Back to Home
psetiawan icon

mysql_mcp_server

by psetiawan

Overview

This server allows Continue.dev to interact with a MySQL database by providing resources (tables, rows) and tools (SQL query execution) via the MCP 2024 protocol.

Installation

Run Command
node server.js --mysql --host localhost --database DBNAME --user USERNAME --password YOURPASS

Security Notes

CRITICAL: The `tools/call` handler executes user-provided SQL queries (restricted to SELECT) directly via `pool.query(sql)` without parameterization for values. This makes it vulnerable to SQL injection within SELECT statements, allowing for data exfiltration or logic bypass. Additionally, database credentials (especially password) are passed as command-line arguments, which is insecure as they can be exposed in process listings (e.g., `ps aux`).

Similar Servers

Stats

Interest Score0
Security Score4
Cost ClassMedium
Avg Tokens2000
Stars0
Forks0
Last Update2025-11-22

Tags

MySQLContinue.devDatabase IntegrationMCP ServerNode.js