Skip to content

v0.5.0

Choose a tag to compare

View all tags
@joe-clickhouse joe-clickhouse released this 01 Sep 20:12
· 7 commits to main since this release
v0.5.0
63045ec
This commit was created on GitHub.com and signed with GitHub’s verified signature.
GPG key ID: B5690EEEBB952194
Verified
Learn about vigilant mode.

mcp-clickhouse v0.5.0

This release improves HTTP transport security, query execution reliability, multi-user request isolation, and result handling. It includes breaking HTTP/SSE configuration changes.

Before upgrading

  • HTTP/SSE now validates Host and Origin by default. Wildcard binds require CLICKHOUSE_MCP_ALLOWED_HOSTS.
  • Reverse proxies should preserve Host. Otherwise configure CLICKHOUSE_MCP_TRUSTED_PROXIES.
  • /health remains unauthenticated and exempt from Host and Origin validation.
  • CLICKHOUSE_ALLOW_DROP now also gates destructive DELETE, UPDATE, partition, column, clear, replace, and permanent detach operations.
  • CLICKHOUSE_SEND_RECEIVE_TIMEOUT is capped relative to the MCP query timeout unless explicitly configured.

Highlights

  • Reuse ClickHouse clients across tool calls and attempt server-side cancellation after query timeouts. (#152)
  • Add DNS rebinding protection across HTTP, SSE, fastmcp run, and fastmcp.json. (#226)
  • Safely support trusted reverse proxies and X-Forwarded-Host. (#230)
  • Preserve request-scoped ClickHouse configuration overrides across executor threads. (#221)
  • Expand destructive query protection and avoid false positives inside strings, identifiers, and comments. (#220)
  • Return integers outside JavaScript's safe range as decimal strings. (#210)
  • Reject invalid list_tables page sizes. (#229)
  • Add clearer diagnostics for ClickHouse port and TLS configuration errors. (#212)

This release remains on FastMCP 2 and the MCP 2025-11-25 protocol. FastMCP 4 and MCP 2026-07-28 support are tracked in #218.

docker pull ghcr.io/clickhouse/mcp-clickhouse:0.5.0

Full Changelog: v0.4.1...v0.5.0

Assets 2
Loading