Databases - official Databricks server
Databricks SQL MCP server
A Databricks-provided MCP (system.ai.dbsql) that lets agents run AI-generated SQL on a SQL warehouse against Unity Catalog tables, with access governed by the caller's Unity Catalog and warehouse permissions. Queries run asynchronously and the agent polls for results. It is served from your own instance at https://<workspace-hostname>/ai-gateway/mcp-services/system.ai.dbsql with OAuth or API key auth.
Last verified 1 tool5 sources
Install
Claude Code
About Claude Codeclaude mcp add --transport http --scope user \
--client-id claude-code --callback-port 3118 \
databricks-tools \
"https://<workspace-hostname>/ai-gateway/mcp-services/<catalog>.<schema>.<service-name>"Codex
About Codex[mcp_servers.dbsql]
url = "https://<workspace-hostname>/ai-gateway/mcp-services/system.ai.dbsql"
http_headers = { Authorization = "Bearer <databricks-pat>" }Cursor
About Cursor{
"mcpServers": {
"dbsql": {
"url": "https://<workspace-hostname>/ai-gateway/mcp-services/system.ai.dbsql",
"headers": {
"Authorization": "Bearer <databricks-pat>"
}
}
}
}Generic
https://<workspace-hostname>/ai-gateway/mcp-services/system.ai.dbsqlTools
execute_sql- Execute a SQL query; accepts an optional warehouse_id _meta parameter (name taken from the docs' Python example).
As documented on October 17, 2026. A running server reports its current list through tools/list.
Notes and caveats
- Requires an account admin to enable the Unity Gateway beta from the account console Previews page.
- Reads and writes are allowed by default; set disallow_writes to true in the built-in system.ai.dbsql_policy policy to make it read-only.
- The Codex and Cursor snippets are the docs' personal-access-token configs, which the docs label for local testing; OAuth variants are also documented.
- For Claude Code, replace <catalog>.<schema>.<service-name> with system.ai.dbsql.
- Uses Databricks SQL pricing.
- A legacy workspace endpoint https://<workspace-hostname>/api/2.0/mcp/sql (sql OAuth scope, Managed MCP Servers workspace preview) remains for existing integrations, alongside legacy AI Search and Unity Catalog functions endpoints.
- Databricks also offers system.ai.sandbox (Python, SQL or shell code in an isolated environment with no network egress, Unity Gateway beta) and proxied MCPs for Slack, GitHub, Atlassian, Google Workspace and Microsoft 365.
- Those MCPs connect to other vendors' services.
More MCP servers for databases
- DatabricksStatus: GA
Genie One MCP server
A Databricks-provided MCP (system.ai.genie_one_mcp) governed through Unity Gateway that sends natural-language data questions to Genie One, which writes SQL and returns answers grounded in Genie Ontology with links back to Databricks sources. Unity Catalog permissions are enforced on every request.
Transport: Streamable HTTPAuth: OAuth or API key - AirtableStatus: GA
Airtable MCP server
Airtable's official hosted MCP server lets AI tools list and create bases, change table and field schema, read and write records, build interfaces, submit forms and draft automations, all within the user's existing permissions.
Transport: Streamable HTTPAuth: OAuth or API key - Chroma
Chroma MCP server
Self-hosted MCP server that lets agents create and manage Chroma collections and add, query, update and delete documents. It supports vector search, full-text search and metadata filtering against ephemeral, persistent, self-hosted HTTP or Chroma Cloud clients.
Transport: stdioAuth: Other - ClickHouseStatus: Beta
ClickHouse Cloud remote MCP server
A fully managed remote MCP endpoint for ClickHouse Cloud services that lets agents list databases and tables, run read-only SELECT queries, and inspect organizations, services, backups, ClickPipes and billing. All 13 tools are read-only.
Transport: Streamable HTTPAuth: OAuth or API key - ClickHouse
ClickHouse MCP server
Open-source MCP server from ClickHouse that lets AI assistants list databases and tables and run SQL against any ClickHouse instance, self-hosted or Cloud. It also has an optional chDB embedded engine. It runs locally over stdio by default, and can also serve Streamable HTTP.
Transport: stdio, Streamable HTTP, SSEAuth: Other - CockroachDBStatus: GA
CockroachDB Cloud MCP server
Managed MCP server built into CockroachDB Cloud that lets AI tools list clusters, explore live schemas and run SQL against clusters in a CockroachDB Cloud organization. Connections can cover every cluster the user or service account can access, or be scoped to one cluster with an mcp-cluster-id header.
Transport: Streamable HTTPAuth: OAuth or API key
Related reading
- The Harness Is the New Cost Lever: Databricks' Benchmark and Pi's Context DisciplineCoding harness choice moved cost per task by more than 2x at the same quality in a Databricks benchmark. Why Pi's minimal context discipline explains the gap.
- Omnigent: Databricks' Meta-Harness for Orchestrating Claude Code, Codex, and Custom AgentsOmnigent is a Databricks meta-harness above Claude Code and Codex that keeps sessions, policies and skills portable. What it does and how to install it.
- What's New in Mastra (Late 2026): Harness, AgentController GA, Eval Gates and MCP 2.xMastra in late 2026: goals, schedules, signals, AgentController GA, eval gates and MCP 2.x, with type-checked TypeScript examples and honest tradeoffs.
- MCP vs A2A vs Function Calling: Which Layer Does What in 2026MCP vs A2A vs function calling compared on the 2026-07-28 MCP spec and A2A 1.0: what each protocol does, where they overlap, and how to stack them.
- Pydantic AI V2 in Late 2026: Capabilities, Graphs, Evals and MCPPydantic AI V2 explained through v2.57.0: capabilities, typed output, Conversation storage, caching, graphs, evals, MCP Apps and Logfire, with checked code.
- Reverse Engineer Anything (REA): What the MCP Server Does and Where the Line IsREA (Reverse Engineer Anything) is an MIT-licensed MCP server that lets Claude Code, Codex or Cursor inspect binaries, Electron apps and APKs. How to try it.
FAQ
What does the Databricks SQL MCP server do?
A Databricks-provided MCP (system.ai.dbsql) that lets agents run AI-generated SQL on a SQL warehouse against Unity Catalog tables, with access governed by the caller's Unity Catalog and warehouse permissions. Queries run asynchronously and the agent polls for results. The vendor documents 1 tool, including execute_sql.
How do I add the Databricks SQL MCP server to Claude Code?
Databricks documents a Claude Code config; copy it from the Claude Code section of this page. Snippets for Codex, Cursor and Generic are there too.
Does the Databricks SQL MCP server need authentication?
Yes, OAuth or API key. Transport: Streamable HTTP. Status: Beta, last checked October 17, 2026.
Sources
Last verified against 5 Databricks pages, then re-checked independently.
- docs.databricks.comhttps://docs.databricks.com/aws/en/agents/mcp-tools/databricks-sql
- docs.databricks.comhttps://docs.databricks.com/aws/en/agents/mcp-tools/built-in-mcp-services
- docs.databricks.comhttps://docs.databricks.com/aws/en/ai-gateway/coding-agent-claude
- docs.databricks.comhttps://docs.databricks.com/aws/en/ai-gateway/coding-agent-codex
- docs.databricks.comhttps://docs.databricks.com/aws/en/ai-gateway/coding-agent-cursor
Newsletter
New MCP servers, the week they ship
One email per week. New official MCP servers, the coding tools that support them and how developers wire them up.