nifi-clickhouse-kafka-mcp runs on your own machine — the client starts it, so there is no endpoint to ping. 401 installs a week from pypi. Last commit 19 Oct 2026.
Read-only Apache NiFi, ClickHouse and Kafka access with OIDC, audit and secret masking
Today is the operative word: we check nifi-clickhouse-kafka-mcp every 15 minutes and re-read its code on every release. Watch it and you find out the day that stops being true.
This server runs on your own machine — install it with the package manager and the client starts it for you. Package name taken from the official registry entry.
claude mcp add nifi-clickhouse-kafka-mcp -e 'NIFI_CLICKHOUSE_KAFKA_MCP_CONFIG=<NIFI_CLICKHOUSE_KAFKA_MCP_CONFIG>' -- uvx nifi-clickhouse-kafka-mcp
{
"mcpServers": {
"nifi-clickhouse-kafka-mcp": {
"command": "uvx",
"args": [
"nifi-clickhouse-kafka-mcp"
],
"env": {
"NIFI_CLICKHOUSE_KAFKA_MCP_CONFIG": "<NIFI_CLICKHOUSE_KAFKA_MCP_CONFIG>"
}
}
}
}
[mcp_servers.nifi-clickhouse-kafka-mcp]
command = "uvx"
args = ["nifi-clickhouse-kafka-mcp"]
env = { NIFI_CLICKHOUSE_KAFKA_MCP_CONFIG = "<NIFI_CLICKHOUSE_KAFKA_MCP_CONFIG>" }
{
"mcpServers": {
"nifi-clickhouse-kafka-mcp": {
"command": "uvx",
"args": [
"nifi-clickhouse-kafka-mcp"
],
"env": {
"NIFI_CLICKHOUSE_KAFKA_MCP_CONFIG": "<NIFI_CLICKHOUSE_KAFKA_MCP_CONFIG>"
}
}
}
}
{
"servers": {
"nifi-clickhouse-kafka-mcp": {
"type": "stdio",
"command": "uvx",
"args": [
"nifi-clickhouse-kafka-mcp"
],
"env": {
"NIFI_CLICKHOUSE_KAFKA_MCP_CONFIG": "<NIFI_CLICKHOUSE_KAFKA_MCP_CONFIG>"
}
}
}
}
Put your own value in place of
<NIFI_CLICKHOUSE_KAFKA_MCP_CONFIG> (Path to the config file; see examples/config.example.yaml in the repository).
The author’s registry entry marks it as required.
Secure, read-only access to Amazon Redshift with schema introspection and smart sampling
Secrets vault for Claude Code with audit logs, access rules, and AES-256 encryption.
Read-only access to secrets in a local KeePassXC vault. Runs commands with them injected.
Read-only Kubernetes MCP server: inspect resources, logs, events, and metrics. Secrets are masked.
Read-only MCP server for exposing database schema metadata without row data.
Read-only codebase audits for coding agents: secrets, RLS, deps, review verdicts. No writes.
Send and read one-time encrypted secrets with local encryption.
Local read-only OpenAPI and Swagger inspection with secret-safe schema summaries. Tools include...
Answers built from our own checks of this server.