MySQL (security-first)
Security-first MySQL MCP server with AST validation, table whitelist, schema resources, and audit.
Connector by Kurok1 · GitHub account verified by the MCP Registry
Install
Works with Claude Code, Codex, VS Code, Cursor, Windsurf, Claude Desktop. Read the repository before you give any tool access to your data.
npx agentmarket install connector/kurok1-mcp-server-mysql
Asks which of your tools to add it to (Claude Code, Codex, Cursor, VS Code, Windsurf, Gemini CLI, Claude Desktop) and shows the change first. See https://agentmart.dev/cli.
Get the weekly diff
The weekly diff: one email a week with new agent tools, notable updates and grade changes, plus security alerts for tools you follow. Double opt-in, one-click unsubscribe.
About
Reviews
Write a reviewNo reviews yet. Installed it? Reviews come from verified installers only. How reviews work
Permissions
What this server can do and what it asks for, from its tool list and install config. Checked Oct 25, 2026.
- Tools
- 5 read · 1 write · 1 delete · 1 not yet classified
- Secrets
- 1 (API keys, tokens or passwords)
- Install scripts
- Not scanned yet
- Runs as
- Docker image
Tools by what they do 8
Read from the source code; the running server may list different tools.
Read 5 · Look things up without changing anything.
list_profilemysql_describe_tablemysql_explainmysql_list_tablesmysql_stats
Write 1 · Create, change, send or run things.
mysql_script
Delete 1 · Delete, drop, revoke or wipe things.
mysql_execute
Not yet classified 1 · We could not tell from the name and description.
mysql_query
Secrets and settings it asks for
Secrets: values you paste in that let it act as you.
MYSQL_MCP_PASSWORD
Tools (8)
Read from the source code; the running server may differ. Descriptions are the server’s own words; hidden characters are shown as [U+…].
list_profileList configured database profiles and their descriptions.
mysql_describe_tableShow the column structure of a whitelisted table.
mysql_executeRun a single write statement (INSERT/UPDATE/DELETE/DDL types enabled in config); returns affected rows. The default config denies all writes.
mysql_explainReturn the execution plan for a single SELECT. format: traditional (default) / json / tree; analyze=true runs EXPLAIN ANALYZE (actually executes the query and returns real timing/rows).
mysql_list_tablesList base tables visible through the table whitelist, capped by security.max_rows.
mysql_queryRun a single read-only SQL statement (SELECT/SHOW/DESCRIBE/EXPLAIN). Subject to the table whitelist, row cap and query timeout.
mysql_scriptRun a multi-statement script (;-separated) in a single read-write transaction: every statement is guard-checked, any failure rolls back everything, commit only if all succeed. DDL is banned; write types must be enabled in allowed_statements.
mysql_statsSQL execution stats for the selected profile in this process window: totals/denials, average and P95 latency, top-N slow queries, per-table access counts.
Signals
- Stars
- 2
- Forks
- 0
- Open issues
- 0
- Last commit
- Sep 15, 2026 (1 month ago)
- Last release
- Sep 15, 2026 (1 month ago)
From GitHub (fetched Oct 24, 2026).
Details
- Registry name
io.github.Kurok1/mcp-server-mysql- Version
- 2.1.0
- Auth
- API key
- Packages
- oci
ghcr.io/kurok1/mcp-server-mysql:2.1.0 - License
- Apache-2.0
- Repository
- github.com/Kurok1/mcp-server-mysql
- First seen
- Oct 24, 2026
- Last checked
- Oct 24, 2026
Cite this page
MySQL (security-first) MCP server. Agent Mart. https://agentmart.dev/connectors/kurok1-mcp-server-mysql (last updated 2026-10-24)