ClickHouse
ClickHouse MCP for fast analytical queries. Built by ClickHouse Inc, supports cluster topology discovery.
Delv Safety Grade: A
Score 83/100 · assessed 2026-04-28
ClickHouse MCP is built and maintained by ClickHouse Inc themselves, which gives it excellent pedigree as an official vendor integration. The package is distributed via PyPI with standard installation, and the codebase is open source on GitHub. Security posture is reasonable: it requires database credentials via environment variables and provides both read and write access to your ClickHouse clusters. The permissions scope is broader than read-only analytics tools because it supports full SQL execution including DDL and DML operations. Cluster topology discovery means it can enumerate and connect to multiple nodes. No known security incidents. The main risk is that you're granting Claude direct database access with whatever privileges your credentials carry, so credential scoping and network isolation become critical. Transparency is good with public repo and docs, though changelog detail could be stronger.
Lethal Trifecta (prompt-injection exposure)
ONE OF THREEAnalytical DB; usually private.
Green flags
- Built and maintained by ClickHouse Inc, official vendor integration
- Distributed via PyPI with standard pip install
- Open source on GitHub with public issue tracker
- Credentials via env vars, not hardcoded
- Supports read-only mode if credentials are scoped appropriately
Red flags
- Full SQL execution including DELETE, DROP, and schema modifications
- Credentials grant whatever DB privileges the user has, no built-in scoping
- Cluster discovery can enumerate internal topology and multiple nodes
- Network access to database infrastructure required
Permissions requested
Install
pip install mcp-clickhouse
CLICKHOUSE_HOSTCLICKHOUSE_USERCLICKHOUSE_PASSWORDReview
Install this if you're already running ClickHouse and want Claude to handle query construction for exploratory analysis. Skip it if you need database management features or don't have a ClickHouse instance to point it at. It's a narrow tool that does one thing well.
Good at
- Built by ClickHouse themselves, so it understands vendor-specific features and cluster topology.
- Turns natural language questions into SQL without you writing queries manually.
- Cluster discovery works automatically for distributed setups.
- Tight scope means it does query execution well without feature bloat.
Watch out
- No npm package yet, so installation requires cloning and building from source.
- Environment variables are mandatory and stored in plaintext config files.
- Focused purely on queries, not schema changes or database management tasks.
- Switching between multiple ClickHouse instances requires manual reconfiguration.
Getting started
Works with
Similar MCPs
- MySQLRead-only MySQL access for Claude. Schema-aware, runs SELECTs safely, perfect for ad-hoc analytics on a production replica.
- MongoDBMongoDB's official MCP for natural-language queries against your collections. Read-only by default, with explicit write toggles.
- dbtdbt Labs' official MCP. Run models, explore the semantic layer, query the discovery API, and search project docs from your agent.
- NeonNeon's official MCP for serverless Postgres. Manage projects, branches, and run SQL against any of your databases.