Home › Databases & Data › ClickHouse

ClickHouse

Official ClickHouse MCP server for querying and exploring ClickHouse clusters and chDB.

Official Python Cloud

★ 903 stars Last pushed 2026-11-04 License: Apache-2.0

View repository → Website →

Connect

Review any command before running it. Package names and URLs come from the server's own registry entry.

Package (pypi 0.7.0)

uvx mcp-clickhouse

Or add to your MCP client config:

{
  "mcpServers": {
    "mcp-clickhouse": {
      "command": "uvx",
      "args": [
        "mcp-clickhouse"
      ],
      "env": {
        "CLICKHOUSE_HOST": "<YOUR_VALUE>",
        "CLICKHOUSE_USER": "<YOUR_VALUE>",
        "CLICKHOUSE_PASSWORD": "<YOUR_VALUE>"
      }
    }
  }
}

CLICKHOUSE_HOST required — Hostname of the ClickHouse server
CLICKHOUSE_USER required — Username for ClickHouse authentication
CLICKHOUSE_PASSWORD secret — Password for ClickHouse authentication. Required unless a client certificate uses the default or mutual TLS mode
CLICKHOUSE_PORT — ClickHouse HTTP(S) port. Defaults to 8443 when CLICKHOUSE_SECURE=true, 8123 otherwise
CLICKHOUSE_SECURE — Use HTTPS to connect to ClickHouse
CLICKHOUSE_VERIFY — Verify SSL certificates
CLICKHOUSE_CA_CERT — Path to a PEM CA bundle for ClickHouse server certificate verification
CLICKHOUSE_CLIENT_CERT — Path to a PEM client certificate for the ClickHouse HTTPS connection
CLICKHOUSE_CLIENT_CERT_KEY — Path to the PEM private key for CLICKHOUSE_CLIENT_CERT
CLICKHOUSE_TLS_MODE — Client certificate mode: mutual, proxy, or strict
CLICKHOUSE_DATABASE — Default database to use
CLICKHOUSE_ROLE — ClickHouse role to activate for the session
CLICKHOUSE_ALLOW_WRITE_ACCESS — Allow write operations (DDL and DML). Queries run read-only by default
CLICKHOUSE_ALLOW_DROP — Allow destructive operations (DROP, TRUNCATE, DELETE, UPDATE, REPLACE, CLEAR, and DETACH PERMANENTLY) when write access is also enabled
CLICKHOUSE_MCP_QUERY_TIMEOUT — Query tool timeout in seconds
CLICKHOUSE_MCP_MAX_WORKERS — Maximum query worker thread pool size

Package (oci)

docker run -i --rm -e CLICKHOUSE_HOST=<YOUR_VALUE> -e CLICKHOUSE_USER=<YOUR_VALUE> -e CLICKHOUSE_PASSWORD=<YOUR_VALUE> ghcr.io/clickhouse/mcp-clickhouse:0.7.0

Or add to your MCP client config:

{
  "mcpServers": {
    "mcp-clickhouse": {
      "command": "docker",
      "args": [
        "run",
        "-i",
        "--rm",
        "-e",
        "CLICKHOUSE_HOST=<YOUR_VALUE>",
        "-e",
        "CLICKHOUSE_USER=<YOUR_VALUE>",
        "-e",
        "CLICKHOUSE_PASSWORD=<YOUR_VALUE>",
        "ghcr.io/clickhouse/mcp-clickhouse:0.7.0"
      ]
    }
  }
}

CLICKHOUSE_HOST required — Hostname of the ClickHouse server
CLICKHOUSE_USER required — Username for ClickHouse authentication
CLICKHOUSE_PASSWORD secret — Password for ClickHouse authentication. Required unless a client certificate uses the default or mutual TLS mode
CLICKHOUSE_PORT — ClickHouse HTTP(S) port. Defaults to 8443 when CLICKHOUSE_SECURE=true, 8123 otherwise
CLICKHOUSE_SECURE — Use HTTPS to connect to ClickHouse
CLICKHOUSE_VERIFY — Verify SSL certificates
CLICKHOUSE_CA_CERT — Path to a PEM CA bundle for ClickHouse server certificate verification
CLICKHOUSE_CLIENT_CERT — Path to a PEM client certificate for the ClickHouse HTTPS connection
CLICKHOUSE_CLIENT_CERT_KEY — Path to the PEM private key for CLICKHOUSE_CLIENT_CERT
CLICKHOUSE_TLS_MODE — Client certificate mode: mutual, proxy, or strict
CLICKHOUSE_DATABASE — Default database to use
CLICKHOUSE_ROLE — ClickHouse role to activate for the session
CLICKHOUSE_ALLOW_WRITE_ACCESS — Allow write operations (DDL and DML). Queries run read-only by default
CLICKHOUSE_ALLOW_DROP — Allow destructive operations (DROP, TRUNCATE, DELETE, UPDATE, REPLACE, CLEAR, and DETACH PERMANENTLY) when write access is also enabled
CLICKHOUSE_MCP_QUERY_TIMEOUT — Query tool timeout in seconds
CLICKHOUSE_MCP_MAX_WORKERS — Maximum query worker thread pool size