Audit Trail

🛡️ Secure Your Audit Trail

Value Proposition Ensure compliance and maintain deep visibility. mysql-mcp delivers enterprise-grade database operations with comprehensive audit trails, ensuring every action is recorded and secure within strict execution boundaries. Read the full value proposition.

⚙️ Configuration

Deploy comprehensive forensic visibility by enabling the Audit Trail. Activate it by passing the following flags during server initialization:

• --audit-log <path>: Enables the audit log and specifies the file path (e.g., --audit-log /var/log/mcp-audit.jsonl).
• --audit-backup: Enables pre-mutation snapshots for DDL changes.
• --audit-reads: Includes read-scope tool calls (like SELECTs) in the audit log.
• --audit-redact: Automatically redacts sensitive parameters from the JSONL output.
• --audit-log-max-size: Maximum size for the audit log file.
• --audit-backup-data: Includes sample data in pre-mutation snapshots.
• --audit-backup-max-size: Maximum table size in bytes for data capture.

See the Configuration guide for all audit options, including sizes and redaction rules.

• Resources — mysql://audit-log resource details
• Code Mode — Admin scope requirements and native isolated-vm sandbox
• Tools — Full tool list with scope groups