mysql_security_sensitive_tables

What mysql_security_sensitive_tables does on Mysql Mcp

AI agents call mysql_security_sensitive_tables to retrieve information from Mysql Mcp without modifying anything. It is typically the context-gathering step in research, monitoring, and reporting workflows, before the agent takes action elsewhere.

Why mysql_security_sensitive_tables is rated Low

This tool performs read-only introspection of database schema to detect sensitive data locations. While it does not execute code or modify data, the medium severity reflects that exposing sensitive data locations could help an attacker target high-value information for exfiltration. The operation itself is non-destructive and informational.

From the tool's definition Tool name contains 'identify' and description states 'Identify tables and columns that may contain sensitive data' - this is a query/discovery operation that retrieves metadata about database structure without modifying data.

The rule that runs mysql_security_sensitive_tables safely

PolicyLayer is an MCP gateway: it sits between your AI agents and Mysql Mcp, and checks every tool call against a rule you set before the call runs. Nothing changes on the server itself. For mysql_security_sensitive_tables, this is the rule to start with:

{
  "version": "1",
  "default": "deny",
  "tools": {
    "mysql_security_sensitive_tables": {}
  }
}

Questions about mysql_security_sensitive_tables