Audit Trail

Audit Trail

🚀 Value Proposition

Build unshakeable trust. Empower teams with complete, dry-runnable visibility into AI-driven database mutations before they happen. Ensure total database compliance and security tracking without sacrificing performance. mysql-mcp's Audit Trail tools empower your AI to seamlessly list, restore, and diff schema snapshots over time. Track database drift instantly, enforce SOC2, HIPAA, and GDPR compliance using built-in sensitive data redaction, and safely simulate disaster recovery with dry-run capabilities.

Tool	Scope	Parameters	Description
mysql_audit_search	Read	limit, offset, filters	Search and filter system audit logs
mysql_audit_list_backups	Read	(None)	List available snapshots
mysql_audit_restore_backup	Admin	backupId, dryRun	Restore a snapshot
mysql_audit_diff_backup	Read	backupId	Diff a snapshot

⚙️ Configuration

To activate the Audit Trail on your server, you must pass the appropriate flags when starting mysql-mcp:

• --audit-log <path>: Enables the audit log and specifies the file path (e.g., --audit-log /var/log/mcp-audit.jsonl).
• --audit-backup: Enables pre-mutation snapshots for DDL and data changes.
• --audit-reads: Includes read-scope tool calls (like SELECTs) in the audit log.
• --audit-redact: Automatically redacts sensitive parameters from the JSONL output.

For a complete list of audit configuration options (including max file sizes and redaction rules), please refer to the Configuration guide.

• Resources — mysql://audit-log resource details
• Code Mode — Admin scope requirements and native isolated-vm sandbox
• Tools — Full tool list with scope groups