Our grade: 4 checks
Based on public data, not a full audit. See how we grade. Something changed? Request a re-grade.
Community rating
-
No community reviews yet
Ran this server? Tell others if you would trust it in production. Reviews are separate from our grade.
Write a reviewWhy it got an A
ClickHouse's own server, and this grade describes the hosted ClickHouse Cloud one at mcp.clickhouse.cloud/mcp (Streamable HTTP, sign in with OAuth 2.0 or a Cloud API key); it is the server ClickHouse's Claude plugin (ClickHouse/clickhouse-claude-code-plugin, Apache-2.0) wires up, alongside best-practice skills. ClickHouse's docs say every tool on it is read-only: run_select_query, database and table listing, plus service, backup, ClickPipes and billing tools. It must be enabled per service, and access follows the user's or API key's permissions. ClickHouse also publishes a separate open-source local server, ClickHouse/mcp-clickhouse (Apache-2.0, pip mcp-clickhouse, stdio by default); it is not what is graded here, but its queries are read-only unless you set CLICKHOUSE_ALLOW_WRITE_ACCESS, and drops and truncates need a second flag that its README calls an accident guard, not a security boundary. Biggest deduction: the hosted server is closed source and the people behind it are not visible, so maintenance and shell-out could not be fully checked; the plugin repo itself shows only bot commits. Because the tools are read-only the blast radius is small, but SELECT can still read every table the account can see, so use an API key with narrow roles and an expiry date.
How to connect
claude plugin install clickhouse@claude-plugins-officialIs ClickHouse MCP Server safe?
Is ClickHouse MCP Server safe to use?
ClickHouse MCP Server grades A (strong public trust signals). Upkeep is hard to verify (closed source or a single maintainer), so pin the version you tested. It runs locally over stdio, so it acts with your machine's access.
Does ClickHouse MCP Server have known vulnerabilities?
Not in our current data: it has no open CVEs or advisories. We re-check as new ones are published.
Does ClickHouse MCP Server support authentication?
Yes. It requires a login, so access can be tied to a person or a scoped key.
Alternatives in Databases & Data Stores
- A Airtable MCP ServerAirtable's own hosted server. List your workspaces and bases, read and search records, and create or update them, using the permissions you already have in Airtable.
- A Databricks Managed MCP ServersDatabricks-hosted MCP servers in each workspace for Genie, SQL, Unity Catalog functions and vector search, signed in with OAuth and limited by Unity Catalog.
- A MongoDB MCP ServerQuery and administer MongoDB and Atlas clusters from an agent.
- A Neon MCP ServerOfficial hosted Neon server to manage Postgres projects and branches, run SQL, and inspect schema.
- A PlanetScale MCP ServerPlanetScale's official hosted MCP server for its Postgres and Vitess databases - schema, read and write SQL, Insights and branch metrics - with per-database access levels and an admin read-only switch.
Embed this badge
[](https://trustedmcp.io/servers/clickhouse-mcp)<a href="https://trustedmcp.io/servers/clickhouse-mcp"><img src="https://trustedmcp.io/badge/clickhouse-mcp.svg" alt="TrustedMCP grade A" height="80"></a>Community reviews
No published community reviews yet.
Write a review
Ran this server? Tell other teams how it went. You get one review per server. We email you a link to confirm it, then an editor checks it before it goes up. We never show your email.