Audit Trail

🛡️ Secure Your Audit Trail

💎 Value Proposition

• Execute complex logic via Code Mode, reducing token usage by 70-90%.
• Build AI integrations instantly.
• Empower agents with secure database access.
• Scale operations with robust connection pooling.
• Leverage OAuth 2.1 for enterprise security.

⚙️ Configuration

Activate the Audit Trail by passing appropriate flags when starting mysql-mcp:

• --audit-log <path>: Enables the audit log and specifies the file path (e.g., --audit-log /var/log/mcp-audit.jsonl).
• --audit-backup: Enables pre-mutation snapshots for DDL changes.
• --audit-reads: Includes read-scope tool calls (like SELECTs) in the audit log.
• --audit-redact: Automatically redacts sensitive parameters from the JSONL output.
• --audit-log-max-size: Maximum size for the audit log file.
• --audit-backup-data: Includes sample data in pre-mutation snapshots.
• --audit-backup-max-size: Maximum table size in bytes for data capture.

See the Configuration guide for all audit options, including sizes and redaction rules.

• Resources — mysql://audit-log resource details
• Code Mode — Admin scope requirements and native isolated-vm sandbox
• Tools — Full tool list with scope groups