Is Mysql_mcp_server safe to use?

Mysql_mcp_server has no known CVEs as of the latest MCPpedia security scan. It does not require authentication, so any local process can connect — keep this in mind in shared environments. Licensed under MIT.

How do I install Mysql_mcp_server?

Mysql_mcp_server supports copy-paste install configs on its MCPpedia page for Claude Desktop, Cursor, and Claude Code. Scroll to the Quick Install section and select your client.

What can Mysql_mcp_server do?

Mysql_mcp_server provides 2 tools: read_table, execute_query. See the full tools list on the server page for descriptions and parameters.

What AI clients work with Mysql_mcp_server?

Mysql_mcp_server is compatible with claude-desktop, cursor, claude-code. It uses stdio and sse transport.

Is Mysql_mcp_server actively maintained?

Mysql_mcp_server is actively maintained — last commit was 22 days ago. It has 1,365 GitHub stars.

Mysql_mcp_server

Name: Mysql_mcp_server
Author: designcomputer

@smithery/cli · by designcomputer

A Model Context Protocol (MCP) server that enables secure interaction with MySQL databases

1.4k 7.8k/wk 2 tools GitHub npm PyPI

No known CVEs

MIT license

Actively maintained

Last commit 22d ago

Works with most clients

Transport: stdio, sse

2 tools · ~85 tok

Grade A · 0.0% of 200K ctx

MCPpedia last refreshed this data 9h ago

Edit this pageView history

Mysql_mcp_server is an MCP server that a Model Context Protocol (MCP) server that enables secure interaction with MySQL databases. Its tool list has not been published yet over stdio and sse, requires no API key, and scores 93/100 on MCPpedia's security, maintenance and efficiency rubric.

Data

Step 1

Install in your client

Config is the same across clients — only the file and path differ.

Supported in Claude Desktopstdio, sse · Node 18+

Paste into ~/Library/Application Support/Claude/claude_desktop_config.json

{
  "mcpServers": {
    "mysql": {
      "env": {
        "MYSQL_HOST": "localhost",
        "MYSQL_PORT": "3306",
        "MYSQL_USER": "your_username",
        "MYSQL_DATABASE": "your_database",
        "MYSQL_PASSWORD": "your_password"
      },
      "args": [
        "--directory",
        "path/to/mysql_mcp_server",
        "run",
        "mysql_mcp_server"
      ],
      "command": "uv"
    }
  }
}

Are you the author?

Add this badge to your README to show your security score and help users find safe servers.

Embed in your READMEAbout badges →

[![MCPpedia Score](https://mcppedia.org/api/badge/mysql-mcp-server)](https://mcppedia.org/s/mysql-mcp-server)

Read me

What Mysql_mcp_server does

A Model Context Protocol (MCP) implementation that enables secure interaction with MySQL databases. This server component facilitates communication between AI applications (hosts/clients) and MySQL databases, making database exploration and analysis safer and more structured through a controlled interface.

Test This Server

Run this in your terminal to verify the server starts. Then let us know if it worked — your result helps other developers.

npx -y '@smithery/cli' 2>&1 | head -1 && echo "✓ Server started successfully"

After testing, let us know if it worked:

Loading README…

Scored, not listed

Why this score

Five weighted categories — click any category to see the underlying evidence.

Score breakdown

93/100across 5 weighted dimensions

How we score →

0255075100

−7

Security

Maintenance

Efficiency

Documentation

Compatibility

Categoriesclick a row to see evidence

Security

OSV.dev

1 fixed

CVE-2026-11529medium · fixedCVSS 6.3

MySQL MCP Server is Vulnerable to SQL Injection Through its mysql URI Handler

A vulnerability was determined in designcomputer mysql-mcp-server up to 0.2.2. The impacted element is the function read_resource of the file src/mysql_mcp_server/server.py of the component mysql URI Handler. This manipulation of the argument uri_str causes sql injection. Remote exploitation of the attack is possible. The exploit has been publicly disclosed and may be utilized. Upgrading to version 0.3.0 is sufficient to resolve this issue. Patch name: 080bef9a96d625ce0dfbde573a08b93497871981. U

Affected: >= 0Fixed in 0.3.0source →

Inventory

Tools (2)

Click any tool to inspect its schema.

~85 tokens total

Inventory

Resources (1)

mysql_tables

List available MySQL tables as resources

mysql://tables

Community

Reviews

Be the first to review

Have you used this server?

Share your experience — it helps other developers decide.

How easy was setup?Did it work reliably?How was the documentation?

Frequently Asked Questions

Is Mysql_mcp_server safe to use?: Mysql_mcp_server has no known CVEs as of the latest MCPpedia security scan. It does not require authentication, so any local process can connect — keep this in mind in shared environments. Licensed under MIT.
How do I install Mysql_mcp_server?: Mysql_mcp_server supports copy-paste install configs on its MCPpedia page for Claude Desktop, Cursor, and Claude Code. Scroll to the Quick Install section and select your client.
What can Mysql_mcp_server do?: Mysql_mcp_server provides 2 tools: read_table, execute_query. See the full tools list on the server page for descriptions and parameters.
What AI clients work with Mysql_mcp_server?: Mysql_mcp_server is compatible with claude-desktop, cursor, claude-code. It uses stdio and sse transport.
Is Mysql_mcp_server actively maintained?: Mysql_mcp_server is actively maintained — last commit was 22 days ago. It has 1,365 GitHub stars.

Similar servers

Others in data

View all →

Supabase MCP Server96

Manage Supabase projects — databases, auth, storage, and edge functions

2.9k 4

Dbhub96

Zero-dependency, token-efficient database MCP server for Postgres, MySQL, SQL Server, MariaDB, SQLite.

3.4k 2

Firecrawl Mcp Server95

🔥 Official Firecrawl MCP Server - Adds powerful web scraping and search to Cursor, Claude and any other LLM clients.

7.3k 4

Mcp Server Typescript95

DataForSEO API modelcontextprotocol server

240 9

MCP Security Weekly

Get CVE alerts and security updates for Mysql_mcp_server and similar servers.

Community

Discussion

Start a conversation

Ask a question, share a tip, or report an issue.

Has anyone used this with Cursor?How do you handle auth?Any alternatives?

Edit this pageView history

Data

Step 1

Install in your client

Config is the same across clients — only the file and path differ.

Supported in Claude Desktopstdio, sse · Node 18+

Paste into ~/Library/Application Support/Claude/claude_desktop_config.json

{
  "mcpServers": {
    "mysql": {
      "env": {
        "MYSQL_HOST": "localhost",
        "MYSQL_PORT": "3306",
        "MYSQL_USER": "your_username",
        "MYSQL_DATABASE": "your_database",
        "MYSQL_PASSWORD": "your_password"
      },
      "args": [
        "--directory",
        "path/to/mysql_mcp_server",
        "run",
        "mysql_mcp_server"
      ],
      "command": "uv"
    }
  }
}

Are you the author?

Add this badge to your README to show your security score and help users find safe servers.

Embed in your READMEAbout badges →

[![MCPpedia Score](https://mcppedia.org/api/badge/mysql-mcp-server)](https://mcppedia.org/s/mysql-mcp-server)

Read me

What Mysql_mcp_server does

Test This Server

Run this in your terminal to verify the server starts. Then let us know if it worked — your result helps other developers.

npx -y '@smithery/cli' 2>&1 | head -1 && echo "✓ Server started successfully"

After testing, let us know if it worked:

README

MySQL MCP Server

Note: MySQL MCP Server supports both standard input/output (STDIO) and Streamable HTTP (SSE) transport modes. The SSE mode is recommended for remote/self-hosted deployments.

Deployment options

Hosted — Fronteir AI runs the server for you; no local setup required.
Local — Smithery installs and runs the server on your own machine.

Features

List available MySQL tables as resources
Read table contents
Execute SQL queries with proper error handling
Multi-database mode (Optional MYSQL_DATABASE)
SSE/HTTP transport support (MCP_TRANSPORT=sse)
SSH Tunneling support
Comprehensive schema information
Table data sampling
Secure database access through environment variables
Comprehensive logging

Installation

Manual Installation

pip install mysql-mcp-server

Installing via Smithery

To install MySQL MCP Server for Claude Desktop automatically via Smithery:

npx -y @smithery/cli install designcomputer/mysql-mcp-server --client claude

Installing via Claude Code CLI

claude mcp add --transport stdio designcomputer-mysql_mcp_server uvx mysql_mcp_server

Installing via Autohand Code CLI

autohand mcp add mysql env MYSQL_HOST=localhost MYSQL_PORT=3306 MYSQL_USER=your_username MYSQL_PASSWORD=your_password MYSQL_DATABASE=your_database uvx mysql_mcp_server

Add --scope project after mcp add to keep the registration in the current workspace. See Autohand Code for current CLI details.

Configuration

Set the following environment variables:

MYSQL_HOST=localhost     # Database host
MYSQL_PORT=3306         # Optional: Database port (defaults to 3306 if not specified)
MYSQL_USER=your_username
MYSQL_PASSWORD=your_password
MYSQL_DATABASE=your_database # Optional: Omit for multi-database mode

# Advanced Configuration
MYSQL_SSL_MODE=DISABLED  # DISABLED, REQUIRED, VERIFY_CA, VERIFY_IDENTITY
MYSQL_CONNECT_TIMEOUT=10 # Timeout in seconds

# Connection behaviour (Optional)
MYSQL_SQL_MODE=TRADITIONAL           # SQL mode applied to the connection (default: TRADITIONAL)

# Compatibility (Optional)
MYSQL_CHARSET=utf8mb4
MYSQL_COLLATION=utf8mb4_unicode_ci
MYSQL_AUTH_PLUGIN=       # e.g., mysql_native_password for older MySQL versions
MYSQL_USE_PURE=false     # Force the pure-Python connector (default: false)
MYSQL_RAISE_ON_WARNINGS=false        # Raise on SQL warnings (default: false)

# SSE Transport (Optional)
MCP_TRANSPORT=stdio      # stdio or sse
MCP_SSE_HOST=0.0.0.0     # Listen on all interfaces (required for Docker/hosting)
PORT=8000                # HTTP port (fallback for MCP_SSE_PORT)
MCP_SSE_ALLOWED_HOSTS=   # Comma-separated allowed Host headers (default: localhost:{port},127.0.0.1:{port})

# SSH Tunneling (Optional)
MYSQL_SSH_ENABLE=false   # Set to true to enable
MYSQL_SSH_HOST=          # SSH jump host
MYSQL_SSH_PORT=22        # SSH port
MYSQL_SSH_USER=          # SSH username
MYSQL_SSH_KEY_PATH=      # Path to SSH private key
MYSQL_SSH_REMOTE_HOST=localhost #

... [View full README on GitHub](https://github.com/designcomputer/mysql_mcp_server#readme)

Loading README…

Scored, not listed

Why this score

Five weighted categories — click any category to see the underlying evidence.

Score breakdown

93/100across 5 weighted dimensions

How we score →

0255075100

−7

Security

Maintenance

Efficiency

Documentation

Compatibility

Categoriesclick a row to see evidence

Security

OSV.dev

1 fixed

CVE-2026-11529medium · fixedCVSS 6.3

MySQL MCP Server is Vulnerable to SQL Injection Through its mysql URI Handler

Affected: >= 0Fixed in 0.3.0source →

Inventory

Tools (2)

Click any tool to inspect its schema.

~85 tokens total

Inventory

Resources (1)

mysql_tables

List available MySQL tables as resources

mysql://tables

Community

Reviews

Be the first to review

Have you used this server?

Share your experience — it helps other developers decide.

How easy was setup?Did it work reliably?How was the documentation?

Frequently Asked Questions

Is Mysql_mcp_server safe to use?: Mysql_mcp_server has no known CVEs as of the latest MCPpedia security scan. It does not require authentication, so any local process can connect — keep this in mind in shared environments. Licensed under MIT.
How do I install Mysql_mcp_server?: Mysql_mcp_server supports copy-paste install configs on its MCPpedia page for Claude Desktop, Cursor, and Claude Code. Scroll to the Quick Install section and select your client.
What can Mysql_mcp_server do?: Mysql_mcp_server provides 2 tools: read_table, execute_query. See the full tools list on the server page for descriptions and parameters.
What AI clients work with Mysql_mcp_server?: Mysql_mcp_server is compatible with claude-desktop, cursor, claude-code. It uses stdio and sse transport.
Is Mysql_mcp_server actively maintained?: Mysql_mcp_server is actively maintained — last commit was 22 days ago. It has 1,365 GitHub stars.