MCP MySQL Server

Model Context Protocol (MCP) server for MySQL database connectivity.

Features

• Execute SQL SELECT queries with parameterized inputs (read-only)

• List all tables in the database (read-only metadata)

• Describe table structure (read-only metadata)

• Read-only access only - no INSERT, UPDATE, DELETE operations

Installation

1. Clone this repository

2. Install dependencies:

   npm install

3. Build the TypeScript code:

   npm run build

Configuration

Copy .env.example to .env and update the MySQL connection settings:

cp .env.example .env

Edit .env with your MySQL credentials:

MYSQL_HOST=localhost
MYSQL_PORT=3306
MYSQL_USER=root
MYSQL_PASSWORD=yourpassword
MYSQL_DATABASE=yourdatabase

Usage

Development mode

npm run dev

Production mode

npm run build
npm start

Integration with WorkBuddy

Add this server to your WorkBuddy configuration. Example configuration for WorkBuddy:

{
  "mcpServers": {
    "mysql": {
      "command": "node",
      "args": ["/absolute/path/to/mcp-mysql/dist/index.js"],
      "env": {
        "MYSQL_HOST": "localhost",
        "MYSQL_PORT": "3306",
        "MYSQL_USER": "root",
        "MYSQL_PASSWORD": "yourpassword",
        "MYSQL_DATABASE": "yourdatabase"
      }
    }
  }
}

Tools

mysql_query

Execute a SQL SELECT query with parameterized inputs. Read-only - only SELECT queries are allowed.

Parameters:

• sql (string): SQL SELECT query with ? placeholders

• parameters (string[]): Array of parameter values

mysql_list_tables

List all tables in the current database. Read-only metadata query.

mysql_describe_table

Get the schema of a table. Read-only metadata query.

Parameters:

• tableName (string): Name of the table to describe

Permissions

This MCP server provides read-only access only. The following restrictions are enforced:

• Only SELECT queries are allowed via mysql_query

• No INSERT, UPDATE, DELETE, or other data modification operations

• Metadata queries (mysql_list_tables, mysql_describe_table) are read-only

• All queries use parameterized statements to prevent SQL injection

Security

• All SQL queries use parameterized statements to prevent SQL injection

• Table names are validated with regex before use

• Connection credentials are loaded from environment variables

License

MIT