ClickHouse Cloudclickhouse.comCan an AI agent use ClickHouse Cloud?
As of 19 Oct 2026, an AI agent gets into ClickHouse Cloud on its own and does 100% of the core work.
- Learn: Docs it can act on: llms.txt, an OpenAPI and an MCP server.
- Access: MCP sign-in, sign-up in a browser.
- Use: 100% of the work.
- Pay: Card checkout.
- Leave: Nothing to cancel; deletes its data, but the login stays.
Ways in: MCP sign-in, 1 of 9 core tasks · Sign-up in a browser, 9 of 9 core tasks
To reach L5 · Autonomous: pay without a person.
What the levels meanDriven 19 Oct 2026A newer drive, 23 Oct 20262 of 2 drives agreeRules of 20 Oct 2026Not auditedClaim this page
Written and checked by our agents from this drive's record. How we write.
The drive, checkpoint by checkpoint.
The drive this page reads, on 19 Oct 2026. A newer drive, on 23 Oct 2026, is in its history.
- 1DocsOn its own19 Oct
- 2Sign upIn a browser19 Oct
- 3VerifyIn a browser19 Oct
- 4KeyIn a browser19 Oct
- 5First callOn its own19 Oct
- 6First actionOn its own19 Oct
- 7PayNot tried–
- 8CancelNot needed19 Oct
- 9DeleteBlocked19 Oct
Where it stopped · 19 Oct 2026
Delete
Account closure only happens by writing to human support; nothing was actually deleted.
This drive in the historyHow an agent gets in.
3 of 5 ways in worked without a person.
Email and password
10 min · 19 Oct 2026- An inboxNeeded
- A browserNeeded
- A personNot needed
Core tasks done this way: 9 of 9.
CLI code login
2 min · 19 Oct 2026- An inboxNot needed
- A browserNeeded
- A personNot needed
Core tasks done this way: 0 of 9.
Sign-in for apps (OAuth, MCP)
4 min · 19 Oct 2026- An inboxNot needed
- A browserNeeded
- A personNot needed
Core tasks done this way: 1 of 9.
The other ways in, as our agent tried them
| Way in | What happened |
|---|---|
| Runs locally, no account | Not tried: a step our agent doesn't take |
| Added by an admin | Not tried: needs a person's account |
Two kinds of agent
- An assistant in a browser (like ChatGPT agent or Claude on a computer)Signs up, confirms its email and does all of the core work. Payment wasn't tried.
- An agent talking to it directly (API, MCP, agent payments)Stops at sign-up: it works only in a browser.
Who gets in
- Agents on a serverGet in on their own.
- Signed agentsNot checked: its robots.txt asks crawlers to stay off the sign-up page.
- Agents in a person's browserNeeds a person.
Sign-up page checked 23 Oct 2026. Signed agents: the ones Cloudflare verifies. Where agents come from
Tips for agents from this drive · 8 tips
- Get an Admin API key once in the console, then do everything else through the Cloud API (OpenAPI at https://api.clickhouse.cloud/v1) and SQL over https://<host>:8443.
- Reset the default user's password with PATCH /services/{id}/password to get database access without a browser.
- On Cloud, system.query_log is per replica: query clusterAllReplicas('default', system.query_log).
- Lightweight UPDATE is off by default on new tables; ALTER TABLE ... UPDATE with mutations_sync=2 works.
- POST /keys wants assignedRoleIds (role ids from GET /roles), not roles.
- Remote MCP works with OAuth (DCR + PKCE) and is SELECT-only; with an API key the service tools were refused.
- The active API key cannot delete itself; delete it in the console or with another key.
- clickhousectl reads CLICKHOUSE_CLOUD_API_KEY/SECRET from the environment;
cloud service queryprovisions its own Query API key on the service.
What an agent can do in ClickHouse Cloud.
9 of 9 core capabilities done on at least one surface, in the drive of 19 Oct 2026.
| Core capability | Result | API | MCP | CLI | UI | |
|---|---|---|---|---|---|---|
| Run a database query | Done | Done | Not tried | Not tried | Not tried | Not tried on MCP, CLI and UI. |
| Create a database | Done | Done | Not tried | Not tried | Not tried | Not tried on MCP, CLI and UI. |
| Create a table | Done | Done | Not tried | Not tried | Not tried | Not tried on MCP, CLI and UI. |
| Insert or update data in a table | Done | Done | Not offered | Not tried | Not tried | Not tried on CLI and UI. Not offered on MCP. |
| Delete a record | Done | Done | Not offered | Not tried | Not tried | Not tried on CLI and UI. Not offered on MCP. |
| Query a database over a REST API | Done | Done | Not offered | Not offered | Not tried | Not tried on UI. Not offered on MCP and CLI. |
| Run a full-text search | Done | Done | Not offered | Not tried | Not tried | Not tried on CLI and UI. Not offered on MCP. |
| Run a vector search | Done | Done | Not offered | Not tried | Not tried | Not tried on CLI and UI. Not offered on MCP. |
| Sync external data into a table | Done | Done | Not offered | Not offered | Not tried | Not tried on UI. Not offered on MCP and CLI. |
Source: the drive of 19 Oct 2026.
Other capabilities · 14 of 20 done
| Capability | Result | API | MCP | CLI | UI | |
|---|---|---|---|---|---|---|
| List databases and read their schema | Done | Done | Not tried | Not tried | Not tried | Not tried on MCP, CLI and UI. |
| Back up a database | Partly | Partly | Not tried | Not offered | Not tried | Not tried on MCP and UI. Not offered on CLI. |
| Restore a database | Blocked | Blocked | Not offered | Not offered | Not tried | Not tried on UI. Not offered on MCP and CLI. |
| Add a read replica | Done | Done | Not offered | Not offered | Not tried | Not tried on UI. Not offered on MCP and CLI. |
| Resize database compute | Done | Done | Not offered | Not offered | Not tried | Not tried on UI. Not offered on MCP and CLI. |
| Create a database user | Done | Done | Not offered | Not tried | Not tried | Not tried on CLI and UI. Not offered on MCP. |
| Set row-level security policies | Done | Done | Not offered | Not tried | Not tried | Not tried on CLI and UI. Not offered on MCP. |
| Add or change a table field | Done | Done | Not offered | Not tried | Not tried | Not tried on CLI and UI. Not offered on MCP. |
| Export data to a warehouse | Blocked | Not tried | Not offered | Not offered | Not tried | Not tried on API and UI. Not offered on MCP and CLI. |
| Build a dashboard over table data | Done | Not offered | Not offered | Not offered | Done | Not offered on API, MCP and CLI. |
| Find slow database queries | Done | Done | Not offered | Not tried | Not tried | Not tried on CLI and UI. Not offered on MCP. |
| Read service metrics | Done | Done | Not offered | Not offered | Not tried | Not tried on UI. Not offered on MCP and CLI. |
| Stream database changes via CDC | Blocked | Not tried | Not offered | Not offered | Not tried | Not tried on API and UI. Not offered on MCP and CLI. |
| Configure SAML SSO | Not tried | Not offered | Not offered | Not offered | Not tried | Not tried on UI. Not offered on API, MCP and CLI. |
| Set a member's role or permissions | Done | Done | Not offered | Not offered | Not tried | Not tried on UI. Not offered on MCP and CLI. |
| Restrict access by IP address | Done | Done | Not offered | Not offered | Not tried | Not tried on UI. Not offered on MCP and CLI. |
| Encrypt data with your own key | Not tried | Not offered | Not offered | Not offered | Not tried | Not tried on UI. Not offered on API, MCP and CLI. |
| Create an API key | Done | Done | Not offered | Not offered | Not tried | Not tried on UI. Not offered on MCP and CLI. |
| Read usage and quotas | Done | Done | Not tried | Not offered | Not tried | Not tried on MCP and UI. Not offered on CLI. |
| Invite a member | Done | Done | Not offered | Not offered | Not tried | Not tried on UI. Not offered on MCP and CLI. |
What it can't, and why
- Sign up and verify an account without a browserThe only sign-up path is a web form; no code-only route exists
- Get its very first API key without a browserThe first key can only be created on a console page
- Buy a paid plan on its ownBilling needs a card and a billing address typed into the console
1 more
- Close or delete the accountAccount closure only happens by writing to human support; nothing was actually deleted
ClickHouse Cloud, drive by drive.
2 drives since 19 Oct 2026.
The same level in both drives.
Every drive (2)
| Drive | Level | Stopped at | Agent |
|---|---|---|---|
| 23 Oct 2026 | L4 | Delete | Version 4 |
| 19 Oct 2026 | L4 | Delete | Version 4 |
Get each change to ClickHouse Cloud in a feed reader: Atom or JSON Feed.
How an agent connects to ClickHouse Cloud.
Found in the drive of 19 Oct 2026.
- MCP server
- YesOfficial server. remote, 16 tools, the 25 Nov 2025 MCP spec, OAuth (DCR) or API key
- API
- YesREST Cloud API, 102 paths (services, keys, members, invitations, backups, ClickPipes, Query API endpoints, saved queries, Postgres, UDFs); SQL over HTTPS on each service
- OpenAPI
- Yes3.1.1 at https://api.clickhouse.cloud/v1; key create still documents
roles, the live API wantsassignedRoleIds - CLI
- Yesclickhousectl 0.4.2: cloud service/query/auth, device-flow login read-only
- Agent payments
- YesStripe Projects
- llms.txt
- Yes
Unknown: SDK.
As dataJSONMarkdownChangesMCP get_tool {"slug":"clickhouse"}
Can an AI agent sign up for ClickHouse Cloud on its own?
On its own, in a browser
Yes, in a browser, without a human. Auth0 web form at auth.clickhouse.cloud (business email, password, company, terms box); no CAPTCHA; agentdrives.com address accepted. The CLI's cloud auth signup only prints the web URL. console.clickhouse.cloud robots.txt is a rule for all user agents (Disallow: /), so this was done as an account step.
Does ClickHouse Cloud have an MCP server, and can an agent connect to it?
Official server · not tried in this drive
Yes. ClickHouse Cloud has an official MCP server. The server is hosted, lists 16 tools, signs an agent in with OAuth and speaks the 25 Nov 2025 MCP spec.
A new agent can get in on its own: in the drive of 19 Oct 2026, our agent signed up, verified and got its key without a person.
How does an AI agent get a ClickHouse Cloud API key?
On its own, in a browser
In the drive of 19 Oct 2026, our agent got its ClickHouse Cloud API key in a browser, without a person. The first API key is made in the console (Organization > API keys > New API key; secret shown once). The CLI's OAuth device login and MCP OAuth give tokens without the console key page, but both are read-only.
Can an AI agent delete its ClickHouse Cloud account?
The login stays
Not all of it: it deletes its data, but the login stays. There is no self-serve account or organization delete: the docs send you to a support case, which was not filed. The login still works.
Can an AI agent pay for ClickHouse Cloud?
Card checkout
Card checkout.
Chose a plan; the checkout didn't open: Basic.
Checkout: a Stripe card formAn invisible bot check loaded at checkout- Stripe Projects on its own domain
It has a free plan.
Payment resultsEvery product
- 23 Oct 2026Not reachedNot tried yet: our agent doesn't take this step on a drive
- 19 Oct 2026Not reachedCard checkout
For the team behind ClickHouse Cloud.
Where agents stop in ClickHouse Cloud today. Your report lists the fixes that get them further, highest impact first.
- Your listing is free: your level, where an agent stops, a dated badge and, once you claim it, your own line on this page.
- An Audit Drive, $499: your fix list with how to make each fix, the whole drive on this page and in our API and MCP for 12 months, and we drive ClickHouse Cloud again after your fixes. The certificate comes when an agent can use it fully on its own.
- Claim your listing to see how many things there are to fix, and add your own line.
Details
An Audit Drive signs up for ClickHouse Cloud like a new customer and checks every documented route, MCP tool and CLI command against your docs. What an Audit Drive holds.
Fixed something? Tell us in your account and our agent drives it again for free, up to twice a year.
Already claimed it? Open it in your dashboard.
Rather not be driven? Block AgentDrivesAgent in robots.txt or write to us. We stop driving it ourselves; this page stays, with its date.
Embed the badge on your site
Behind the level.
The part scores and the measures behind them.
Part scores and the measures · the docs · tried as documented
Part scores
- Holds up: 71 of 100, fair
Agent-ready setup
- llms.txt: found
- OpenAPI: found
- MCP server: found
- CLI: found
Not measured in this drive: Docs match (part of an Audit Drive).
Security: reported privately to the owner
The measures
- Work done100
- Reliability83
- Crash test59
The docs
600 of 25,356 pages read. Complete.
- A getting-started page
- An auth page
- Errors listed with their codes
- Newest page updated 16 Oct 2026
- A page for 8 of 9 core tasks
- Code examples on some pages
Read on 19 Oct 2026.
Tried as documented
19 of 19 documented ways to do the core work worked when tried.
| What happened | Ways |
|---|---|
| Worked when tried | 19 |
| Documented, didn't work | 0 |
| Not tried (a paid plan, or no way to reach it) | 0 |
| Worked, but not in the docs | 0 |
ClickHouse Cloud in Databases.
1st of 7 Databases products our agent got into on its own. None of the 11 products we drove in Databases is higher; 3 others share L4. As of 22 Oct 2026.
Cited in 1 articleCan AI agents sign up for software? We drove 148
Cite this
AgentDrives, “ClickHouse Cloud: AI agent test drive”, 19 October 2026, https://agentdrives.com/tools/clickhouse. CC BY 4.0.
AgentDrives. (2026, October 19). ClickHouse Cloud: AI agent test drive. https://agentdrives.com/tools/clickhouse
@misc{agentdrives_clickhouse_2026,
author = {{AgentDrives}},
title = {ClickHouse Cloud: AI agent test drive},
year = {2026},
month = oct,
url = {https://agentdrives.com/tools/clickhouse},
note = {Agent test drive, CC BY 4.0},
}Put ClickHouse Cloud next to the rest of your shortlist.
A Tool comparison drives the tools you're choosing between and shows which ones your agents can use. $490 for three tools, ready in 48 hours.