Audit Trail
- Build unshakeable trust with dry-runnable visibility.
- Track database drift instantly.
- Enforce SOC2, HIPAA, and GDPR compliance with built-in redaction.
- Safely simulate disaster recovery with dry-run capabilities.
Empower teams with complete visibility into AI-driven database mutations before they happen. Ensure total database compliance and security tracking without sacrificing performance. mysql-mcp's Audit Trail tools empower your AI to seamlessly list, restore, and diff schema snapshots over time.
| Tool | Scope | Parameters | Description |
|---|---|---|---|
mysql_audit_search |
Read |
limit, offset, filters
|
Search and filter system audit logs |
mysql_audit_list_backups |
Read | (None) | List available snapshots |
mysql_audit_restore_backup |
Admin |
backupId, dryRun
|
Restore a snapshot |
mysql_audit_diff_backup |
Read | backupId |
Diff a snapshot |
To activate the Audit Trail on your server, you must pass the appropriate flags when starting mysql-mcp:
-
--audit-log <path>: Enables the audit log and specifies the file path (e.g.,--audit-log /var/log/mcp-audit.jsonl). -
--audit-backup: Enables pre-mutation snapshots for DDL and data changes. -
--audit-reads: Includes read-scope tool calls (like SELECTs) in the audit log. -
--audit-redact: Automatically redacts sensitive parameters from the JSONL output. -
--audit-backup-data: Enable full backup of modified rows. -
--audit-backup-max-size: Maximum size for backup data. -
--audit-log-max-size: Maximum size for the audit log file.
For a complete list of audit configuration options (including max file sizes and redaction rules), please refer to the Configuration guide.