71
/ 100
1 month ago
glama

mysql-readonly-mcp

A readonly MCP server for MySQL databases that ensures safety by whitelisting only SELECT, SHOW, DESCRIBE, and EXPLAIN statements, with table blacklist support and configurable limits.

Is this your MCP?

Claim it to get a verified publisher badge, a free copy of our full audit findings, and direct contact for any high-priority issues we find.

Install from

M8ven verifies MCPs across every public registry — install directly from whichever one you prefer.

// key findings
No credential exfiltration, no sensitive file access, no obfuscation
Static analysis found nothing flowing your secrets to unexpected places.
Open source with a license and README
Anyone can audit the code, the license is declared, and the publisher documents what it does.
🔐
You'll be asked for 3 credentials: MYSQL_PASSWORD, MYSQL_SSL_KEY, MCP_BEARER_TOKEN
These are read from process.env at runtime. Make sure you trust where they’ll be sent.
// required environment variables
This server reads these from process.env. You'll be asked to provide them before it can run.
configMYSQL_HOST"": "127.0.0.1",
configMYSQL_PORT"": "3306",
configMYSQL_USER"": "your_mysql_user",
🔐 secretMYSQL_PASSWORD"": "your_mysql_password",
configMYSQL_DATABASE"": "your_database_name",
configMYSQL_CONNECT_TIMEOUTNo 10 TCP connect timeout (seconds)
configMYSQL_READ_TIMEOUTNo 30 Socket read timeout (seconds)
configMYSQL_WRITE_TIMEOUTNo 30 Socket write timeout (seconds)
configMYSQL_MAX_EXECUTION_TIMENo 30000 Per-query server limit (milliseconds); SET SESSION MAX_EXECUTION_TIME
configMYSQL_SSL"": "false",
configMYSQL_SSL_CANo "" Path to CA certificate (when using TLS)
configMYSQL_SSL_CERTNo "" Path to client certificate
🔐 secretMYSQL_SSL_KEYNo "" Path to client private key
configMYSQL_SSL_VERIFY_CERTNo true Set "false" to skip server cert verification (not recommended)
configQUERY_DEFAULT_LIMIToptional timeouts / / TLS paths, and for SSE MCP_HOST /
configQUERY_TABLE_BLACKLISTTable blacklist: blocks data access via query; describe_table still works for schema on listed tables
configMCP_HOSToptional timeouts / QUERY_DEFAULT_LIMIT / TLS paths, and for SSE /
configMCP_PORT/ MCP_BEARER_TOKEN. It prints a complete mcp.json snippet (and for
🔐 secretMCP_BEARER_TOKENConfig: stdio — MySQL settings via mcp.json env; SSE — environment at process start, optional for HTTP auth
// full audit trail
The full breakdown of what we checked, the deductions that landed, the network hosts, the dependency advisories, and concrete fix guidance is available to verified publishers.
// improvement guidance — verified publishers only
We have 4 concrete improvements we can share with the publisher of this MCP. Each comes with specific guidance to raise the trust score.
// embed badge in your README
[![M8ven Score](https://m8ven.ai/badge/mcp/ibeancn-mysql-mcp-only-read-1ub2nq)](https://m8ven.ai/mcp/ibeancn-mysql-mcp-only-read-1ub2nq)
commit: 892b2d79fca9f643be6bed54a31cbc3e87174f52
code hash: df066da4b7f9ef3e9ced33bfe7fee06426a6db1b66a877706dfd18ea910eea95
verified: 6/24/2026, 10:19:54 AM
view raw JSON →