Strict Read Only Enforcement With Dual Layer Validation

via “strict read-only enforcement with dual-layer validation”

** - Query your [ClickHouse](https://clickhouse.com/) database server.

Unique: Implements dual-layer read-only enforcement: server-side detection via get_readonly_setting() function that checks ClickHouse read_only setting and applies client constraints, combined with MCP tool schema that restricts run_select_query to SELECT statements only. This prevents both server-level write operations and protocol-level bypass attempts.

vs others: More secure than single-layer enforcement because it combines server-side setting detection with client-side validation, preventing bypass through either layer independently. Unlike generic database tools that rely solely on database permissions, this approach enforces read-only at the MCP protocol level.