Data connection

string

required

Display name for this connection inside nao.

string

required

Comma-separated project IDs. Supports wildcards (e.g. project_*) and exclusions (!project-dev).

string

Optional BigQuery location. Leave blank to use the project default.

string

Optionally scope access to specific datasets by listing them explicitly.

string

default:"SSO via OAuth"

required

Choose between SSO via OAuth or Service Account. SSO requires your BQ project ID; service accounts use key files.

file

Required only when Service Account authentication is selected. Upload the JSON key for a service account with at least the BigQuery Data Viewer (Reader) role.

Connect multiple BigQuery projectsSelect multiple project-ids and datasets using the following patterns:

Comma separated values (project1,project2): Select specific projects by listing them explicitly (no space after the comma)
Wildcard prefix (project_*): Select all projects that start with “project_”
Exclusion (!project2): Select all projects except “project2”

Set query size limitsYou can limit the size of queries executed within nao.If you do, nao will perform a dry run of every query, and cancel query execution if it’s above the GB limit. The limit will be effective for both user queries and AI agent queries.Go to Settings → Warehouse Connections and set the query size limit field to the maximum rows you want nao to run automatically.

string

required

Name that appears inside nao; can be any label you prefer.

string

required

Snowflake account identifier without .snowflakecomputing.com.

string

required

Target warehouse for query execution.

string

Optional role override for this connection.

string

Optional list of databases to load. Supports comma-separated values, wildcards (db_*), and exclusions (!db2).

string

Optional schemas to load. Accepts the same comma, wildcard, and exclusion patterns as databases.

string

default:"SSO"

required

Choose between Password, SSO, or Key Pair Authentication.

string

Only required when Password authentication is selected.

string

Password for the Snowflake user. Approve the DUO prompt both when testing and saving the connection.

string

Snowflake user that owns the private key. Required for Key Pair Authentication.

file

Upload the PEM private key file corresponding to your Snowflake user.

string

Optional passphrase protecting the private key.

MFA reminder Password-based logins require approving the DUO push twice: once for Test Connection and again for Save.

string

required

Friendly name for the connection inside nao.

string

required

Hostname or IP where Postgres is reachable.

number

default:"5432"

required

Listening port for your Postgres instance.

string

required

Target database to connect to.

string

required

Database user nao should authenticate with.

string

required

Password for the database user. Stored securely in nao.

boolean

default:"false"

Enable SSH tunneling. When toggled, provide the SSH host, port, username, and a private key or password.

boolean

default:"false"

Turn on SSL/TLS. Choose SSL, TLS, or add channel binding depending on your Postgres setup.

string

required

Name that appears inside nao for this workspace connection.

string

required

Databricks workspace hostname.

string

required

HTTP path for the SQL warehouse or cluster you want nao to use.

string

Optional catalog that nao should select by default.

string

Optional schema to use when one is not specified in queries.

string

default:"OAuth User-to-Machine (U2M)"

required

Choose between OAuth User-to-Machine (U2M) or Personal Access Token.

string

Required only when using the Personal Access Token authentication method.

string

required

Friendly label for this Redshift connection.

string

required

Redshift cluster endpoint.

number

default:"5439"

required

Port Redshift listens on (defaults to 5439).

string

required

Default database nao should use.

string

required

Database user with access to the schemas you need.

string

required

Password for that database user.

boolean

default:"false"

Enable SSH tunneling and provide SSH host, port, username, and private key/passphrase.

boolean

default:"false"

Turn on SSL/TLS. Choose SSL, TLS, and optional channel binding per your security requirements.

string

required

Friendly label for this ClickHouse connection.

string

default:"HTTPS"

required

Choose between HTTPS or Local.

string

required

Full URL to your ClickHouse instance, including protocol and port. Use http://localhost:8123 for Local connections or https://your-instance.clickhouse.cloud:8443 for HTTPS connections.

string

required

ClickHouse user with access to the databases you need.

string

required

Password for the ClickHouse user.

string

Optional database to load. If not specified, nao will discover available databases.

string

required

Friendly name for the Athena connection inside nao.

string

required

AWS region where your Athena workgroup runs.

string

required

Access key for the IAM user or role you created for nao.

string

required

Secret key paired with the access key.

string

Optional default Athena database to load.

string

required

Choose any label for the DuckDB connection inside nao.

string

default:"File Database"

required

Select File Database to point to a .duckdb file, or In-Memory Database to create a temporary in-memory database.

string

Required when File Database is selected. Browse to an existing file or provide a new path to create one.

string

Optional comma-separated list of schemas to load.

boolean

default:"false"

Enable to prevent nao from making any modifications to the DuckDB database.

MotherDuck connections use the same flow as DuckDB. Open the DuckDB tab in this section and follow that form to connect to your MotherDuck warehouse.

Get Started

nao IDE

nao AI

Learn

Support

Add a data connection

Multiple data connections

​Add a data connection

​Multiple data connections

Add a data connection

Multiple data connections