What this covers
External access is off by default, because your app connects from inside CM Cloud and does not need it. Turning it on publishes your database on a TLS-only endpoint so you can connect from your laptop.
Before you start
Decide whether you want this on. Your own client has full read and write access — unlike the console in the dashboard, which is read-only. Anyone holding these credentials can change or delete your data.
How to do it
- Open the Connection tab and turn on Allow connections from outside CM Cloud.
- Select Show connection details and copy the host, port, database, user and password.
- In TablePlus or DBeaver, create a PostgreSQL connection and paste those values. Set SSL mode to Require or Verify Full.
- For the terminal, copy the psql command shown on the same tab.
- Turn external access back off when you no longer need it.
What our team checks
Support can confirm the endpoint is reachable and that TLS is being negotiated, but cannot see or reset your client's own configuration.
Next step
Turn on external access, connect once with your tool to confirm it works, and decide whether to leave it on.