The governance layer for self-hosted ClickHouse

Access matrix, policies, lineage, audit log, and scheduled queries for teams that run ClickHouse themselves.

Read DocumentationView on GitHub
CH-UI Logo

Quick bootstrap

# Install CH-UI (Linux / macOS)
curl -fsSL https://ch-ui.com/install.sh | sh

# Start CH-UI (server mode by default)
ch-ui

# Check status
ch-ui server status

# Optional: connect remote ClickHouse host
ch-ui connect --url wss://your-ch-ui-domain/connect --key cht_your_token

# Docker quick start (official image)
docker run --rm -p 3488:3488 -v ch-ui-data:/app/data -e CLICKHOUSE_URL=http://host.docker.internal:8123 ghcr.io/caioricciuti/ch-ui:latest

# If login fails:
# https://ch-ui.com/docs/cant-login

Who CH-UI is for

Self-hosted ClickHouse teams that need governance their database doesn’t ship with.

You have 20+ analysts and can’t manage ClickHouse users manually

Create ClickHouse users, assign roles, and review who can query what from a single access matrix — no more ad-hoc GRANT scripts.

Your compliance team needs audit logs for every query against PII

Tag tables and columns as PII, capture every query in the query log, and record privileged actions in a separate audit log.

You run ClickHouse on-prem for data residency and need operator tooling

Tunnel to remote ClickHouse, policies with warn/block enforcement, incidents, lineage, and scheduled queries — all self-hosted.

What CH-UI includes

Product areas built for ClickHouse operators and analytics teams.

SQL Workspace

SQL Workspace

Multi-tab query editing, schema explorer, completions, and safe schema operations via sheets.

Dashboards

Dashboards

Build panels from saved queries, arrange layouts, and share system overviews across your team.

Brain Copilot

Brain Copilot

Multi-chat AI with persisted context, SQL artifacts, provider/model controls, and run-in-chat actions.

Governance Suite

Governance Suite

Pro

Dashboard metrics, access matrix, incidents, policies, lineage, and sync controls.

Schedules

Schedules

Pro

Schedule SQL queries with cron expressions, track execution history, and monitor results.

Admin Operations

Admin Operations

ClickHouse user lifecycle, provider management, and tunnel controls.

Deployment architecture

Run CH-UI centrally, connect one or many ClickHouse environments.

Browser

  • SQL workspace
  • Governance
  • Brain UI
HTTPS

CH-UI Server

  • :3488 API + UI
  • Tunnel gateway
  • Scheduler + syncers
WSS

Connector Host

  • ch-ui connect
  • Outbound only

SQLite

  • Sessions, queries
  • Governance, chats, audit

ClickHouse

  • Your data
  • HTTP :8123

Try Pro free for 3 months

Enter your email to redeem a complimentary 3-month Pro license.

Get started

Installation, deployment, API, and operator runbooks are all in the docs.

Open DocsProduction Deployment