mysql_user_privileges

What mysql_user_privileges does on Mysql

AI agents call mysql_user_privileges to retrieve information from Mysql without modifying anything. It is typically the context-gathering step in research, monitoring, and reporting workflows, before the agent takes action elsewhere.

Why mysql_user_privileges is rated Low

This tool queries and displays information about the current user's database privileges. It is purely informational (Read category) with no side effects. Severity is low because the output is restricted to the invoking user's own privilege scope and does not expose credentials or enable unauthorized actions by itself. The confidence is high given the clear, explicit description.

From the tool's definition Tool description states 'Show current user's privileges' — a query operation that retrieves privilege metadata without modifying data or executing external operations.

The rule that runs mysql_user_privileges safely

PolicyLayer is an MCP gateway: it sits between your AI agents and Mysql, and checks every tool call against a rule you set before the call runs. Nothing changes on the server itself. For mysql_user_privileges, this is the rule to start with:

{
  "version": "1",
  "default": "deny",
  "tools": {
    "mysql_user_privileges": {}
  }
}

Questions about mysql_user_privileges