# SingleStore Helios Endpoints

An endpoint is a URL used to connect with SingleStore Helios workspaces. The SingleStore Helios endpoints are available on the [Cloud Portal](https://portal.singlestore.com). Once logged in,

1. Navigate to **Workspaces**.

2. Select the **Connect** under the **Actions** column of your workspace, and then select **CLI Client** from the list.

3. On the **CLI Client** tab, select **SingleStore Endpoints** from the list. The endpoint of your SingleStore deployment is displayed in the **Endpoint** section.

Access SingleStore Helios deployment using the available endpoint with any of the supported [SQL clients](https://docs.singlestore.com/cloud/connect-to-singlestore.md) and/or [development tools](https://docs.singlestore.com/cloud/developer-resources/connect-with-application-development-tools.md).

> **📝 Note**: When using a third-party SQL client or development tool, you must first [add a database user](https://docs.singlestore.com/cloud/user-and-workspace-administration/manage-database-users.md) to log into a SingleStore Helios database.

## Connect to SingleStore Helios via TLS/SSL

To establish an encrypted connection from a stand-alone SQL client, you need a TLS/SSL public certificate. This certificate ensures that clients without a valid certificate are not allowed to connect to your workspace. This CA certificate can also be used to verify the identity of each workspace host. Download the TLS/SSL certificate from the Cloud Portal. Install the certificate via the instructions provided at [How Do I Install a Certificate?](https://www.ssl.com/faqs/faq-how-do-i-install-a-certificate/).

For example, using the SingleStore command line (CLI) client, you can connect to the SingleStore Helios endpoints using the `singlestore_bundle.pem` [certificate file](https://portal.singlestore.com/static/ca/singlestore_bundle.pem). The `.pem` file enables support for encrypted connections. Include the `--ssl-mode=VERIFY_CA` option to verify the certificate.

**Note**: Include the `--ssl-mode=REQUIRED` option to establish a secure connection in older versions of the MySQL client, even when the `--ssl-ca` option is specified.

```shell
singlestore -u admin -p -h <endpoint-host> -P 3306 --default-auth=mysql_native_password --ssl-ca=./singlestore_bundle.pem --ssl-mode=VERIFY_CA
```

> **❗ Important**: If your SQL client connects using the `singlestore_bundle.pem` file with the `--ssl-mode=VERIFY_CA` flag and is unable to establish a connection to SingleStore Helios, download and use the latest `singlestore_bundle.pem` file.

See [Connect to SingleStore Helios using TLS/SSL](https://docs.singlestore.com/cloud/connect-to-singlestore/connect-with-mysql/connect-with-mysql-client/connect-to-singlestore-helios-using-tls-ssl.md) topic for more information.

## Secure the SingleStore Helios Connection

## Server Configuration to Require Secure Client Connections

To make the server restrict access to clients over SSL only, add the `REQUIRE SSL` clause to the user’s `GRANT` statement, for example:

```sql
CREATE USER 'user'@'%' IDENTIFIED BY 'password';
ALTER USER 'user'@'%' REQUIRE SSL;
```

For example, if `REQUIRE SSL` is specified for the user `user`:

```shell
## This connection attempt is rejected with an "Access denied" error:
singlestore -u user -h 1.2.3.4

```

```shell
## This one works:
singlestore -u user -h 1.2.3.4 --ssl-ca=ca-cert.pem
```

Unless the client is configured properly, the client may or may not use SSL to connect to SingleStore Helios even if SSL is enabled on the SingleStore Helios workspace. Adding `REQUIRE SSL` helps protect against misconfigured clients by preventing them from connecting over an insecure plaintext connection. However, proper client configuration is still necessary for security against active network attacks, regardless of server configuration.

Note that the server currently uses a hardcoded version of the TLS protocol.

***

Modified at: May 14, 2026

Source: [/cloud/connect-to-singlestore/singlestore-helios-endpoints/](https://docs.singlestore.com/cloud/connect-to-singlestore/singlestore-helios-endpoints/)

(An index of the documentation is available at /llms.txt)