Apache Doris MCP Server
Apache Doris's official read-only MCP server: catalogs, queries, cluster diagnostics, search and lineage
Install
pip install doris-mcp-server==1.0.0Then set DORIS_HOST, DORIS_PORT, DORIS_USER, DORIS_PASSWORD.
This is third-party code. Review the repository files before installing.
What it does
The server exposes the Apache Doris analytical database to the agent in read-only mode. Tools are grouped into eight domains: catalogs and tables, queries with plans and profiles, cluster health, ingestion and materialized views, text and vector search, data quality and lineage, lakehouse external catalogs and a semantic layer. The agent first asks a domain for its authorized child tools and schemas, then calls the one it needs. Doris RBAC decides object access, and the server bounds result size, timeouts and SQL shape.
Who it is for. For analysts and data engineers working with Apache Doris.
Good fit when
- You need to explore Doris schema and data with no risk of changes
- You need to analyze a slow query via plan and profile
- You need to check cluster health, ingestion or data freshness
Not a fit when
- You need to modify data or schema: the server is read-only
- You use another database or Doris older than 2.0
Example request
Show today's slowest queries and explain why the first one is slowLimitations
Requires Python 3.12, Apache Doris 2.0 or newer and network access to the FE MySQL port. The package is marked beta. Clients on MCP versions before 2026-07-28 need a separate legacy adapter. Non-loopback HTTP requires authentication setup.
How to disable. Remove the server entry from your MCP client config and run pip uninstall doris-mcp-server.
MCP
- Transport
- stdio, http
- Authentication
- not required
| Environment variables | |
|---|---|
| DORIS_HOST required | Doris FE host |
| DORIS_PORT | FE MySQL port, usually 9030 |
| DORIS_USER required | Doris user |
| DORIS_PASSWORD required, secret | Doris user password |
| DORIS_DATABASE | Default database |
Security check
- Reads analytical database data, possibly production
- Keeps the database password in the environment
README in short
The README describes the 1.0 architecture with eight domains and progressive tool disclosure. Quick start covers PyPI install, Doris connection variables and running over HTTP or stdio. It lists security and reliability boundaries including auth, RBAC and result limits. Detailed English and Chinese docs live in docs. Apache 2.0 licensed.
FAQ
What if my client does not handle domains?
Set MCP_TOOL_EXPOSURE_MODE=flat before startup to expose all child tools as a flat list.
Can the agent change anything in the database?
No, the built-in 1.0 catalog is read-only, and the admin domain is reserved and not registered.
Related
166 skills for scientific work: bioinformatics, cheminformatics, clinical data, geospatial analysis and 100+ databases
Google's open-source MCP server for databases: ready tools for Postgres, MySQL, BigQuery, Spanner and more, plus custom tools in tools.yaml
Official Hugging Face skills: Hub operations via the hf CLI, datasets, model training, Spaces, evals and deployment
A token-lean MCP server for PostgreSQL, MySQL, MariaDB, SQL Server and SQLite with a read-only mode