show_global_variables

What show_global_variables does on Mysql

AI agents call show_global_variables to retrieve information from Mysql without modifying anything. It is typically the context-gathering step in research, monitoring, and reporting workflows, before the agent takes action elsewhere.

Why show_global_variables is rated Low

This tool queries and displays MySQL global variables (configuration parameters like max_connections, timeout values, etc.). It has no side effects, does not modify state, and is consistent with the server's advertised read-only monitoring capabilities. The low severity reflects minimal risk even if misused by an agent, as viewing configuration poses no data loss or operational harm.

From the tool's definition Tool name 'show_global_variables' and server description emphasizing 'read-only queries' and 'server monitoring' indicate this retrieves configuration data without modification. The verb 'show' is a pure read operation in MySQL context.

The rule that runs show_global_variables safely

PolicyLayer is an MCP gateway: it sits between your AI agents and Mysql, and checks every tool call against a rule you set before the call runs. Nothing changes on the server itself. For show_global_variables, this is the rule to start with:

{
  "version": "1",
  "default": "deny",
  "tools": {
    "show_global_variables": {}
  }
}

Questions about show_global_variables