A readonly MCP server for MySQL databases that ensures safety by whitelisting only SELECT, SHOW, DESCRIBE, and EXPLAIN statements, with table blacklist support and configurable limits.
Claim it to get a verified publisher badge, a free copy of our full audit findings, and direct contact for any high-priority issues we find.
Install from
M8ven verifies MCPs across every public registry — install directly from whichever one you prefer.
process.env. You'll be asked to provide them before it can run.MYSQL_HOST— "": "127.0.0.1",MYSQL_PORT— "": "3306",MYSQL_USER— "": "your_mysql_user",MYSQL_PASSWORD— "": "your_mysql_password",MYSQL_DATABASE— "": "your_database_name",MYSQL_CONNECT_TIMEOUT— No 10 TCP connect timeout (seconds)MYSQL_READ_TIMEOUT— No 30 Socket read timeout (seconds)MYSQL_WRITE_TIMEOUT— No 30 Socket write timeout (seconds)MYSQL_MAX_EXECUTION_TIME— No 30000 Per-query server limit (milliseconds); SET SESSION MAX_EXECUTION_TIMEMYSQL_SSL— "": "false",MYSQL_SSL_CA— No "" Path to CA certificate (when using TLS)MYSQL_SSL_CERT— No "" Path to client certificateMYSQL_SSL_KEY— No "" Path to client private keyMYSQL_SSL_VERIFY_CERT— No true Set "false" to skip server cert verification (not recommended)QUERY_DEFAULT_LIMIT— optional timeouts / / TLS paths, and for SSE MCP_HOST /QUERY_TABLE_BLACKLIST— Table blacklist: blocks data access via query; describe_table still works for schema on listed tablesMCP_HOST— optional timeouts / QUERY_DEFAULT_LIMIT / TLS paths, and for SSE /MCP_PORT— / MCP_BEARER_TOKEN. It prints a complete mcp.json snippet (and forMCP_BEARER_TOKEN— Config: stdio — MySQL settings via mcp.json env; SSE — environment at process start, optional for HTTP auth[](https://m8ven.ai/mcp/ibeancn-mysql-mcp-only-read-1ub2nq)