// SCAN REPORT

Mysql Mcp

223 tools. 66 can modify or destroy data without limits.

14 destructive tools with no built-in limits. Policy required.

Last updated: 28 Jun 2026

66 can modify or destroy data

157 read-only

223 tools total

Community server · catalogue entry checked 28/06/2026

How to control Mysql Mcp ↓

TOOL MAP

What Mysql Mcp exposes to your agents

Read (157) Write / Execute (52) Destructive / Financial (14)

Running more than one server? Check your whole stack →

MOST DANGEROUS TOOLS

Critical Risk

The most dangerous Mysql Mcp tools

Destructive · High mysql_drop_partition Dropping a partition permanently removes all data stored in that partition with no recovery option (short of restore from backup). Destructive · Critical mysql_drop_schema This tool permanently deletes an entire database/schema and all contained data without possibility of recovery (unless backups exist outside this tool's scope). Destructive · High mysql_doc_drop_collection This tool performs an irreversible deletion of a document collection. Destructive · High mysql_doc_remove Deletion of documents from a database collection is a destructive operation that cannot be undone without a backup or transaction rollback.

66 of Mysql Mcp's 223 tools can modify, destroy, or commit something on every call — and an agent calls them with no built-in limits.

POLICY

How to control Mysql Mcp

PolicyLayer is an MCP gateway — it sits between your AI agents and Mysql Mcp, and nothing reaches the server without passing your rules. These are the rules we recommend:

Deny destructive operations

{
  "mysql_audit_restore_backup": {
    "deny_if": [
      {
        "conditions": [],
        "on_deny": "Blocked by default. Requires approval."
      }
    ]
  }
}

Destructive tools should never be available to autonomous agents without human approval.

Rate limit write operations

{
  "mysql_add_partition": {
    "limits": [
      {
        "counter": "mysql_add_partition_per_hour",
        "window": "hour",
        "max": 30,
        "scope": "grant"
      }
    ]
  }
}

Prevents bulk unintended modifications from agents caught in loops.

Cap read operations

{
  "mysql_audit_diff_backup": {
    "limits": [
      {
        "counter": "mysql_audit_diff_backup_per_minute",
        "window": "minute",
        "max": 60,
        "scope": "grant"
      }
    ]
  }
}

Controls API costs and prevents retry loops from exhausting upstream rate limits.

Create a free account and register Mysql Mcp — nothing to install.
Add these rules — paste them, or build them visually. Tune the limits to your setup.
Point your MCP client (Claude, Cursor, anything) at your gateway URL.

ENFORCE POLICY ON MYSQL →

Instant setup, no code required.

FULL CATALOGUE

All 223 Mysql Mcp tools

DESTRUCTIVE 14 tools

Destructive mysql_audit_restore_backup Restore a specific pre-mutation snapshot to the database. Destructive mysql_cascade_simulator Simulate the impact of DELETE, DROP, or TRUNCATE on a table. Returns affected tables, estimated row counts, ca Destructive mysql_doc_drop_collection Drop a document collection. Destructive mysql_doc_remove Remove documents from a collection. Destructive mysql_drop_partition Drop a partition from a partitioned table. Warning: This deletes all data in the partition! Destructive mysql_drop_schema Drop a database/schema. WARNING: This permanently deletes all data. Destructive mysql_drop_table Drop (delete) a table from the database. Destructive mysql_drop_view Drop a view. Destructive mysql_event_drop Remove a scheduled event. Destructive mysql_force_index Generate a query with FORCE INDEX hint. Destructive mysql_fulltext_drop Drop a FULLTEXT index from a table. Destructive mysql_json_remove Remove values from JSON columns at specified paths. Destructive mysql_migration_rollback Roll back a specific migration by ID or version. Destructive mysql_role_drop Drop a role.

EXECUTE 14 tools

Execute mysql_analyze_table Analyze tables to update index statistics for the query optimizer. Execute mysql_create_dump Generate mysqldump command for backing up database. Execute mysql_event_create Create a scheduled event (one-time or recurring) to execute SQL at specified times. Execute mysql_flush_tables Flush tables to ensure data is written to disk. Execute mysql_json_merge Merge two JSON documents using JSON_MERGE_PATCH or JSON_MERGE_PRESERVE. Execute mysql_migration_apply Execute migration SQL and record it atomically. Note: MySQL DDL statements cannot be rolled back, they commit Execute mysql_optimize_table Optimize tables to reclaim unused space and defragment data. Execute mysql_spatial_intersection Calculate the intersection of two geometries. Execute mysql_spatial_transform Transform a geometry from one spatial reference system to another. Execute mysql_stats_row_number Assign sequential row numbers within an ordered result set. Use partitionBy to restart numbering per group. Execute mysql_transaction_begin Begin a new transaction with optional isolation level. Returns a transaction ID for subsequent operations. Execute mysql_transaction_execute Execute multiple SQL statements atomically. All statements succeed or all are rolled back. Execute mysqlsh_run_script Execute a JavaScript, Python, or SQL script via MySQL Shell. Provides access to X DevAPI, AdminAPI, and all My Execute proxysql_commands Execute ProxySQL admin commands like LOAD/SAVE for users, servers, query rules, and variables. Also supports F

WRITE 38 tools

Write mysql_add_partition Add a new partition to a partitioned table. Write mysql_append_insight Append a business insight to the in-memory insights memo. Insights are accessible via the mysql://insights res Write mysql_collation_convert Convert column values to a different character set or collation. Write mysql_create_index Create an index on a table. Supports BTREE, HASH, FULLTEXT, and SPATIAL index types. Write mysql_create_schema Create a new database/schema with specified charset and collation. Write mysql_create_table Create a new table with specified columns, engine, and charset. Write mysql_create_view Create or replace a view with specified algorithm and check option. Write mysql_doc_add Add documents to a collection. Write mysql_doc_create_collection Create a new JSON document collection. Write mysql_doc_create_index Create an index on document fields. Write mysql_doc_modify Update documents in a collection. Write mysql_event_alter Modify an existing scheduled event schedule, body, or status. Write mysql_fulltext_create Create a FULLTEXT index on specified columns for fast text search. Write mysql_import_data Import data into a table from an array of row objects. Write mysql_json_array_append Append a value to a JSON array at the specified path. Write mysql_json_insert Insert values into JSON columns only if the path does not exist. Write mysql_json_replace Replace values in JSON columns only if the path exists. Write mysql_json_set Set or update values in JSON columns at specified paths. Write mysql_json_update Simple JSON value update by row ID. Write mysql_migration_init Initialize or verify the schema version tracking table (_mcp_schema_versions). Write mysql_migration_record Record a migration in the schema version tracking table with status Write mysql_restore_dump Generate command for restoring from mysqldump backup. Write mysql_role_assign Assign a role to a user. Write mysql_role_create Create a new role. Write mysql_role_grant Grant privileges to a role. Write mysql_role_revoke Revoke a role from a user, or privileges from a role. Write mysql_spatial_buffer Create a buffer (expanded area) around a geometry. Write mysql_spatial_create_column Add a geometry/spatial column to an existing table. Write mysql_spatial_create_index Create a SPATIAL index on a geometry column for faster queries. Write mysql_spatial_point Create a POINT geometry from longitude/latitude coordinates. Write mysql_spatial_polygon Create a POLYGON geometry from coordinates. Write mysql_stats_histogram View or update column histogram statistics (MySQL 8.0+). Write mysql_transaction_commit Commit a transaction, making all changes permanent. Write mysql_transaction_savepoint Create a savepoint within a transaction for partial rollback. Write mysql_write_query Execute a write SQL query (INSERT, UPDATE, DELETE). Uses prepared statements for safety. Write mysqlsh_import_json Import JSON documents from a file using util.importJson(). Supports NDJSON (one JSON object per line) and mult Write mysqlsh_import_table Parallel table import using util.importTable(). For CSV files, explicitly set fieldsTerminatedBy to Write mysqlsh_load_dump Load a MySQL Shell dump using util.loadDump(). Restores data from a dump created by dumpInstance, dumpSchemas,

READ 157 tools

EXPLORE

Related servers

Other MCP servers with similar tools — same risk classification, starter policies for each.

FAQ

Questions about Mysql Mcp

Can an AI agent delete data through the Mysql MCP server? +

Yes. The Mysql Mcp server exposes 14 destructive tools including mysql_audit_restore_backup, mysql_cascade_simulator, mysql_doc_drop_collection. These permanently remove resources with no undo. PolicyLayer blocks destructive tools by default so they never reach the upstream server.

How do I prevent bulk modifications through Mysql Mcp? +

The Mysql Mcp server has 38 write tools including mysql_add_partition, mysql_append_insight, mysql_collation_convert. Set a rate limit in your policy -- for example, 10 calls per hour prevents an agent from making more than 10 modifications per hour. PolicyLayer enforces this at the gateway, before calls reach Mysql Mcp.

How many tools does the Mysql MCP server expose? +

223 tools across 4 categories: Destructive, Execute, Read, Write. 157 are read-only. 66 can modify, create, or delete data.

How do I enforce a policy on Mysql Mcp? +

Register the Mysql MCP server in PolicyLayer, apply the suggested rules above (adjust the limits to your use case), and point your AI client at the PolicyLayer proxy URL instead of the server directly. Your agents keep the same tools; PolicyLayer evaluates every call against policy before it executes. Nothing to install, live in minutes.