MCP Hub
Back to servers

mysql-mcp

A comprehensive enterprise-grade MySQL MCP server offering 191 tools for database management, monitoring, and AI-driven query generation. It supports advanced features like OAuth 2.1, JSON functions, spatial data, and cluster management for professional developer workflows.

Stars
3
Forks
1
Tools
3
Updated
Jan 8, 2026
Validated
Jan 9, 2026

mysql-mcp

Last updated January 4, 2026 - Production/Stable v2.1.0

GitHub License: MIT CodeQL Version Status npm version Docker Pulls Security TypeScript Tests Coverage

📚 Full Documentation (Wiki)ChangelogSecurityRelease Article

The Most Comprehensive MySQL MCP Server Available

mysql-mcp is the definitive Model Context Protocol server for MySQL — empowering AI assistants like AntiGravity, Claude, Cursor, and other MCP clients with unparalleled database capabilities. Built for developers who demand enterprise-grade features without sacrificing ease of use.

🎯 What Sets Us Apart

FeatureDescription
191 Specialized ToolsThe largest MySQL tool collection for MCP — from core CRUD and native JSON functions (MySQL 5.7+) to advanced spatial/GIS, document store, and cluster management
18 Observability ResourcesReal-time schema, performance metrics, process lists, status variables, replication status, and InnoDB diagnostics
19 AI-Powered PromptsGuided workflows for query building, schema design, performance tuning, and infrastructure setup
OAuth 2.1 + Access ControlEnterprise-ready security with RFC 9728/8414 compliance, granular scopes (read, write, admin, full, db:*, table:*:*), and Keycloak integration
Smart Tool Filtering24 tool groups + 7 meta-groups let you stay within IDE limits while exposing exactly what you need
HTTP Streaming TransportSSE-based streaming with /sse, /messages, and /health endpoints for remote deployments
High-Performance PoolingBuilt-in connection pooling for efficient, concurrent database access
Ecosystem IntegrationsFirst-class support for MySQL Router, ProxySQL, and MySQL Shell utilities
Advanced EncryptionFull TLS/SSL support for secure connections, plus tools for managing data masking, encryption monitoring, and compliance
Production-Ready SecuritySQL injection protection, parameterized queries, input validation, and audit capabilities
Strict TypeScript100% type-safe codebase with 1550+ tests and 97% coverage
MCP 2025-11-25 CompliantFull protocol support with tool safety hints, resource priorities, and progress notifications

🚀 Quick Start

Prerequisites

  • Node.js 18+
  • MySQL 5.7+ or 8.0+ server
  • npm or yarn

Installation

NPM (Recommended)

# Install globally
npm install -g @neverinfamous/mysql-mcp

# Run
mysql-mcp --transport stdio --mysql mysql://user:password@localhost:3306/database

# Or use npx without installing
npx @neverinfamous/mysql-mcp --transport stdio --mysql mysql://user:password@localhost:3306/database

Docker

docker run -i --rm writenotenow/mysql-mcp:latest \
  --transport stdio \
  --mysql mysql://user:password@host.docker.internal:3306/database

From Source

git clone https://github.com/neverinfamous/mysql-mcp.git
cd mysql-mcp
npm install
npm run build
node dist/cli.js --transport stdio --mysql mysql://user:password@localhost:3306/database

⚡ MCP Client Configuration

HTTP/SSE Server Usage (Advanced)

When to use HTTP mode: Use HTTP mode when deploying mysql-mcp as a standalone server that multiple clients can connect to remotely. For local development with Claude Desktop or Cursor IDE, use the default stdio mode shown below instead.

Use cases for HTTP mode:

  • Running the server in a Docker container accessible over a network
  • Deploying to cloud platforms (AWS, GCP, Azure)
  • Enabling OAuth 2.1 authentication for enterprise security
  • Allowing multiple AI clients to share one database connection

OAuth 2.1 Authentication

For enterprise deployments, mysql-mcp supports OAuth 2.1 authentication with Keycloak or any RFC-compliant provider.

Quick Setup

1. Start with OAuth disabled (default)

mysql-mcp --mysql mysql://root:pass@localhost/db

2. Enable OAuth with an identity provider

mysql-mcp --mysql mysql://root:pass@localhost/db \
          --oauth-enabled \
          --oauth-issuer http://localhost:8080/realms/mysql-mcp \
          --oauth-audience mysql-mcp

Start the HTTP server:

# Local installation
node dist/cli.js --transport http --port 3000 --mysql mysql://user:password@localhost:3306/database

# Docker (expose port 3000)
docker run -p 3000:3000 writenotenow/mysql-mcp \
  --transport http \
  --port 3000 \
  --mysql mysql://user:password@host.docker.internal:3306/database

Available endpoints:

  • GET /sse - Establish MCP connection via Server-Sent Events
  • POST /messages - Send JSON-RPC messages to the server
  • GET /health - Health check endpoint
  • GET /.well-known/oauth-protected-resource - OAuth 2.1 metadata (when OAuth enabled)

💡 Tip: Most users should skip this section and use the stdio configuration below for local AI IDE integration.

Cursor IDE / Claude Desktop

{
  "mcpServers": {
    "mysql-mcp": {
      "command": "node",
      "args": [
        "C:/path/to/mysql-mcp/dist/cli.js",
        "--transport", "stdio",
        "--mysql", "mysql://user:password@localhost:3306/database"
      ]
    }
  }
}

Using Environment Variables (Recommended)

{
  "mcpServers": {
    "mysql-mcp": {
      "command": "node",
      "args": [
        "C:/path/to/mysql-mcp/dist/cli.js",
        "--transport", "stdio"
      ],
      "env": {
        "MYSQL_HOST": "localhost",
        "MYSQL_PORT": "3306",
        "MYSQL_USER": "your_user",
        "MYSQL_PASSWORD": "your_password",
        "MYSQL_DATABASE": "your_database"
      }
    }
  }
}

📖 See the Configuration Wiki for more configuration options.


🔗 Database Connection Scenarios

ScenarioHost to UseExample Connection String
MySQL on host machinehost.docker.internalmysql://user:pass@host.docker.internal:3306/db
MySQL in DockerContainer name or networkmysql://user:pass@mysql-container:3306/db
Remote/Cloud MySQLHostname or IPmysql://user:pass@db.example.com:3306/db

MySQL on Host Machine

If MySQL is installed directly on your computer (via installer, Homebrew, etc.):

"--mysql", "mysql://user:password@host.docker.internal:3306/database"

MySQL in Another Docker Container

Add both containers to the same Docker network, then use the container name:

# Create network and run MySQL
docker network create mynet
docker run -d --name mysql-db --network mynet -e MYSQL_ROOT_PASSWORD=pass mysql:8
# Run MCP server on same network
docker run -i --rm --network mynet writenotenow/mysql-mcp:latest \
  --transport stdio --mysql mysql://root:pass@mysql-db:3306/mysql

Remote/Cloud MySQL (RDS, Cloud SQL, etc.)

Use the remote hostname directly:

"--mysql", "mysql://user:password@your-instance.region.rds.amazonaws.com:3306/database"
ProviderExample Hostname
AWS RDSyour-instance.xxxx.us-east-1.rds.amazonaws.com
Google Cloud SQLproject:region:instance (via Cloud SQL Proxy)
Azure MySQLyour-server.mysql.database.azure.com
PlanetScaleaws.connect.psdb.cloud (SSL required)
DigitalOceanyour-cluster-do-user-xxx.db.ondigitalocean.com

Tip: For remote connections, ensure your MySQL server allows connections from Docker's IP range and that firewalls/security groups permit port 3306.


🛠️ Tool Filtering

[!IMPORTANT] AI IDEs like Cursor have tool limits (typically 40-50 tools). With 191 tools available, you MUST use tool filtering to stay within your IDE's limits. We recommend starter (38 tools) as a starting point.

What Can You Filter?

The --tool-filter argument accepts shortcuts, groups, or tool names — mix and match freely:

Filter PatternExampleToolsDescription
Shortcut onlystarter38Use a predefined bundle
Groups onlycore,json,transactions32Combine individual groups
Shortcut + Groupstarter,spatial50Extend a shortcut
Shortcut - Toolstarter,-mysql_drop_table37Remove specific tools

Shortcuts (Predefined Bundles)

ShortcutToolsUse CaseWhat's Included
starter38🌟 RecommendedCore, JSON, trans, text
essential15Minimal footprintCore, trans
dev-power45Power DeveloperCore, schema, perf, stats, fulltext, trans
ai-data44AI Data AnalystCore, JSON, docstore, text, fulltext
ai-spatial43AI Spatial AnalystCore, spatial, stats, perf, trans
dba-monitor35DBA MonitoringCore, monitor, perf, sysschema, opt
dba-manage33DBA ManagementCore, admin, backup, repl, parts, events
dba-secure42DBA SecurityCore, security, roles, cluster, trans
base-core48Base OpsCore, JSON, trans, text, schema
base-advanced39Advanced FeaturesDocStore, spatial, stats, fulltext, events
ecosystem31External ToolsRouter, ProxySQL, Shell

Tool Groups (24 Available)

GroupToolsDescription
core8Read/write queries, tables, indexes
transactions7BEGIN, COMMIT, ROLLBACK, savepoints
json17JSON functions, merge, diff, stats
text6REGEXP, LIKE, SOUNDEX
fulltext4Natural language search
performance8EXPLAIN, query analysis, slow queries
optimization4Index hints, recommendations
admin6OPTIMIZE, ANALYZE, CHECK
monitoring7PROCESSLIST, status variables
backup4Export, import, mysqldump
replication5Master/slave, binlog
partitioning4Partition management
router9MySQL Router REST API
proxysql12ProxySQL management
shell10MySQL Shell utilities
schema10Views, procedures, triggers, constraints
events6Event Scheduler management
sysschema8sys schema diagnostics
stats8Statistical analysis tools
spatial12Spatial/GIS operations
security9Audit, SSL, encryption, masking
cluster10Group Replication, InnoDB Cluster
roles8MySQL 8.0 role management
docstore9Document Store collections

Quick Start: Recommended IDE Configuration

Add one of these configurations to your IDE's MCP settings file (e.g., cline_mcp_settings.json, .cursorrules, or equivalent):

Option 1: Starter (38 Essential Tools)

Best for: General MySQL database work - CRUD operations, schema management, and monitoring.

{
  "mcpServers": {
    "mysql-mcp": {
      "command": "node",
      "args": [
        "/path/to/mysql-mcp/dist/cli.js",
        "--transport",
        "stdio",
        "--tool-filter",
        "starter"
      ],
      "env": {
        "MYSQL_HOST": "localhost",
        "MYSQL_PORT": "3306",
        "MYSQL_USER": "your_username",
        "MYSQL_PASSWORD": "your_password",
        "MYSQL_DATABASE": "your_database"
      }
    }
  }
}

Option 2: Cluster (10 Tools for InnoDB Cluster Monitoring)

Best for: Monitoring InnoDB Cluster, Group Replication status, and cluster topology.

⚠️ Prerequisites:

  • InnoDB Cluster must be configured and running with Group Replication enabled
  • Connect to a cluster node directly (e.g., localhost:3307) — NOT a standalone MySQL instance
  • Use cluster_admin or root user with appropriate privileges
  • See MySQL Ecosystem Setup Guide for cluster setup instructions
{
  "mcpServers": {
    "mysql-mcp-cluster": {
      "command": "node",
      "args": [
        "/path/to/mysql-mcp/dist/cli.js",
        "--transport",
        "stdio",
        "--tool-filter",
        "cluster"
      ],
      "env": {
        "MYSQL_HOST": "localhost",
        "MYSQL_PORT": "3307",
        "MYSQL_USER": "cluster_admin",
        "MYSQL_PASSWORD": "cluster_password",
        "MYSQL_DATABASE": "mysql"
      }
    }
  }
}

Option 3: Ecosystem (31 Tools for InnoDB Cluster Deployments)

Best for: MySQL Router, ProxySQL, MySQL Shell, and InnoDB Cluster deployments.

⚠️ Prerequisites:

  • InnoDB Cluster with MySQL Router requires the cluster to be running for Router REST API authentication (uses metadata_cache backend)
  • Router REST API uses HTTPS with self-signed certificates by default — set MYSQL_ROUTER_INSECURE=true to bypass certificate verification
  • See MySQL Ecosystem Setup Guide for detailed instructions
{
  "mcpServers": {
    "mysql-mcp-ecosystem": {
      "command": "node",
      "args": [
        "/path/to/mysql-mcp/dist/cli.js",
        "--transport",
        "stdio",
        "--tool-filter",
        "ecosystem"
      ],
      "env": {
        "MYSQL_HOST": "localhost",
        "MYSQL_PORT": "3307",
        "MYSQL_USER": "cluster_admin",
        "MYSQL_PASSWORD": "cluster_password",
        "MYSQL_DATABASE": "mysql",
        "MYSQL_ROUTER_URL": "https://localhost:8443",
        "MYSQL_ROUTER_USER": "rest_api",
        "MYSQL_ROUTER_PASSWORD": "router_password",
        "MYSQL_ROUTER_INSECURE": "true",
        "PROXYSQL_HOST": "localhost",
        "PROXYSQL_PORT": "6032",
        "PROXYSQL_USER": "radmin",
        "PROXYSQL_PASSWORD": "radmin",
        "MYSQLSH_PATH": "/usr/local/bin/mysqlsh"
      }
    }
  }
}

Customization Notes:

  • Replace /path/to/mysql-mcp/ with your actual installation path
  • Update credentials with your actual values
  • For Windows: Use forward slashes (e.g., C:/mysql-mcp/dist/cli.js) or escape backslashes
  • For Windows MySQL Shell: "MYSQLSH_PATH": "C:\\Program Files\\MySQL\\MySQL Shell 9.5\\bin\\mysqlsh.exe"
  • Router Authentication: Router REST API authenticates against the InnoDB Cluster metadata. The cluster must be running for authentication to work.
  • Cluster Resource: The mysql://cluster resource is only available when connected to an InnoDB Cluster node

Legacy Syntax (still supported): If you start with a negative filter (e.g., -ecosystem), it assumes you want to start with all tools enabled and then subtract.

Syntax Reference

PrefixTargetExampleEffect
(none)ShortcutstarterWhitelist Mode: Enable ONLY this shortcut
(none)GroupcoreWhitelist Mode: Enable ONLY this group
+Group+spatialAdd tools from this group to current set
-Group-adminRemove tools in this group from current set
+Tool+mysql_explainAdd one specific tool
-Tool-mysql_drop_tableRemove one specific tool

📖 See the Tool Filtering Wiki for advanced examples.


💡 Usage Instructions

[!NOTE] Usage instructions are automatically provided to AI agents via the MCP protocol during server initialization.

For debugging or manual reference, see the source: src/constants/ServerInstructions.ts


🤖 AI-Powered Prompts

This server includes 19 intelligent prompts for guided workflows:

PromptDescription
mysql_query_builderConstruct SQL queries with security best practices
mysql_schema_designDesign table schemas with indexes and relationships
mysql_performance_analysisAnalyze slow queries with optimization recommendations
mysql_migrationGenerate migration scripts with rollback options
mysql_database_health_checkComprehensive database health assessment
mysql_backup_strategyEnterprise backup planning with RTO/RPO
mysql_index_tuningIndex analysis and optimization workflow
mysql_setup_routerMySQL Router configuration guide
mysql_setup_proxysqlProxySQL configuration guide
mysql_setup_replicationReplication setup guide
mysql_setup_shellMySQL Shell usage guide
mysql_tool_indexComplete tool index with categories
mysql_quick_queryQuick query execution shortcut
mysql_quick_schemaQuick schema exploration
mysql_setup_eventsEvent Scheduler setup guide
mysql_sys_schema_guidesys schema usage and diagnostics
mysql_setup_spatialSpatial/GIS data setup guide
mysql_setup_clusterInnoDB Cluster/Group Replication guide
mysql_setup_docstoreDocument Store / X DevAPI guide

📊 Resources

This server exposes 18 resources for database observability:

ResourceDescription
mysql://schemaFull database schema
mysql://tablesTable listing with metadata
mysql://variablesServer configuration variables
mysql://statusServer status metrics
mysql://processlistActive connections and queries
mysql://poolConnection pool statistics
mysql://capabilitiesServer version, features, tool categories
mysql://healthComprehensive health status
mysql://performanceQuery performance metrics
mysql://indexesIndex usage and statistics
mysql://replicationReplication status and lag
mysql://innodbInnoDB buffer pool and engine metrics
mysql://eventsEvent Scheduler status and scheduled events
mysql://sysschemasys schema diagnostics summary
mysql://locksInnoDB lock contention detection
mysql://clusterGroup Replication/InnoDB Cluster status
mysql://spatialSpatial columns and indexes
mysql://docstoreDocument Store collections

🔧 Advanced Configuration

For specialized setups, see these Wiki pages:

TopicDescription
MySQL RouterConfigure Router REST API access for InnoDB Cluster
ProxySQLConfigure ProxySQL admin interface access
MySQL ShellConfigure MySQL Shell for dump/load operations

⚡ Performance Tuning

VariableDefaultDescription
METADATA_CACHE_TTL_MS30000Cache TTL for schema metadata (milliseconds)
LOG_LEVELinfoLog verbosity: debug, info, warning, error

Tip: Lower METADATA_CACHE_TTL_MS for development (e.g., 5000), or increase it for production with stable schemas (e.g., 300000 = 5 min).


CLI Options

OptionEnvironment VariableDescription
--oauth-enabledOAUTH_ENABLEDEnable OAuth authentication
--oauth-issuerOAUTH_ISSUERAuthorization server URL
--oauth-audienceOAUTH_AUDIENCEExpected token audience
--oauth-jwks-uriOAUTH_JWKS_URIJWKS URI (auto-discovered)
--oauth-clock-toleranceOAUTH_CLOCK_TOLERANCEClock tolerance in seconds

Scopes

ScopeAccess Level
readRead-only queries
writeRead + write operations
adminAdministrative operations
fullAll operations

📖 See the OAuth Wiki for Keycloak setup and detailed configuration.

Development

MCP Inspector

Use MCP Inspector to visually test and debug mysql-mcp:

# Build the server first
npm run build

# Launch Inspector with mysql-mcp
npx @modelcontextprotocol/inspector node dist/cli.js \
  --transport stdio \
  --mysql mysql://user:password@localhost:3306/database

Open http://localhost:6274 to browse all 191 tools, 18 resources, and 19 prompts interactively.

CLI mode for scripting:

# List all tools
npx @modelcontextprotocol/inspector --cli node dist/cli.js \
  --transport stdio --mysql mysql://... \
  --method tools/list

# Call a specific tool  
npx @modelcontextprotocol/inspector --cli node dist/cli.js \
  --transport stdio --mysql mysql://... \
  --method tools/call --tool-name mysql_list_tables

📖 See the MCP Inspector Wiki for detailed usage.

Unit Testing

The project maintains high test coverage (~97%) using Vitest.

# Run tests
npm test

# Run coverage report
npm run test:coverage

Test Infrastructure:

  • Centralized mock factories in src/__tests__/mocks/
  • All 101 test files use shared mocks for consistency
  • Tests run without database connection (fully mocked)
  • ~53 second total runtime

Test Coverage:

ComponentCoverageNotes
Global97%+Statement coverage
MySQLAdapter93%+Adapter logic covered
Branch Coverage~86%High branch coverage
Tools (All)99%+1590 tests passing

Contributing

Contributions are welcome! Please read our Contributing Guidelines before submitting a pull request.

Security

For security concerns, please see our Security Policy.

⚠️ Never commit credentials - Store secrets in .env (gitignored)

License

This project is licensed under the MIT License - see the LICENSE file for details.

Code of Conduct

Please read our Code of Conduct before participating in this project.

Reviews

No reviews yet

Sign in to write a review