M
MCP Directory CURATED DIRECTORY
911 MCP servers indexed
中文
← Back to directory
COMPARE UP TO 4 SERVERS

Compare MCP servers

Compare scores, permissions, risks, and fit in one decision-focused table.

DimensionBigQuery MCP ServerSecure, read-only access to BigQuery for LLMs.MCP ClickHouseConnect ClickHouse to your AI assistants
FMRS62 / 100 · C79 / 100 · B
Reliability8 / 2012 / 20
Security and permissions16 / 2018 / 20
Maintenance10 / 2017 / 20
Documentation15 / 2017 / 20
Setup experience13 / 2015 / 20
Best for
  • Developers and analysts who want to query BigQuery quickly via AI assistants
  • Organizations that need to prevent AI agents from modifying data
  • Environments with sensitive data that require field-level access restrictions
  • Teams already using ClickHouse who want AI assistants to access data directly.
  • Scenarios requiring fast, read-only data queries and schema exploration.
Not for
  • Scenarios requiring write, update, or delete operations
  • Users who need unrestricted access to all columns
  • Strict security environments that cannot tolerate data leaving the network (since results are sent to LLM providers)
  • Scenarios requiring write access to the database without explicit opt-in.
  • Production environments with stringent security requirements that avoid default permission settings.
Required permissions
  • BigQuery read permissions (e.g., roles/bigquery.user or roles/bigquery.dataViewer)
  • For service account auth, access to the service account key file
  • For advanced features, permission to list datasets and tables, and run dry-run queries
  • Requires read-only access to ClickHouse database (default).
  • Optional: write access via CLICKHOUSE_ALLOW_WRITE_ACCESS.
  • Optional: destructive operations via CLICKHOUSE_ALLOW_DROP.
Risks and side effects
  • Data exfiltration: query results are sent to LLM providers (Anthropic, OpenAI) and may leave your network
  • Despite field restrictions, AI agents may attempt to infer data through crafted queries
  • Misconfiguration may weaken restrictions, e.g., incorrectly setting preventedFields or maximum bytes billed
  • If write access is enabled, AI might make unintended modifications.
  • If DROP access is enabled, data deletion could occur accidentally.
  • Credentials may be exposed via environment variables.
Supported clientsClaude Desktop, Claude CodeClaude Desktop
Tools04