ClickHouse
ClickHouse MCP for fast analytical queries. Built by ClickHouse Inc, supports cluster topology discovery.
Delv Safety Grade: A
Score 83/100 · assessed 2026-04-28
ClickHouse MCP is built and maintained by ClickHouse Inc themselves, which gives it excellent pedigree as an official vendor integration. The package is distributed via PyPI with standard installation, and the codebase is open source on GitHub. Security posture is reasonable: it requires database credentials via environment variables and provides both read and write access to your ClickHouse clusters. The permissions scope is broader than read-only analytics tools because it supports full SQL execution including DDL and DML operations. Cluster topology discovery means it can enumerate and connect to multiple nodes. No known security incidents. The main risk is that you're granting Claude direct database access with whatever privileges your credentials carry, so credential scoping and network isolation become critical. Transparency is good with public repo and docs, though changelog detail could be stronger.
Lethal Trifecta (prompt-injection exposure)
ONE OF THREEAnalytical DB; usually private.
Green flags
- Built and maintained by ClickHouse Inc, official vendor integration
- Distributed via PyPI with standard pip install
- Open source on GitHub with public issue tracker
- Credentials via env vars, not hardcoded
- Supports read-only mode if credentials are scoped appropriately
Red flags
- Full SQL execution including DELETE, DROP, and schema modifications
- Credentials grant whatever DB privileges the user has, no built-in scoping
- Cluster discovery can enumerate internal topology and multiple nodes
- Network access to database infrastructure required
Permissions requested
Install
pip install mcp-clickhouse
CLICKHOUSE_HOSTCLICKHOUSE_USERCLICKHOUSE_PASSWORDReview
Install this if you're already running ClickHouse and want Claude to handle query construction for exploratory analysis. Skip it if you need database management features or don't have a ClickHouse instance to point it at. It's a narrow tool that does one thing well.
Good at
- Built by ClickHouse themselves, so it understands vendor-specific features and cluster topology.
- Turns natural language questions into SQL without you writing queries manually.
- Cluster discovery works automatically for distributed setups.
- Tight scope means it does query execution well without feature bloat.
Watch out
- No npm package yet, so installation requires cloning and building from source.
- Environment variables are mandatory and stored in plaintext config files.
- Focused purely on queries, not schema changes or database management tasks.
- Switching between multiple ClickHouse instances requires manual reconfiguration.
Getting started
Works with
Similar MCPs
- NeonNeon's official MCP for serverless Postgres. Manage projects, branches, and run SQL against any of your databases.
- SupabaseSupabase's official MCP — query Postgres, manage auth, inspect storage buckets, all from your agent.
- PostgresQuery Postgres databases with natural language. Read-only access by default - the agent sees your schema and runs SELECT queries safely.
- SnowflakeSnowflake MCP for warehouse queries. Enterprise data teams use it to let Claude run analytical SQL against the lake.