MCP Index
Official MCPGenerally availablePublishes llms.txt

ClickHouse MCP Server

Solid all-round agent support with no single blocker.

Read-only by design and better for it — an analytics warehouse is exactly where you want agents querying, not writing.

Database
4.5/5

Agent-readiness

Excellent overall

Weighted across four pillars

Reach3
Cost5
Control5
Trust5
Official MCP Server
Visit Website
0 views · 0 clicks

What an agent can do here

Official MCP server for running analytical SQL against ClickHouse Cloud or self-hosted clusters, read-only by default.

Action depth
Read only

Agents can query data but cannot change anything.

Hosting
Self-run

You run the server process yourself.

Auth
API key
Unattended
Headless-capable

A long-lived token works, so this can run on a schedule.

Blast radius
Low

Trivially reversible.

Permission scoping: Granular scopes

What it costs to let an agent act

FreeUnmetered

Works against self-hosted ClickHouse for free; Cloud usage is metered separately.

How the score breaks down

Every factor below is scored by a fixed rubric, not by opinion — so two tools with the same shape always get the same number.

Reach

Workable3/5

Can an agent actually do the job?

  • MCP serverFirst-party2/2
  • Action depthRead only0/1.5
  • HostingSelf-run0.5/1
  • Fallback pathAPI + CLI0.5/0.5

Cost

Excellent5/5

What does it cost to let the agent act?

  • Plan requiredFree3/3
  • Usage meteringUnmetered2/2

Control

Excellent5/5

Can I let it run unattended?

  • Permission scopingGranular scopes1.5/1.5
  • Unattended authHeadless-capable1.5/1.5
  • Blast radiusLow1.5/1.5
  • Auth frictionAPI key0.5/0.5

Trust

Excellent5/5

Will this still work next month?

  • MaintainerVendor2/2
  • MaturityGenerally available1.5/1.5
  • Research confidenceHigh1/1
  • FreshnessVerified 2d ago0.5/0.5

ClickHouse vs other database tools

Sorted by overall score. Filter and sort the full category →

Database MCP servers compared
ToolOverallReachCostControlTrustCost to actCan doRisk
NeonExcellentBest agent-safety story in databases: instant branches mean a destructive agent action is a discarded branch, not an incident.
4.5
5
5
3.5
5
FreeUnmeteredAdminNeeds a humanLowblast radius
SupabaseExcellentAmong the most capable database servers — which is the risk: unrestricted, an agent can alter schema. Read-only flag first, loosen deliberately.
4.5
4.5
5
4
5
FreeUnmeteredAdminHeadlessHighblast radius
MongoDBExcellentCovers both data and infrastructure, which is unusual — and means an agent can spin up billable clusters. Scope the API key.
4.5
4.5
5
4
5
FreeUnmeteredAdminHeadlessHighblast radius
PrismaExcellentUnusually well-matched to coding agents: the MCP server, the CLI and the schema language all target the same workflow.
4.5
4.5
5
3
5
FreeUnmeteredAdminHeadlessMediumblast radius
ClickHouseExcellentRead-only by design and better for it — an analytics warehouse is exactly where you want agents querying, not writing.
4.5
3
5
5
5
FreeUnmeteredRead onlyHeadlessLowblast radius
RedisGoodVendor-maintained and full read/write — treat it like production shell access, because on a cache that is what it is.
4
4.5
5
2.5
5
FreeUnmeteredAdminHeadlessHighblast radius

Reviews

Write a review

Please log in to leave a review

Log In

Setup

How we know

Last verified
2026-09-29 · 2d ago
Research confidence
high
Maturity
Generally available

Spotted something wrong? Send a correction — vendor corrections are applied first.

Official MCP
Visit Website