Persyst connector
Read-only ClickHouse MCP connector for ChatGPT, Claude and Copilot
Connected once by the company, read-only, with no ClickHouse Cloud account or credentials for each member.
Updated on November 1, 2026
Your tools
- Connected once, by the admin
- Rights per person, team or client
- Who read what, and when
Everyone’s AI
In short
- Persyst works without an MCP server to install: it is a remote MCP server, shared by the whole team, with no developer tooling on anyone’s computer.
- Read-only: SELECT or WITH … SELECT, SHOW TABLES and DESCRIBE only, a single statement, at most 200 rows and 60 seconds per query.
- Per table: a team sees events and sessions, not users. A table that is not opened is rejected, even when named in a query.
- Credentials stay encrypted in Persyst; the assistant receives results, never the password or the host.
EXAMPLES
What your team can ask
How many daily active users this week, compared with last week?
An average of 18,400 daily active users from October 26 to November 1, against 16,900 the week before (+9%). Tuesday’s peak, 21,300, follows the newsletter send. Query on events, counting distinct user_id per day.
Sources consulted
- Table events · read
Which features do paying accounts use most this month?
PDF export comes first with 42% of paying accounts, ahead of board sharing (31%) and alerts (18%). Among free accounts, alerts stay under 4%. Query on events joined to accounts, October 1 to 31.
Sources consulted
- Table events · read
- Table accounts · read
HOW IT WORKS
ClickHouse in your AI, in three steps
Connect the service
In Data sources, an administrator enters the ClickHouse Cloud service’s HTTPS host, the port, a read-only SQL user and its password. Persyst tests the connection and encrypts the credentials. The ClickHouse guide covers the read-only user and profile to create.
Open tables to each team
The administrator picks tables from the discovery, then, in Access management, opens them to a team, a client or a member. Opened tables can be changed at any time.
Ask from the assistant
The member asks in ChatGPT, Claude or Copilot. The assistant describes the allowed tables, writes a query and sends it to Persyst, which checks it, runs it within its limits and returns the result. The history keeps track of who queried which table, and when.
TOOLS
What your assistant can do
ClickHouse· 1 tool
Opened team by teamRuns a read-only SELECT, SHOW TABLES or DESCRIBE query on the tables opened to the team, at most 200 rows and 60 seconds.
query_clickhouse
Rights and audit trail
Rights per person, team or client.
Then, inside the tool, only the items you open. The rest does not exist for the AI.
One-click revocation.
Removing a member cuts their access in every AI at once.
A history.
Who used which tool, and when.
Credentials that stay put.
They remain encrypted in Persyst, never in the assistants.
COMPARISON
Persyst or a ClickHouse MCP server?
| Criterion | Persyst | Vendor’s ClickHouse MCP server |
|---|---|---|
| Who authenticates | The company, once, through an administrator. | Each member, with their vendor account. |
| Installation | None: a remote MCP server, authorized from the assistant. | None. |
| Where credentials live | Encrypted in Persyst, never in the assistant. | One token per member, managed by the assistant. |
| Scope | Per person, team or client, then per opened item. | Everything the account allows. |
| History | Who used which tool, and when, for the whole team. | Depends on the vendor. |
| When a member leaves | One-click revocation, in every AI. | An account to disable at the vendor. |
What this connector does not do
- No writes: no INSERT, ALTER, DROP or admin command, and no multiple statements.
- No table outside the allowlist: a query naming a table that is not opened is rejected.
- No bulk extraction: 200 rows per query. A full export goes through your usual tools.
- ClickHouse Cloud, through its HTTPS interface; no personal connection: ClickHouse is connected at the organization level, by an administrator.
Questions
Frequently asked questions
Is there an official ClickHouse MCP server?
Yes. ClickHouse offers a remote MCP server for ClickHouse Cloud, where each user signs in with their ClickHouse Cloud account, and an open-source server to install on a computer. Persyst serves the people who have no account: an administrator connects a read-only user once and only opens each team’s tables to it.
How is read-only guaranteed?
Persyst only accepts a single read statement and rejects tables that are not opened. The setup guide also recommends a dedicated ClickHouse user with a readonly = 1 profile and server-side execution limits.
Can an executive query ClickHouse without knowing SQL?
Yes. They ask in plain language in their assistant. The assistant describes the allowed tables, writes the query, Persyst runs it and returns the result. No account, no dashboard to maintain.
Can different teams see different tables?
Yes. The connection is shared, the opened tables are specific to each team. Product sees events and sessions; finance also sees billing; nobody sees users.
What about PostgreSQL?
PostgreSQL has its own Persyst connector, with the same guarantees: read-only, chosen tables, 200 rows and 60 seconds per query.
