MCP.Market

MySQL (security-first) MCP server

by Kurok1·io.github.Kurok1/mcp-server-mysql·v2.1.0·2 stars
No reviews yet

Security-first MySQL MCP server with AST validation, table whitelist, schema resources, and audit.

B73/100grade B
Write a reviewInstall
What users say
No reviews yet
Be the first
Safety scan
B73/100

full report

Adoption
Growing

2 stars

Reviews

Write one

Nobody has reviewed MySQL (security-first) yet.

If you have run it, two minutes of your experience saves the next person an afternoon.

MySQL (security-first) tools

No tool declarations could be read from the package source. They show once the server is installed.

Public scan report

scanner v0.1.10 · 2026-10-03 · same rubric, same numbers if you re-run it

no findings
  • –Code scanpackage could not be scannedn/a
  • –Live reliabilityno gateway calls yet and no remote to proben/a
  • –Tool poisoningtools not inspected (local package is not executed); not countedn/a
  • Auth qualitystatic API keys via environment variables6/15
  • Maintenancelast push 18 days ago15/15
  • Maintainer identityregistry namespace matches repository owner; GitHub account older than a year8/10
Overall 73/100. Components that don't apply are left out of the denominator. Any critical finding is an F.RubricAppeal a findingJSON

How MySQL (security-first) compares

Against every graded Databases MCP server, from our own scans and uptime checks. Updated after each scan run.

Safety score
73/100
higher than 32% of 802 Databases servers
GitHub stars
2
more than 60% of 602 Databases servers

Install MySQL (security-first) in Claude Code, Cursor or VS Code

claude mcp add mcp-server-mysql -- docker run -i --rm ghcr.io/kurok1/mcp-server-mysql:2.1.0
Add to Cursor

What the publisher says

From the MySQL (security-first) repository's README, as published. We do not edit it. Read it on GitHub

mcp-server-mysql

English | 简体中文

A security-first MySQL MCP server. Every SQL statement must survive a full AST parse by an industrial-grade SQL parser (TiDB parser) before it can touch your database — backed by a read-only transaction fallback and a driver-level multi-statement lockout. Three independent layers of defense-in-depth: let AI query your database, without letting it walk off with your database.

Why this one?

Most MySQL MCP servers enforce "read-only" with regex/keyword matching, or by wrapping queries in a read-only transaction. Both are broken:

  • Regex checks are defeated by SQL comments and creative rewriting.
  • A read-only transaction alone is defeated by COMMIT; DROP TABLE ... stacked-statement injection — the exact attack Datadog demonstrated against the official Postgres reference server, which has since been archived.

This project puts the security boundary on real SQL semantic parsing instead. Every statement is parsed into an AST by the TiDB parser (MySQL 8.0-grammar compatible); anything the parser cannot understand is rejected — fail-closed, so incomplete grammar coverage can only over-block, never under-block. And because the parser sees real MySQL semantics, tricks like hiding a JOIN mysql.user inside a versioned comment /!80000 ... / are extracted and checked like any other table reference.

Highlights

Shortened. The full README is on GitHub.

Nothing above is checked by us. What we check is on the safety report.

MySQL (security-first): common questions

Is MySQL (security-first) MCP server safe?
Mostly: it is graded B (73/100). Read the MySQL (security-first) safety report
How do I install MySQL (security-first)?
It runs on your machine. Copy the Claude Code, Cursor, VS Code or Claude Desktop config from the install section.
Does MySQL (security-first) need an API key?
Yes. The registry entry asks for MYSQL_MCP_PASSWORD.
Is MySQL (security-first) maintained?
The last commit was 50 days ago (2026-09-15). The latest release is v2.1.0.
What can I use instead of MySQL (security-first)?
Servers from other publishers that do the same job: Airtable MCP server, GoSQLX MCP server and Midplane MCP server.
How does MySQL (security-first) compare with other Databases MCP servers?
safety score 73/100 (higher than 32% of 802 Databases servers); github stars 2 (more than 60% of 602 Databases servers). Full comparison.

Alternatives to MySQL (security-first)

Same job from other publishers: the closest match first, then the best rated.

  • Airtable
    Read and write access to Airtable database schemas, tables, and records.
    B
  • GoSQLX
    SQL validation, formatting, parsing, metadata extraction, linting, and security analysis.
    A
  • Midplane
    A gateway between AI agents and Postgres: table access, masking at the source, approvals and audit.
    B
  • Januscope
    Local MCP proxy for tool restrictions, response redaction, audit logs, and database schema context.
    A
  • MCP Local WP
    WordPress database access via Local by Flywheel. Execute read-only MySQL queries and inspect schema.
    A