Mysql_mcp_server
@smithery/cli · by designcomputer
A Model Context Protocol (MCP) server that enables secure interaction with MySQL databases
No known CVEs
MIT license
Maintained
Last commit 80d ago
Works with most clients
Transport: stdio, sse
2 tools · ~85 tok
Grade A · 0.0% of 200K ctx
MCPpedia last refreshed this data
Mysql_mcp_server is an MCP server that a Model Context Protocol (MCP) server that enables secure interaction with MySQL databases. Its tool list has not been published yet over stdio and sse, requires no API key, and scores 86/100 on MCPpedia's security, maintenance and efficiency rubric.
Step 1
Install in your client
Config is the same across clients - only the file and path differ.
CD
Supported in Claude Desktopstdio, sse · Node 18+
Paste into ~/Library/Application Support/Claude/claude_desktop_config.json
{
"mcpServers": {
"mysql": {
"env": {
"MYSQL_HOST": "localhost",
"MYSQL_PORT": "3306",
"MYSQL_USER": "your_username",
"MYSQL_DATABASE": "your_database",
"MYSQL_PASSWORD": "your_password"
},
"args": [
"--directory",
"path/to/mysql_mcp_server",
"run",
"mysql_mcp_server"
],
"command": "uv"
}
}
}Are you the author?
Add this badge to your README to show your security score and help users find safe servers.
Embed in your READMEAbout badges →
[](https://mcppedia.org/s/mysql-mcp-server)
Read me
What Mysql_mcp_server does
A Model Context Protocol (MCP) implementation that enables secure interaction with MySQL databases. This server component facilitates communication between AI applications (hosts/clients) and MySQL databases, making database exploration and analysis safer and more structured through a controlled interface.
Test This Server
Run this in your terminal to verify the server starts. Then let us know if it worked - your result helps other developers.
npx -y '@smithery/cli' 2>&1 | head -1 && echo "✓ Server started successfully"
After testing, let us know if it worked:
Scored, not listed
Why this score
Five weighted categories - click any category to see the underlying evidence.
Score breakdown
86/100across 5 weighted dimensions
0255075100
30
11
20
15
10
−14
Security
Maintenance
Efficiency
Documentation
Compatibility
Categoriesclick a row to see evidence
Security
OSV.dev2 fixed
CVE-2026-59971critical · fixedCVSS 10
MySQL MCP Server: Missing Origin/Host Validation in SSE Transport Enables Unauthenticated SQL Execution (DNS Rebinding / Direct Exposure)
## Summary In SSE/HTTP transport mode, `mysql_mcp_server` constructs `SseServerTransport` without passing `security_settings`. As a result, the MCP Python SDK's DNS-rebinding protection (Origin/Host header validation) is disabled; the Starlette application has no CORS or TrustedHost middleware; and the service binds to `0.0.0.0` by default with no authentication on any route. **Trigger condition:** `MCP_TRANSPORT=sse`. The default stdio mode is not affected. ## Attack Scenarios **Scenario A
CVE-2026-11529medium · fixedCVSS 6.3
MySQL MCP Server is Vulnerable to SQL Injection Through its mysql URI Handler
A vulnerability was determined in designcomputer mysql-mcp-server up to 0.2.2. The impacted element is the function read_resource of the file src/mysql_mcp_server/server.py of the component mysql URI Handler. This manipulation of the argument uri_str causes sql injection. Remote exploitation of the attack is possible. The exploit has been publicly disclosed and may be utilized. Upgrading to version 0.3.0 is sufficient to resolve this issue. Patch name: 080bef9a96d625ce0dfbde573a08b93497871981. U
Inventory
Tools (2)
Click any tool to inspect its schema.
~85 tokens total
Inventory
Resources (1)
mysql_tablesList available MySQL tables as resources
mysql://tables
Community
Reviews
Be the first to review
Have you used this server?
Share your experience - it helps other developers decide.
How easy was setup?Did it work reliably?How was the documentation?
Sign in to write a review.
Frequently Asked Questions
- Is Mysql_mcp_server safe to use?
- Mysql_mcp_server has no known CVEs as of the latest MCPpedia security scan. Authentication requirements were not detected automatically - check the project's documentation before connecting in a shared environment. Licensed under MIT.
- How do I install Mysql_mcp_server?
- Mysql_mcp_server supports copy-paste install configs on its MCPpedia page for Claude Desktop, Cursor, and Claude Code. Scroll to the Quick Install section and select your client.
- What can Mysql_mcp_server do?
- Mysql_mcp_server provides 2 tools: read_table, execute_query. See the full tools list on the server page for descriptions and parameters.
- What AI clients work with Mysql_mcp_server?
- Mysql_mcp_server is compatible with claude-desktop, cursor, claude-code. It uses stdio and sse transport.
- Is Mysql_mcp_server actively maintained?
- Mysql_mcp_server is recently maintained - last commit was 80 days ago. It has 1,400 GitHub stars.
Related
Similar servers
Others in data
Dbhub96Token-efficient database MCP server for PostgreSQL, MySQL, MariaDB, SQL Server, Oracle, SQLite
3.7k 2
Apify Mcp Server95Extract data from any website with thousands of scrapers, crawlers, and automations on Apify Store ⚡
12.4k 1
Vibe Assistant95A cross-platform desktop application for managing AI Agents and MCP Servers. 一款用于管理AI智能体与MCP服务器的跨平台桌面应用程序。
170 3
Firecrawl Mcp Server95Firecrawl, the context API for AI agents: search, scrape, interact with the web, plus paper search.
7.7k 4
MCP Security Weekly
Get CVE alerts and security updates for Mysql_mcp_server and similar servers.
Community
Discussion
Start a conversation
Ask a question, share a tip, or report an issue.
Has anyone used this with Cursor?How do you handle auth?Any alternatives?
Sign in to join the discussion.