← Back to search Server uses filesystem capabilities via: fs sync ops Server uses env_vars capabilities via: process.env
@sigma4life/mysql-mcp-server
MCP server for MySQL schema introspection and guarded read-only queries
? Not scanned yet
Versions
1.0.1latestMay 11, 2026
1.0.0May 11, 2026
Tools 0
No tools indexed yet.
Permissions 2
filesystem low env_vars low Scan Findings 22
info
Sandbox failed to start for behavioral verification
medium
Vulnerable dependency: @modelcontextprotocol/sdk@1.0.4 (GHSA-w48q-cv73-mx4w)
medium
Vulnerable dependency: mysql2@3.12.0 (GHSA-3f6p-5ww8-9rcr)
medium
Vulnerable dependency: mysql2@3.12.0 (GHSA-rgwj-5xj2-c3m3)
info
package.json metadata
info
Transport: stdio
info
Required env vars (6)
info
Sandbox failed to start for output poisoning scan
low
Permission: filesystem access detected
low
Permission: env_vars access detected
info
SBOM generated: 231 components
critical
Database URL with Password found in eltonf-mysql-mcp-server-79a8fe0/README.md
critical
Database URL with Password found in eltonf-mysql-mcp-server-79a8fe0/src/cli.ts
critical
Database URL with Password found in eltonf-mysql-mcp-server-79a8fe0/docs/clients/vscode.md
critical
Database URL with Password found in eltonf-mysql-mcp-server-79a8fe0/docs/clients/claude-desktop.md
critical
Database URL with Password found in eltonf-mysql-mcp-server-79a8fe0/docs/clients/cursor.md
critical
Database URL with Password found in eltonf-mysql-mcp-server-79a8fe0/docs/clients/claude-code.md
critical
Database URL with Password found in eltonf-mysql-mcp-server-79a8fe0/docs/clients/opencode.md
critical
Database URL with Password found in eltonf-mysql-mcp-server-79a8fe0/docs/clients/codex.md
critical
Database URL with Password found in eltonf-mysql-mcp-server-79a8fe0/src/core/database-url.ts
high
Hardcoded Password found in eltonf-mysql-mcp-server-79a8fe0/src/core/database-url.ts
medium
No build provenance detected (SLSA L0)