ajeetraina777/sbx-clickhouse-kits:latest

schemaVersion: "2"
kind: mixin
name: clickhouse
displayName: ClickHouse (remote connector)
description: 'Connects an agent to a remote ClickHouse warehouse (ClickHouse Cloud or self-hosted) via the official ClickHouse MCP server. Queries run over the HTTP interface so the password is injected by the sbx proxy and never lives inside the container. Edit the CLICKHOUSE_* values below for your warehouse; set the password with: sbx secret set -g clickhouse.'
agentInstructions:
    content: |
        ClickHouse remote warehouse: the official ClickHouse MCP server is installed
        and registered as `clickhouse`. It connects over the HTTP interface to
        CLICKHOUSE_HOST; the password is injected by the sbx proxy on requests to
        that host, so it never appears in this container.

        Use the MCP tools to explore and query the warehouse:
          - list databases and tables
          - inspect table schemas
          - run read (SELECT) queries — the server runs them read-only

        The native protocol (clickhouse-client on port 9000/9440) is NOT wired up:
        its auth cannot be proxy-injected. Query over HTTP via the MCP tools (or
        `curl` to the HTTP interface, which the proxy also injects).
permissions:
    network:
        allow:
            - CHANGE_ME.clickhouse.cloud
            - pypi.org
            - files.pythonhosted.org
credentials:
    - service: clickhouse
      description: 'ClickHouse password (set it with: sbx secret set -g clickhouse)'
      apiKey:
        name: CLICKHOUSE_PASSWORD
        inject:
            - domain: CHANGE_ME.clickhouse.cloud
              header: ""
              format: '%s'
              username: default
environment:
    variables:
        CLICKHOUSE_DATABASE: default
        CLICKHOUSE_HOST: CHANGE_ME.clickhouse.cloud
        CLICKHOUSE_PASSWORD: proxy-managed
        CLICKHOUSE_PORT: "8443"
        CLICKHOUSE_SECURE: "true"
        CLICKHOUSE_USER: default
        CLICKHOUSE_VERIFY: "false"
setup:
    install:
        - command: pip install --break-system-packages 'mcp-clickhouse'
          user: "1000"
          description: Install the official ClickHouse MCP server (clickhouse-connect over the HTTP interface)
    startup:
        - command:
            - sh
            - -c
            - command -v claude >/dev/null 2>&1 && claude mcp add clickhouse -- /home/agent/.local/bin/mcp-clickhouse >/dev/null 2>&1 || true
          user: "1000"
          description: Register the ClickHouse MCP server with the Claude agent (best-effort; no-op elsewhere)
    files:
        - path: /home/agent/.clickhouse/mcp.json
          content: |
            {
              "mcpServers": {
                "clickhouse": {
                  "command": "/home/agent/.local/bin/mcp-clickhouse",
                  "args": []
                }
              }
            }
          onlyIfMissing: true