MCP Hub βΊ Databases & Data βΊ ClickHouse
ClickHouse MCP server
by ClickHouse Β· io.github.ClickHouse/mcp-clickhouse
Official ClickHouse MCP server for querying and exploring ClickHouse clusters and chDB.
How to install ClickHouse
Python (uvx)
claude mcp add -e CLICKHOUSE_HOST=<your-clickhouse-host> -e CLICKHOUSE_USER=<your-clickhouse-user> mcp-clickhouse -- uvx mcp-clickhouse==0.7.0
Or add it to your MCP config (Claude Desktop, Cursor, VS Code):
{
"mcpServers": {
"mcp-clickhouse": {
"command": "uvx",
"args": [
"mcp-clickhouse==0.7.0"
],
"env": {
"CLICKHOUSE_HOST": "<your-clickhouse-host>",
"CLICKHOUSE_USER": "<your-clickhouse-user>"
}
}
}
}Environment variables:CLICKHOUSE_HOST (required) β Hostname of the ClickHouse serverCLICKHOUSE_USER (required) β Username for ClickHouse authenticationCLICKHOUSE_PASSWORD β Password for ClickHouse authentication. Required unless a client certificate uses the default or mutual TLS modeCLICKHOUSE_PORT β ClickHouse HTTP(S) port. Defaults to 8443 when CLICKHOUSE_SECURE=true, 8123 otherwiseCLICKHOUSE_SECURE β Use HTTPS to connect to ClickHouseCLICKHOUSE_VERIFY β Verify SSL certificatesCLICKHOUSE_CA_CERT β Path to a PEM CA bundle for ClickHouse server certificate verificationCLICKHOUSE_CLIENT_CERT β Path to a PEM client certificate for the ClickHouse HTTPS connectionCLICKHOUSE_CLIENT_CERT_KEY β Path to the PEM private key for CLICKHOUSE_CLIENT_CERTCLICKHOUSE_TLS_MODE β Client certificate mode: mutual, proxy, or strictCLICKHOUSE_DATABASE β Default database to useCLICKHOUSE_ROLE β ClickHouse role to activate for the sessionCLICKHOUSE_ALLOW_WRITE_ACCESS β Allow write operations (DDL and DML). Queries run read-only by defaultCLICKHOUSE_ALLOW_DROP β Allow destructive operations (DROP, TRUNCATE, DELETE, UPDATE, REPLACE, CLEAR, and DETACH PERMANENTLY) when write access is also enabledCLICKHOUSE_MCP_QUERY_TIMEOUT β Query tool timeout in secondsCLICKHOUSE_MCP_MAX_WORKERS β Maximum query worker thread pool size
Docker
claude mcp add -e CLICKHOUSE_HOST=<your-clickhouse-host> -e CLICKHOUSE_USER=<your-clickhouse-user> mcp-clickhouse -- docker run -i --rm ghcr.io/clickhouse/mcp-clickhouse:0.7.0
Or add it to your MCP config (Claude Desktop, Cursor, VS Code):
{
"mcpServers": {
"mcp-clickhouse": {
"command": "docker",
"args": [
"run",
"-i",
"--rm",
"ghcr.io/clickhouse/mcp-clickhouse:0.7.0"
],
"env": {
"CLICKHOUSE_HOST": "<your-clickhouse-host>",
"CLICKHOUSE_USER": "<your-clickhouse-user>"
}
}
}
}Environment variables:CLICKHOUSE_HOST (required) β Hostname of the ClickHouse serverCLICKHOUSE_USER (required) β Username for ClickHouse authenticationCLICKHOUSE_PASSWORD β Password for ClickHouse authentication. Required unless a client certificate uses the default or mutual TLS modeCLICKHOUSE_PORT β ClickHouse HTTP(S) port. Defaults to 8443 when CLICKHOUSE_SECURE=true, 8123 otherwiseCLICKHOUSE_SECURE β Use HTTPS to connect to ClickHouseCLICKHOUSE_VERIFY β Verify SSL certificatesCLICKHOUSE_CA_CERT β Path to a PEM CA bundle for ClickHouse server certificate verificationCLICKHOUSE_CLIENT_CERT β Path to a PEM client certificate for the ClickHouse HTTPS connectionCLICKHOUSE_CLIENT_CERT_KEY β Path to the PEM private key for CLICKHOUSE_CLIENT_CERTCLICKHOUSE_TLS_MODE β Client certificate mode: mutual, proxy, or strictCLICKHOUSE_DATABASE β Default database to useCLICKHOUSE_ROLE β ClickHouse role to activate for the sessionCLICKHOUSE_ALLOW_WRITE_ACCESS β Allow write operations (DDL and DML). Queries run read-only by defaultCLICKHOUSE_ALLOW_DROP β Allow destructive operations (DROP, TRUNCATE, DELETE, UPDATE, REPLACE, CLEAR, and DETACH PERMANENTLY) when write access is also enabledCLICKHOUSE_MCP_QUERY_TIMEOUT β Query tool timeout in secondsCLICKHOUSE_MCP_MAX_WORKERS β Maximum query worker thread pool size
Replace placeholders in <angle brackets> with your own values. Review what a server can access before you enable it.
Details
- Version
- 0.7.0
- Published
- 2026-09-21
- Updated
- 2026-09-21
- Namespace
- io.github.ClickHouse
- Source
- ClickHouse/mcp-clickhouse
Similar databases & data servers
- dbmolePostgreSQL and MySQL with connections managed at runtime by theβ¦
- Postgres MCPPostgreSQL MCP wrapper with .env credential mapping, tool selection,β¦
- FaucetSQL database to MCP tools and REST API: PostgreSQL, MySQL, SQLβ¦
- The NothingMr. Decoupler: a private seam between AI and any database. No SQL,β¦
- MongodbMongoDB Model Context Protocol Server
- Grain SQLRun SQL queries and inspect database schemas through safe, visibleβ¦
- DataLinkMCP server for secure database access (PostgreSQL, MySQL, SQLite)
- Magic CloudGenerate secured CRUD APIs over your database, run SQL, manageβ¦