Analytics clusters are where a stray write does the most damage, and this server will not pass one — the restriction lives in the server rather than in a prompt asking the model to behave. Three tools is the whole surface, so it is a query window and nothing more: no inserts, no schema changes, no cluster administration.
A small ClickHouse server with three tools: list the tables, read one table's schema, run a SELECT. Only SELECT statements are accepted, which is stated as a deliberate constraint rather than an unimplemented feature.
- Every table in the configured ClickHouse database, listed
- The schema of a named table
- SELECT queries executed against the cluster — and only SELECT queries
A current Node.js and a reachable ClickHouse instance, addressed through the environment: host, port, user and password, with TLS and certificate verification settings and timeout values alongside them. ClickHouse's public SQL playground works as a target if you want to try it before pointing it at your own.