@maxlmgc/mysql-mcp

MySQL MCP Server — a secure, read-only-by-default MySQL integration for AI clients via the Model Context Protocol.

中文文档

Tools

Environment Variables

Database Connection (required)

Read-only Mode

Connection Pool

Installation

npm install @maxlmgc/mysql-mcp

Usage

MCP Client Configuration

Add to your MCP client configuration:

{
  "mcpServers": {
    "mysql-mcp": {
      "command": "npx",
      "args": ["-y", "@maxlmgc/mysql-mcp"],
      "env": {
        "MYSQL_HOST": "localhost",
        "MYSQL_PORT": "3306",
        "MYSQL_USER": "root",
        "MYSQL_PASS": "your_password",
        "MYSQL_DB": "your_database"
      }
    }
  }
}

Read-only Mode (default)

By default only query operations are allowed; sql_execute is not exposed.

Disable Read-only Mode

"env": {
  "MYSQL_HOST": "localhost",
  "MYSQL_USER": "root",
  "MYSQL_DB": "your_database",
  "MYSQL_READONLY": "false"
}

Custom Whitelist

Only allow SELECT and SHOW:

"env": {
  "MYSQL_HOST": "localhost",
  "MYSQL_USER": "root",
  "MYSQL_DB": "your_database",
  "MYSQL_READONLY_PREFIXES": "SELECT,SHOW"
}

Security

• Read-only by default: sql_execute is not registered in read-only mode

• SQL injection prevention: Table names validated with regex; parameterized queries used

• Startup validation: Missing required env vars cause immediate failure

• Transaction rollback: sql_execute runs in a transaction that is always rolled back

• Dual-layer protection: SQL validation at both tool layer and connection pool layer

License

MIT