High-risk tools in Mysql Mcp
14 of the 223 tools in Mysql Mcp are classified as high risk. This page profiles those tools specifically, with recommended policy actions and the attack patterns that target them.
Every operation listed below is an action PolicyLayer recommends controlling at the transport layer. Open any tool to see the full profile, risk score, and YAML policy snippet.
Tools at high risk
-
mysql_analyze_tableExecuteAnalyze tables to update index statistics for the query optimizer.
-
mysql_create_dumpExecuteGenerate mysqldump command for backing up database.
-
mysql_event_createExecuteCreate a scheduled event (one-time or recurring) to execute SQL at specified times.
-
mysql_flush_tablesExecuteFlush tables to ensure data is written to disk.
-
mysql_json_mergeExecuteMerge two JSON documents using JSON_MERGE_PATCH or JSON_MERGE_PRESERVE.
-
mysql_migration_applyExecuteExecute migration SQL and record it atomically. Note: MySQL DDL statements cannot be rolled back, they commit the current transaction.
-
mysql_optimize_tableExecuteOptimize tables to reclaim unused space and defragment data.
-
mysql_spatial_intersectionExecuteCalculate the intersection of two geometries.
-
mysql_spatial_transformExecuteTransform a geometry from one spatial reference system to another.
-
mysql_stats_row_numberExecuteAssign sequential row numbers within an ordered result set. Use partitionBy to restart numbering per group.
-
mysql_transaction_beginExecuteBegin a new transaction with optional isolation level. Returns a transaction ID for subsequent operations.
-
mysql_transaction_executeExecuteExecute multiple SQL statements atomically. All statements succeed or all are rolled back.
-
mysqlsh_run_scriptExecuteExecute a JavaScript, Python, or SQL script via MySQL Shell. Provides access to X DevAPI, AdminAPI, and all MySQL Shell features.
-
proxysql_commandsExecuteExecute ProxySQL admin commands like LOAD/SAVE for users, servers, query rules, and variables. Also supports FLUSH commands.
Attacks that target this class
High-risk tools in any server share these documented attack patterns. Each links to the full case and the defensive policy.