MySQL / MariaDB

Setup

1. Create a dedicated user and grant it only SELECT:

   CREATE USER 'amcp_reader'@'%' IDENTIFIED BY 'change-me';
   GRANT SELECT ON sales.* TO 'amcp_reader'@'%';
   FLUSH PRIVILEGES;
   

   Narrow '%' to the AnythingMCP host if you can — MySQL's host part of the account name is a real access control and worth using.
2. Set MYSQL_HOST, MYSQL_PORT (3306), MYSQL_DATABASE, MYSQL_USER and MYSQL_PASSWORD.

MariaDB works unchanged. The engine also accepts a mariadb:// DSN and normalises it, because the mysql2 driver only understands mysql://. Either scheme reaches a MariaDB server.

In MySQL a schema is a database. information_schema.tables.table_schema holds the database name, so the listing below is scoped to the one database you configured rather than to a schema inside it.

How a database connector behaves

• It installs read-only. The engine rejects anything that is not a read until you flip the switch in the connector's settings. That is a guard rail, not a security boundary: give the connection a database role that is itself read-only, and the guard rail never has to matter.
• Credentials live in the encrypted authConfig, not in the connection string. MYSQL_USER and MYSQL_PASSWORD are stored encrypted and spliced into the DSN at call time; the host and database name are stored in the plaintext baseUrl column.
• Results are capped at 1000 rows. A query that would return more comes back truncated with a flag. Aggregate in SQL rather than in the agent.
• A statement runs exactly as written. There is no query rewriting and no automatic LIMIT — an unbounded scan on a large table is a real unbounded scan on your production database. Say LIMIT.

Reachable from where?

• On AnythingMCP Cloud the server must accept connections from the public internet, which for a production database usually means it should not. Point the connector at a read replica, or self-host AnythingMCP inside the network.
• Self-hosted, add the host to SSRF_ALLOWED_HOSTS: the outbound guard blocks private address space by default, and 10.0.0.5 is exactly the shape it is there to block.