

version: v0.4.1
category: Databases
quality: 90 / 100
operator: ClickHouse

Provenance

Verdict history is anchored to Bitcoin via OpenTimestamps. The anchor proof is public and any skeptic can recompute it offline.

Links

Repository →Website →