Clickhouse Cloud Management

What it does

This skill automates ClickHouse Cloud user and permission management using SQL commands sent over an HTTP interface. It allows AI agents to create database users, grant or revoke permissions (GRANT/REVOKE), and troubleshoot authentication issues within a ClickHouse Cloud environment. Crucially, this skill manages database users – distinct from API keys which manage the ClickHouse Cloud management API.

When to use it

This skill is useful in these scenarios:

• Creating new database users for your ClickHouse Cloud instances.
• Managing user permissions within ClickHouse databases (granting or revoking access).
• Testing connectivity to your ClickHouse Cloud environment.
• Diagnosing and resolving authentication problems.
• Understanding the difference between API keys and database users in ClickHouse Cloud.

Key capabilities

• User Creation: Creates new database users using CREATE USER SQL commands.
• Permission Management: Grants and revokes permissions on databases and tables using GRANT and REVOKE SQL commands.
• User Deletion: Removes existing database users with the DROP USER command.
• HTTP Interface Interaction: Communicates with ClickHouse Cloud exclusively via an HTTP interface (port 443, HTTPS).

Example prompts

Here are some example prompts you can use:

• "Create a new ClickHouse user named 'my_reader' with a strong password."
• "Grant SELECT permissions on the 'deribit.*' database to the user 'my_reader'."
• "Delete the user 'my_reader' from ClickHouse Cloud."

Tips & gotchas

• Password Requirements: ClickHouse Cloud enforces strict password policies: minimum 12 characters, at least one uppercase letter, and at least one special character.
• API Key vs. Database User: Remember this skill manages database users for authenticating to ClickHouse itself; API keys are used for the management console.
• HTTP Only: ClickHouse Cloud only exposes an HTTP interface publicly. Native protocol access requires AWS PrivateLink and enterprise setup.