Architecture

Architecture

🚀 Value Proposition

Engineered for uncompromising AI autonomy. Unleash your AI agents with mysql-mcp's Adaptive Instruction Architecture. Built for mission-critical enterprise environments. It guarantees zero-trust security and limitless scalability. Slash token consumption with V8 sandboxing. Toggle dynamic transports seamlessly. Lock down data with OAuth 2.1. Rely on strict schema validation powered by Zod 4's .safeParse() architecture.

See code-map.md in the main repository for architecture, logic flows, and module trees.

Our Adaptive Instruction Architecture compiles modular markdown into an ultra-lean artifact. We transmit pristine pointer strings to clients. This obliterates token bloat. It unlocks dynamic help via mysql://help resources.

⚡ Unlock Core Capabilities

• 200+ Specialized Tools distributed across 28 Tool Groups to handle everything from CRUD to Spatial analysis.
• 16 Shortcuts (Tool Filtering) to easily configure context-friendly setups.
• 23 Observability Resources and 19 AI-Powered Prompts to empower proactive agent workflows.

🏗️ Scale Infrastructure Seamlessly

• Code Mode Execution: An isolated-vm sandbox reduces token overhead. This delivers massive cost savings. It includes configurable payload caps and rate limiting.
• Supported Transports: Seamlessly switch between stdio, http (Streamable HTTP /mcp), and sse (Legacy /sse).
• Authentication: We support Simple Bearer Tokens or full OAuth 2.1 (RFC 9728/8414) via Keycloak.

🔄 Review Recent Enhancements

• fix(security): allow mask data alias validation at MCP boundary.
• docs(tests): strengthen anti-hallucination guardrails across coordinator workflows (list_dir requirements, task.md checklist).
• fix(core): add conditional update aliases for data and conditions.
• fix(security): require at least one filter for audit tool to prevent payload bloat.
• fix(optimization): allow database-wide index audit in indexRecommendation by removing empty payload validation.
• test(http): streamable and http transport tests added.

🛡️ Enforce Ironclad Security

• Dual-Schema Validation Pattern: Tools use a Base schema for visibility. They use a Derived schema for parsing. This supports aliases without breaking JSON Schema. Zod 4's .safeParse() architecture enforces impenetrable boundaries. We guarantee zero-hallucination parsing. We trap errors at the MCP boundary. This enforces graceful degradation.