Loading ToolBench
Model Context Protocol server for ClickHouse — query and manage databases with SQL-classification-based security modes and access-control flags.
Cluster topology from system.clusters (shards, replicas, hosts).
Column names, types, defaults, and comments for a table.
Execute a single SQL statement (INSERT/CREATE/ALTER, or a destructive DROP/TRUNCATE/DELETE). The statement is classified: writes need read-write mode; destructive statements need admin mode AND CLICKHOUSE_ALLOW_DELETE=true. Pass an optional `database` for allowlist/protection checks.
List databases and their engines.
List tables in a database with engine, row count, and size.
Run a SELECT/SHOW/DESCRIBE query and return rows. Non-read statements are refused here — use `execute` (read-write mode) for those. Results are capped at CLICKHOUSE_MAX_ROWS.
Currently executing queries from system.processes (id, user, elapsed, memory).
| Scored | Grade | Overall | Spec posture | Rubric |
|---|---|---|---|---|
| 2026-09-23 | F | 13 | 2026-07-28+ | v2 |
Non-zero metrics from system.metrics (connections, merges, memory, etc.).
Return the full CREATE TABLE statement (schema, engine, settings) for a table.
Part count, row count, on-disk size, and time range from system.parts.