MySQL Ops MCP server

MySQL Ops MCP

English | 简体中文

A MySQL database MCP Server. Let AI tools like Claude Code / Cursor / Codex talk to your MySQL databases in natural language — browse databases and tables, inspect schemas, run queries, and perform CRUD operations, with destructive operations (DELETE / DROP) gated behind explicit user approval.

Features

• 🗄️ Schema browsing: list databases, list tables, describe table structure, full table info (indexes, DDL, stats)
• 🔍 Queries: run SELECT queries against any database
• ✏️ CRUD: create tables, insert, update — with SQL-statement validation per tool
• 🔐 Approval-gated destructive ops: deletedata and droptable always require explicit user confirmation in the client
• 🔌 Zero install: runs via npx, configured entirely through environment variables

Installation

Requires Node.js 18+. No clone or build needed — npx fetches and runs the published npm package on first use (see the config below).

To build from source instead (e.g. for development):

git clone https://github.com/GT-dinuo/mysql-ops-mcp.git
cd mysql-ops-mcp
npm install
npm run build

Build output goes to dist/; the entry point is dist/index.js.

Configuration

In each project where you want to use this tool, create (or append to) .mcp.json:

{
  "mcpServers": {
    "mysql": {
      "command": "npx",
      "args": ["-y", "mysql-ops-mcp"],
      "env": {
        "DB_HOST": "localhost",
        "DB_PORT": "3306",
        "DB_USER": "root",
        "DB_PASSWORD": "your_password",
        "DB_DATABASE": "your_database"
      }
    }
  }
}

If you built from source, point the command at the local build instead: "command": "node", "args": ["/absolute/path/to/mysql-ops-mcp/dist/index.js"].

Environment Variables

Usage

Once configured, just ask in natural language in your AI tool:

List all databases
Show the structure of the users table
Query the 10 most recent orders
Get full info for the users table — indexes and DDL included
Insert a test record into the users table
Delete the test record you just inserted   ← the client will ask for your approval first

Destructive operations (deletedata, droptable) are always confirmed by the MCP client before execution — nothing irreversible happens silently.

Tool List

Security

Shortened. The full README is on GitHub.