Secure and token-efficient MySQL MCP server built specifically for AI agents. Prevents hallucinations, optimizes context windows and blocks dangerous queries.
Claim it to get a verified publisher badge, a free copy of our full audit findings, and direct contact for any high-priority issues we find.
Install from
M8ven verifies MCPs across every public registry — install directly from whichever one you prefer.
Disclosed vulnerabilities in this server's declared npm dependencies (via OSV). Whether each is reachable depends on the installed versions.
Anthropic's MCP TypeScript SDK has a ReDoS vulnerability
Model Context Protocol (MCP) TypeScript SDK does not enable DNS rebinding protection by default
process.env. You'll be asked to provide them before it can run.ALLOW_DDL_OPERATION— Enable Data Definition Language (CREATE, ALTER, DROP, RENAME). false NoALLOW_DELETE_OPERATION— Enable DELETE and TRUNCATE queries. false NoALLOW_INSERT_OPERATION— Enable INSERT and REPLACE queries. false NoALLOW_UPDATE_OPERATION— Enable UPDATE queries. false NoDB_HOST— "": "localhost",DB_NAME— "": "your_database",DB_PASSWORD— "": "your_password",DB_PORT— "": "3306",DB_SSL— Enable TLS for the MySQL connection (recommended for managed/cloud databases). false NoDB_SSL_REJECT_UNAUTHORIZED— Reject self-signed or untrusted TLS certificates when DB_SSL=true. true NoDB_USER— "": "your_db_user",MCP_DDL_CACHE_TTL— Time-to-live (in seconds) for cached DDL statements. Reduces latency on repeated search_schema calls. Invalidated by refresh_schema. 60 NoMCP_EXPLAIN_MAX_SCAN_ROWS— "": "1000",MCP_LOG_LEVEL— Minimum severity for MCP log notifications: debug, info, notice, warning, error, critical, alert, emergency. info NoMCP_METADATA_PATH— Absolute path to your custom metadata.json dictionary. (Disabled) NoMCP_QUERY_ROW_LIMIT— "": "500",MCP_RATE_LIMIT_RPM— Max tool invocations per minute (sliding window). Set to 0 to disable. 60 NoMCP_SAFE_QUERY_ENABLE_BLOCKING— "": "true"MCP_SAFE_QUERY_MAX_ROWS— Deprecated alias: still works as a fallback for MCP_EXPLAIN_MAX_SCAN_ROWS only. It does not control the result LIMIT.MCP_TEMPLATES_PATH— Absolute path to your custom templates.json queries. (Disabled) NoMYSQL_CONNECTION_LIMIT— Max concurrent pool connections. 10 NoMYSQL_CONNECT_TIMEOUT— Max time to wait for a socket to establish (in ms). 10000 NoMYSQL_QUERY_TIMEOUT— Max execution time for a query (in ms). Aborts heavy queries to protect against DoS. 15000 NoMYSQL_QUEUE_LIMIT— Max queued requests when all pool connections are busy. Prevents unbounded growth if MySQL is down. 50 NoMYSQL_RETRY_ATTEMPTS— Max retries on transient connection errors (ECONNREFUSED, PROTOCOL_CONNECTION_LOST, etc.). 3 NoMYSQL_RETRY_DELAY_MS— Base delay (ms) for exponential backoff between retries (1s, 2s, 4s...). 1000 NoTOOL_PREFIX— Prefix for tool names (useful when running multiple instances). Derived from DB_NAME (e.g., mydb_). Random fallback only if DB_NAME is unset. No[](https://m8ven.ai/mcp/andezdev-tokenlite-mysql-mcp-r8uzy0)