AUTOMATIONSWITCH
OfficialDatabase

ClickHouse MCP

by ClickHouse

Official ClickHouse MCP server with both ClickHouse Tools (production cluster queries) and chDB Tools (embedded ClickHouse for local analytics). Apache-2.0 with destructive-operation protection: write access is opt-in via configuration.

766·5 tools·Released MAR 2025·Apache-2.0
uvx mcp-clickhouse
Share:

Official ClickHouse MCP server with both ClickHouse Tools (production cluster queries) and chDB Tools (embedded ClickHouse for local analytics). 766 GitHub stars and 8 commits on main in the last 30 days. Apache-2.0 with destructive-operation protection: write access is opt-in via configuration.

Reviewed by M. Nouriel · MAY 2026

INSTALL THIS SERVER

Requires authenticationCLICKHOUSE_HOST, CLICKHOUSE_USER, CLICKHOUSE_PASSWORD environment variables. HTTP/SSE transports support additional authentication wrappers.
{ "mcpServers": { "clickhouse": { "command": "uvx", "args": [ "mcp-clickhouse" ], "env": { "CLICKHOUSE_HOST": "<your-clickhouse-host>", "CLICKHOUSE_USER": "<your-user>", "CLICKHOUSE_PASSWORD": "<your-password>" } } } }
PrereqRequires uv installed. Set CLICKHOUSE_HOST, CLICKHOUSE_USER, CLICKHOUSE_PASSWORD. Default mode is read-only; opt into write via destructive-operation protection toggle. PyPI: `mcp-clickhouse`. Path: ~/Library/Application Support/Claude/claude_desktop_config.json (macOS).
{ "mcpServers": { "clickhouse": { "command": "uvx", "args": [ "mcp-clickhouse" ], "env": { "CLICKHOUSE_HOST": "<your-clickhouse-host>", "CLICKHOUSE_USER": "<your-user>", "CLICKHOUSE_PASSWORD": "<your-password>" } } } }
{ "mcpServers": { "clickhouse": { "command": "uvx", "args": [ "mcp-clickhouse" ], "env": { "CLICKHOUSE_HOST": "<your-clickhouse-host>", "CLICKHOUSE_USER": "<your-user>", "CLICKHOUSE_PASSWORD": "<your-password>" } } } }
{ "mcpServers": { "clickhouse": { "command": "uvx", "args": [ "mcp-clickhouse" ], "env": { "CLICKHOUSE_HOST": "<your-clickhouse-host>", "CLICKHOUSE_USER": "<your-user>", "CLICKHOUSE_PASSWORD": "<your-password>" } } } }
{ "mcpServers": { "clickhouse": { "command": "uvx", "args": [ "mcp-clickhouse" ], "env": { "CLICKHOUSE_HOST": "<your-clickhouse-host>", "CLICKHOUSE_USER": "<your-user>", "CLICKHOUSE_PASSWORD": "<your-password>" } } } }

5 TOOLS AVAILABLE

run_select_query
Execute SELECT queries against ClickHouse
Read
list_databases
List available databases
Read
list_tables
List tables in a database
Read

OUR ASSESSMENT

Strengths
  • Official ClickHouse maintenance.
  • 766 GitHub stars and Apache-2.0 licence.
  • 8 commits on main in the last 30 days.
  • Two tool families: production cluster (ClickHouse Tools) and embedded analytics (chDB Tools).
  • Destructive-operation protection: write access requires explicit configuration opt-in.
  • Authentication for HTTP and SSE transports built in.
  • Custom middleware support for request logging, rate limiting, or auth wrapping.
  • Dynamic client configuration via Context State for multi-tenant deployments.
Weaknesses
  • Self-hosted: operator runs the MCP against their ClickHouse cluster.
  • chDB tools require additional local setup for the embedded engine.
  • ClickHouse SQL has dialect specifics; agents trained on standard SQL may produce queries that need ClickHouse-specific revision.
Security Notes

The MCP carries the credentials configured at startup through to the ClickHouse cluster. Default to read-only credentials; opt into write access via the destructive-operation protection toggle only when the agent flow needs DML. Custom middleware can wrap the MCP to add audit logging, rate limiting, or per-request authentication. For multi-tenant deployments, Dynamic Client Configuration via Context State scopes the connection per agent session.

Best For

Teams running ClickHouse for analytics who want agents to query production data with SQL inside the editor; data engineers who want both production-cluster and embedded-chDB tooling in one MCP; multi-tenant deployments using Dynamic Client Configuration.

TECHNICAL DETAILS

Language
python
Transport
stdiostreamable-httpsse
Clients
Claude DesktopClaude CodeCursorVS CodeWindsurf
License
Apache-2.0
GitHub
npm
mcp-clickhouse
Last Release
mcp-clickhouse (PyPI latest)MAY 3, 2026
First Released
MAR 1, 2025

ADOPTION METRICS

// GitHub Stars
766

// Reading this766 stars on the ClickHouse/mcp-clickhouse repo. 8 commits on main in the last 30 days. Official ClickHouse maintenance carries the editorial weight.

// Popularity Rank
#1
Globally · #7 in Database

// Reading thisTop OLAP database MCP at time of review; complements existing OLTP-focused database entries.

SOURCES & VERIFICATION

We don't take any single directory's word for it. Before scoring, we cross-reference 5 public MCP sources, install the server ourselves against the clients we cover, and record when we last re-verified.

01
Discovered
Manual submission
First indexed MAY 3, 2026
02
Cross-referenced
5 directories
PulseMCP, MCP.so, Glama, Smithery, Official MCP Registry
03
Verified against
Claude Desktop, Cursor
Installed and tested across clients
04
Last re-checked
MAY 3, 2026
Weekly re-verification
// How other directories see it

The same server, 5 different lenses. We reconcile these signals into our editorial score, which is why our number sometimes diverges from a directory-aggregate star count.

SourceTheir ratingTheir star countTheir downloadsLast synced
AutomationSwitch This page4.5editorial766MAY 3, 2026
PulseMCP— unratedunavailableunavailableMAY 3, 2026
MCP.so— unratedunavailableunavailableMAY 3, 2026
Glama— unratedunavailableunavailableMAY 3, 2026
Smithery— unratedunavailableunavailableMAY 3, 2026
Official MCP Registry— unratedunavailableunavailableMAY 3, 2026

// Counts are directory-reported; we don't adjust them. Discrepancies usually come from different snapshot times or star-caching.

OTHER DATABASE MCP SERVERS

Official5

Postgres MCP

Anthropic

Official MCP server for PostgreSQL. Provides read and write access to PostgreSQL databases with schema introspection, query execution, and transaction support. The reference implementation for database MCP servers.

14 tools4,200
Vendor5

Supabase

Supabase

Persistence layer with full Postgres access and Row Level Security awareness. Query tables, manage schemas, handle auth users, and work with storage buckets.

18 tools4,200
Official4.4

Redis MCP

Redis

Official Redis MCP server with natural-language interface for managing and searching Redis data. EntraID authentication for Azure Managed Redis included; Redis ACL configurable via environment variables. Tool coverage spans strings, lists, hashes, sets, sorted sets, JSON, vectors, and search.

8 tools499
Vendor4

MindsDB

MindsDB

A federated query engine that exposes 200+ data sources as MCP tools through a unified SQL-compatible interface. Built around a Connect → Unify → Respond workflow with structured tables fused with vectorized data inside Knowledge Bases.

6 tools39,077
Vendor4

Neon MCP

Neon

MCP server for Neon serverless Postgres. Provides database branching, query execution, and project management. Branch-per-query makes every schema change reversible.

9 tools1,800
Vendor4

MongoDB MCP Server

MongoDB Inc.

Vendor-built MongoDB MCP server covering both direct database operations (against any MongoDB connection string) and MongoDB Atlas API operations (via Service Accounts credentials). Ships with --readOnly enabled by default in every official install snippet.

8 tools1,011
// Get in touch

DISCUSS YOUR
MCP REQUIREMENTS.

Evaluating a server, scoping an internal deployment, or working out whether MCP is the right fit at all. Start the conversation and we will point you at the right piece of the ecosystem.

Discuss Your MCP Requirements →