Audit Trail

🛡️ Secure Your Audit Trail

🚀 Value Proposition

• Forge unshakeable trust with zero-trust, dry-runnable visibility and immutable AI forensics.
• Track database drift instantly.
• Enforce SOC2, HIPAA, and GDPR compliance with built-in redaction.
• Safely simulate disaster recovery with dry-run capabilities.

Transform your database into a zero-trust environment using immutable AI forensics. You can monitor, diff, and rollback agent mutations in real-time. This prevents production impact. Ensure total compliance and security tracking without sacrificing performance. Audit Trail tools empower your AI. You can list, restore, and diff schema snapshots over time.

Tool	Scope	Parameters	Description
mysql_audit_search	Read	limit, offset, filters	Search and filter system audit logs
mysql_audit_list_backups	Read	(None)	List available snapshots
mysql_audit_restore_backup	Admin	backupId, dryRun	Restore a snapshot
mysql_audit_diff_backup	Read	backupId	Diff a snapshot

⚙️ Configuration

Activate the Audit Trail by passing appropriate flags when starting mysql-mcp:

• --audit-log <path>: Enables the audit log and specifies the file path (e.g., --audit-log /var/log/mcp-audit.jsonl).
• --audit-backup: Enables pre-mutation snapshots for DDL changes.
• --audit-reads: Includes read-scope tool calls (like SELECTs) in the audit log.
• --audit-redact: Automatically redacts sensitive parameters from the JSONL output.
• --audit-log-max-size: Maximum size for the audit log file.
• --audit-backup-data: Includes sample data in pre-mutation snapshots.
• --audit-backup-max-size: Maximum table size in bytes for data capture.

See the Configuration guide for all audit options, including sizes and redaction rules.

• Resources — mysql://audit-log resource details
• Code Mode — Admin scope requirements and native isolated-vm sandbox
• Tools — Full tool list with scope groups