mysql_show_procedure_params

What mysql_show_procedure_params does on Mcp Windows

AI agents call mysql_show_procedure_params to retrieve information from Mcp Windows without modifying anything. It is typically the context-gathering step in research, monitoring, and reporting workflows, before the agent takes action elsewhere.

Why mysql_show_procedure_params is rated Low

The tool retrieves information about stored procedure definitions without modifying data or executing procedures. However, severity is elevated to medium because exposed database introspection can reveal stored procedure logic and parameters that may contain sensitive information or hint at backend operations, potentially aiding reconnaissance for more serious attacks.

From the tool's definition Tool name and description indicate querying/displaying stored procedure parameters: 'show parameters of a stored procedure.' This is a read operation retrieving metadata about database objects.

The rule that runs mysql_show_procedure_params safely

PolicyLayer is an MCP gateway: it sits between your AI agents and Mcp Windows, and checks every tool call against a rule you set before the call runs. Nothing changes on the server itself. For mysql_show_procedure_params, this is the rule to start with:

{
  "version": "1",
  "default": "deny",
  "tools": {
    "mysql_show_procedure_params": {}
  }
}

Questions about mysql_show_procedure_params