Skip to main content
Version: 4.x

Integrate with Claude using MCP Server

PhoenixAI supports MCP (Model Context Protocol) server access to allow AI agents to perform specific operations in your clusters. Follow this guide to integrate your Phoenix AI clusters with Claude.

important
  • Currently, this feature is available only on clusters deployed on AWS.
  • Currently, this feature is available only on clusters running on database kernel v4.0.10, v4.1.1, or later.

Step 1. Configure OIDC SSO for the PhoenixAI Cloud Account​

Follow the steps provided in Use OIDC SSO to enable OIDC SSO for your PhoenixAI Cloud Account.

Step 2. Enable JWT Authentication for the Cluster​

Follow these steps to enable JWT Authentication for your cluster:

  1. Sign in to the PhoenixAI Cloud console.
  2. On the Clusters page, click the cluster for which you want to enable JWT authentication.
  3. On the Cluster parameters tab of the cluster details page, turn on the switch next to JWT Auth in the Cluster Configuration section.
note
  • The JWT Auth switch can be turned on or off only when the cluster is in the Running or Suspended state.
  • Enabling the JWT authentication will not affect other users and their authentication in the cluster.
  • You must guarantee the connectivity between the Coordinator Nodes and your OIDC IdP. Otherwise, the JWT authentication will fail.

Step 3. Create a user with JWT Authentication for Claude integration​

Execute the following commands to create a user with the email you used to log in via your IdP based on the JWT authentication, and grant it necessary roles or privileges. You can execute it from your MySQL client or from Phoenix AI Studio.

important

Only database users with the system-defined role user_admin can execute the following commands

-- The email MUST match the IdP email claim exactly (case-sensitive).
CREATE USER '<your_email_address>' IDENTIFIED WITH authentication_jwt;

-- Grant whatever role / privileges fit your scenario. db_admin is just an example.
GRANT db_admin TO USER '<your_email_address>'@'%';

Step 4. Connect to cluster from Claude​

Enable the MCP server on PhoenixAI Cloud console, and establish the connection via a custom connector from Claude.

On the PhoenixAI side:

  1. Sign in to the PhoenixAI Cloud console.
  2. In the left-side navigation pane, choose Account > Account settings.
  3. On the Advanced settings tab of the Account settings page, turn on the switch next to MCP Server to enable the account-level MCP server access.
  4. On the message that appears, select I understand and want to enable MCP server access for this account, and click Enable MCP Server.

On the Claude side:

  1. Sign in to the Claude console as a Workspace Admin.
  2. Navigate to Organization settings. In the left-side navigation pane, choose Connectors. Then, click Add, and choose Custom > Web to customize a connector for the MCP server access.
  3. On the Add custom connector dialog box, enter a name for the connector in the Name field, paste the MCP server endpoint of your cloud region in the Remote MCP server URL field, and click Add to add the connector. For the MCP server endpoint of your cloud region, see Appendix - MCP Server Endpoints.
  4. Return to the Claude console. In the left-side navigation pane, choose Customize and then Connectors.
  5. On the Connectors page, search and click the connector you created for Phoenix AI MCP server access. Then, click Connect.

After the connection is established, you can perform specific operations on the cluster(s) you have access (that is, clusters with the JWT authentication enabled and have the database user created for the Claude integration). For example, you can use natural language to ask Claude to run a query in the cluster. For all the tools supported by the MCP server, see Appendix - Supported Tools.

Appendix​

MCP Server Endpoints​

The following table lists the AWS regions that support the PhoenixAI MCP server and the corresponding MCP server endpoints:

RegionMCP Server Endpoint
Asia Pacific (Hong Kong) ap-east-1https://mcp-ap-east-1.celerdata.com/mcp
Asia Pacific (Tokyo) ap-northeast-1https://mcp-ap-northeast-1.celerdata.com/mcp
Asia Pacific (Mumbai) ap-south-1https://mcp-ap-south-1.celerdata.com/mcp
Asia Pacific (Singapore) ap-southeast-1https://mcp-ap-southeast-1.celerdata.com/mcp
Asia Pacific (Sydney) ap-southeast-2https://mcp-ap-southeast-2.celerdata.com/mcp
Canada (Central) ca-central-1https://mcp-ca-central-1.celerdata.com/mcp
Europe (Frankfurt) eu-central-1https://mcp-eu-central-1.celerdata.com/mcp
Europe (Ireland) eu-west-1https://mcp-eu-west-1.celerdata.com/mcp
South America (São Paulo) sa-east-1https://mcp-sa-east-1.celerdata.com/mcp
US East (N. Virginia) us-east-1https://mcp-us-east-1.celerdata.com/mcp
US East (Ohio) us-east-2https://mcp-us-east-2.celerdata.com/mcp
US West (N. California) us-west-1https://mcp-us-west-1.celerdata.com/mcp
US West (Oregon) us-west-2https://mcp-us-west-2.celerdata.com/mcp

Supported Tools​

The following table lists the tools supported by the PhoenixAI MCP server:

ToolDescription
list_clustersLists the clusters you can access in this region. Returns cluster_id, cluster_name, region, jwt_auth_enabled, and lifecycle state. Only clusters that are in the RUNNING state and have the JWT authentication enabled accept execute_sql*.
execute_sql_read_onlyRuns a read-only SQL on a target cluster as your IdP-email database user. Accepts only SELECT / SHOW / DESC[RIBE] / EXPLAIN / WITH / HELP and ADMIN SHOW / ADMIN CHECK. Recommended for data exploration.
execute_sqlRuns any SQL (DML, DDL, GRANT/REVOKE, etc.) on a target cluster as your IdP-email database user. Privileges follow whatever you granted in the Step 3. Use execute_sql_read_only instead when the SQL is purely read-only.