Audit Trail

🛡️ Secure Your Audit Trail

💎 Value Proposition

The enterprise-grade MySQL integration for AI agents. Drastically reduce LLM token overhead with sandboxed Code Mode execution, scale seamlessly with built-in connection pooling, and enforce zero-trust security via strict OAuth 2.1 access controls.

Monitor, diff, and rollback agent mutations in real-time to prevent production impact. Ensure compliance and security tracking without sacrificing performance. You can list, restore, and diff schema snapshots over time.

Tool	Scope	Parameters	Description
mysql_audit_search	Read	limit, offset, filters	Search and filter system audit logs
mysql_audit_list_backups	Read	(None)	List available snapshots
mysql_audit_restore_backup	Admin	backupId, dryRun	Restore a snapshot
mysql_audit_diff_backup	Read	backupId	Diff a snapshot

⚙️ Configuration

Activate the Audit Trail by passing appropriate flags when starting mysql-mcp:

• --audit-log <path>: Enables the audit log and specifies the file path (e.g., --audit-log /var/log/mcp-audit.jsonl).
• --audit-backup: Enables pre-mutation snapshots for DDL changes.
• --audit-reads: Includes read-scope tool calls (like SELECTs) in the audit log.
• --audit-redact: Automatically redacts sensitive parameters from the JSONL output.
• --audit-log-max-size: Maximum size for the audit log file.
• --audit-backup-data: Includes sample data in pre-mutation snapshots.
• --audit-backup-max-size: Maximum table size in bytes for data capture.

See the Configuration guide for all audit options, including sizes and redaction rules.

• Resources — mysql://audit-log resource details
• Code Mode — Admin scope requirements and native isolated-vm sandbox
• Tools — Full tool list with scope groups