@berthojoris/mcp-mysql-server 1.13.0 → 1.14.0

package/CHANGELOG.md

@@ -5,6 +5,14 @@ All notable changes to the MySQL MCP Server will be documented in this file.
 The format is based on [Keep a Changelog](https://keepachangelog.com/en/1.0.0/),
 and this project adheres to [Semantic Versioning](https://semver.org/spec/v2.0.0.html).
 
+## [1.14.0] - 2025-12-08
+
+### Added
+- **Data Masking Profiles** - New security feature to mask sensitive data in query responses.
+  - Configurable via `MCP_MASKING_PROFILE` environment variable.
+  - Profiles: `none` (default), `soft` (secrets), `partial` (secrets + PII), `strict` (all sensitive).
+  - Automatically applies to `run_query` and `read_records`.
+
 ## [1.13.0] - 2025-12-07
 
 ### Added

package/DOCUMENTATIONS.md

@@ -7,7 +7,7 @@ This file contains detailed documentation for all features of the MySQL MCP Serv
 ## Table of Contents
 
 1. [Category Filtering System](#🆕-category-filtering-system) - NEW!
-2. [🔧 Complete Tools Reference](#🔧-complete-tools-reference) - All 120 tools organized by category
+2. [🔧 Complete Tools Reference](#🔧-complete-tools-reference) - All 124 tools organized by category
 3. [DDL Operations](#🏗️-ddl-operations)
 4. [Data Export Tools](#📤-data-export-tools)
 5. [Data Import Tools](#📥-data-import-tools)
@@ -3759,7 +3759,44 @@ Each bulk operation returns performance metrics:
 
 ---
 
-## 🤖 OpenAI Codex Integration
+## 🎭 Data Masking
+ 
+ The MySQL MCP server includes a robust data masking layer to protect sensitive information (PII, credentials) in query results. This is useful when sharing database access with AI agents or third parties.
+ 
+ ### Features
+ 
+ - **Profile-Based Masking**: Easy configuration profiles (`none`, `soft`, `partial`, `strict`)
+ - **Automatic Detection**: Automatically identifies sensitive columns by name (e.g., `email`, `password`, `ssn`)
+ - **Multiple Strategies**:
+   - **REDACT**: Replaces value with `[REDACTED]`
+   - **PARTIAL**: Partially masks email (`j***@d.com`) and phone/CC (`***1234`)
+   - **HASH**: (Internal placeholder)
+ 
+ ### Configuration
+ 
+ Configure the masking profile via the `MCP_MASKING_PROFILE` environment variable:
+ 
+ ```bash
+ MCP_MASKING_PROFILE=partial
+ ```
+ 
+ ### Profiles Reference
+ 
+ | Profile | Description | Credentials (password, key) | PII (email, phone, ssn) |
+ |---------|-------------|-----------------------------|-------------------------|
+ | `none` | No masking (default) | Show | Show |
+ | `soft` | Protect secrets only | **REDACT** | Show |
+ | `partial` | Balanced security | **REDACT** | **PARTIAL** (j***@...) |
+ | `strict` | Maximum security | **REDACT** | **REDACT** |
+ 
+ ### Behavior
+ 
+ - Masking applies automatically to `run_query` and `read_records` results.
+ - It filters output **after** the query is run, so WHERE clauses still work on the real data (e.g., you can search by email, but the result will be masked).
+ 
+ ---
+ 
+ ## 🤖 OpenAI Codex Integration
 
 OpenAI Codex CLI and VS Code Extension support MCP servers through a shared TOML configuration file. This section provides detailed setup instructions for integrating the MySQL MCP Server with Codex.
 
@@ -4144,7 +4181,7 @@ MIT License - see [LICENSE](LICENSE) file for details.
 | Drift & Migration Assistant (Schema diff + risk summary) | High | High | 4 | ✅ Completed |
 | Safety Sandbox Mode (runQuery dry-run/EXPLAIN-only) | Medium | Low | 5 | ✅ Completed |
 | Anomaly & Slow-Query Watcher | Medium | Medium | 6 | ✅ Completed |
-| Data Masking Profiles for Responses | Medium | Medium | 7 | Planned |
+| Data Masking Profiles for Responses | Medium | Medium | 7 | ✅ Completed |
 | Workflow Macros (e.g., safe_export_table) | Medium | Low | 8 | Planned |
 | Agent-Facing Changelog Feed | Medium | Low | 9 | Planned |
 | Connection Profiles (dev/stage/prod with allow/deny) | High | Low | 10 | Planned |

package/README.md

@@ -50,7 +50,7 @@ Add to your AI agent config (`.mcp.json`, `.cursor/mcp.json`, etc.):
   - [Environment Variables](#environment-variables-configuration)
   - [Local Development](#local-path-configuration)
 - [Permission System](#-permission-system)
-- [Available Tools (120 total)](#-available-tools)
+- [Available Tools (124 total)](#-available-tools)
 - [Documentation](#-detailed-documentation)
 - [Comparison: MCP vs Manual Access](#-mysql-mcp-vs-manual-database-access)
 - [License](#-license)
@@ -63,13 +63,14 @@ Add to your AI agent config (`.mcp.json`, `.cursor/mcp.json`, etc.):
 |----------|-------------|
 | **Full MCP Support** | Works with Claude Code, Cursor, Windsurf, Zed, Cline, Kilo Code, Roo Code, Gemini CLI, OpenAI Codex, and any MCP-compatible AI agent |
 | **Security First** | Parameterized queries, SQL injection protection, permission-based access control |
-| **121 Powerful Tools** | Complete database operations including CRUD, DDL, transactions, stored procedures, backup/restore, migrations |
+| **124 Powerful Tools** | Complete database operations including CRUD, DDL, transactions, stored procedures, backup/restore, migrations |
 | **Adaptive Presets** | Built-in ReadOnly/Analyst/DBA Lite permission bundles with override merging |
 | **Schema-Aware RAG Pack** | Compact schema snapshots (tables, PK/FK, row estimates) tailored for embeddings-friendly prompts |
 | **Category Filtering** | 22 documentation categories for intuitive, fine-grained access control (backward compatible with 10 legacy categories) |
 | **Transaction Support** | Full ACID transaction management (BEGIN, COMMIT, ROLLBACK) |
 | **Schema Migrations** | Version control for database schema with up/down migrations |
 | **Dual Mode** | Run as MCP server OR as REST API |
+| **Data Masking** | Protect PII/Secrets in responses with configurable profiles (soft/partial/strict) |
 | **TypeScript** | Fully typed with TypeScript definitions |
 
 ---
@@ -106,6 +107,7 @@ DB_USER=root
 DB_PASSWORD=yourpassword
 DB_NAME=yourdatabase
 MCP_CONFIG=list,read,utility
+MCP_MASKING_PROFILE=partial
 ```
 
 ### 2. Build Project (If Cloned Locally)
@@ -367,7 +369,8 @@ Alternative approach using environment variables instead of connection string:
         "DB_PASSWORD": "your_password",
         "DB_NAME": "your_database",
         "MCP_PERMISSIONS": "list,read,utility",
-        "MCP_CATEGORIES": "database_discovery,performance_monitoring"
+        "MCP_CATEGORIES": "database_discovery,performance_monitoring",
+        "MCP_MASKING_PROFILE": "partial"
       }
     }
   }
@@ -496,12 +499,12 @@ Use these categories for fine-grained control that matches the tool organization
 | `server_management` | 9 | Process list, explain queries, server info |
 | `performance_monitoring` | 10 | Metrics, slow queries, health checks |
 | `cache_management` | 5 | Query cache stats and configuration |
-| `query_optimization` | 2 | Analyze queries, get optimization hints |
+| `query_optimization` | 3 | Analyze queries, get optimization hints |
 | `backup_restore` | 5 | Backup/restore database and tables |
 | `import_export` | 5 | Import/export JSON, CSV, SQL |
 | `data_migration` | 5 | Copy, move, clone, sync table data |
 | `schema_migrations` | 9 | Version control for database schema |
-| `analysis` | 3 | AI context optimization and data analysis |
+| `analysis` | 4 | AI context optimization and data analysis |
 
 ### Legacy Categories (Backward Compatible)
 
@@ -531,7 +534,7 @@ Use these categories for fine-grained control that matches the tool organization
 | **Application Backend** | `database_discovery,crud_operations,bulk_operations,custom_queries,transaction_management` | Full app support |
 | **Development & Testing** | `database_discovery,crud_operations,bulk_operations,custom_queries,schema_management,utilities,transaction_management` | Development access |
 | **DBA & DevOps** | `database_discovery,schema_management,table_maintenance,backup_restore,schema_migrations,performance_monitoring` | Admin tasks |
-| **Full Access** | *(leave empty)* | All 120 tools enabled |
+| **Full Access** | *(leave empty)* | All 124 tools enabled |
 
 #### Using Legacy Categories (Backward Compatible)
 
@@ -652,11 +655,11 @@ Use both 2nd argument (permissions) and 3rd argument (categories):
 
 ## Available Tools
 
-The MCP server provides **120 powerful tools** organized into categories:
+The MCP server provides **124 powerful tools** organized into categories:
 
 ### Quick Reference
 
-**121 Tools Available** - Organized into 22 categories
+**124 Tools Available** - Organized into 22 categories
 
 | Category | Count | Key Tools |
 |----------|-------|-----------|

package/dist/security/maskingLayer.d.ts

@@ -0,0 +1,37 @@
+export declare enum MaskingStrategy {
+    REDACT = "redact",// Replace with [REDACTED]
+    PARTIAL = "partial",// Show first/last chars: a***@b.com
+    HASH = "hash",// SHA256 hash (simulated for simplicity or real)
+    NONE = "none"
+}
+export interface MaskingRule {
+    columnPattern: RegExp;
+    strategy: MaskingStrategy;
+}
+export declare enum MaskingProfile {
+    NONE = "none",
+    SOFT = "soft",// Mask only credentials (passwords, secrets)
+    PARTIAL = "partial",// Mask credentials + partial mask PII (email, phone)
+    STRICT = "strict"
+}
+/**
+ * Data Masking Layer
+ * Handles identifying and masking sensitive data in query results
+ */
+export declare class MaskingLayer {
+    private profile;
+    private rules;
+    constructor(profile?: string);
+    private parseProfile;
+    private getRulesForProfile;
+    /**
+     * Check if filtering is active
+     */
+    isEnabled(): boolean;
+    getProfile(): MaskingProfile;
+    /**
+     * Apply masking to a dataset (array of objects)
+     */
+    processResults(data: any[]): any[];
+    private applyStrategy;
+}

package/dist/security/maskingLayer.js

@@ -0,0 +1,131 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.MaskingLayer = exports.MaskingProfile = exports.MaskingStrategy = void 0;
+var MaskingStrategy;
+(function (MaskingStrategy) {
+    MaskingStrategy["REDACT"] = "redact";
+    MaskingStrategy["PARTIAL"] = "partial";
+    MaskingStrategy["HASH"] = "hash";
+    MaskingStrategy["NONE"] = "none"; // No masking
+})(MaskingStrategy || (exports.MaskingStrategy = MaskingStrategy = {}));
+var MaskingProfile;
+(function (MaskingProfile) {
+    MaskingProfile["NONE"] = "none";
+    MaskingProfile["SOFT"] = "soft";
+    MaskingProfile["PARTIAL"] = "partial";
+    MaskingProfile["STRICT"] = "strict"; // Redact all PII and credentials
+})(MaskingProfile || (exports.MaskingProfile = MaskingProfile = {}));
+/**
+ * Data Masking Layer
+ * Handles identifying and masking sensitive data in query results
+ */
+class MaskingLayer {
+    constructor(profile = "none") {
+        this.profile = this.parseProfile(profile);
+        this.rules = this.getRulesForProfile(this.profile);
+    }
+    parseProfile(input) {
+        const normalized = input.toLowerCase().trim();
+        if (Object.values(MaskingProfile).includes(normalized)) {
+            return normalized;
+        }
+        return MaskingProfile.NONE;
+    }
+    getRulesForProfile(profile) {
+        const credentialsPattern = /^(password|passwd|pwd|secret|token|api_key|auth_key|access_token|refresh_token)$/i;
+        const piiPattern = /^(email|phone|mobile|cell|ssn|social_security|credit_card|cc_number|card_number|iban|dob|date_of_birth)$/i;
+        switch (profile) {
+            case MaskingProfile.NONE:
+                return [];
+            case MaskingProfile.SOFT:
+                return [
+                    { columnPattern: credentialsPattern, strategy: MaskingStrategy.REDACT }
+                ];
+            case MaskingProfile.PARTIAL:
+                return [
+                    { columnPattern: credentialsPattern, strategy: MaskingStrategy.REDACT },
+                    { columnPattern: piiPattern, strategy: MaskingStrategy.PARTIAL }
+                ];
+            case MaskingProfile.STRICT:
+                return [
+                    { columnPattern: credentialsPattern, strategy: MaskingStrategy.REDACT },
+                    { columnPattern: piiPattern, strategy: MaskingStrategy.REDACT }
+                ];
+            default:
+                return [];
+        }
+    }
+    /**
+     * Check if filtering is active
+     */
+    isEnabled() {
+        return this.profile !== MaskingProfile.NONE;
+    }
+    getProfile() {
+        return this.profile;
+    }
+    /**
+     * Apply masking to a dataset (array of objects)
+     */
+    processResults(data) {
+        if (!this.isEnabled() || !data || data.length === 0) {
+            return data;
+        }
+        // Identify columns to mask based on the first record (optimization)
+        const firstRecord = data[0];
+        const columns = Object.keys(firstRecord);
+        const columnsToMask = [];
+        for (const col of columns) {
+            for (const rule of this.rules) {
+                if (rule.columnPattern.test(col)) {
+                    columnsToMask.push({ col, strategy: rule.strategy });
+                    break; // Apply first matching rule
+                }
+            }
+        }
+        if (columnsToMask.length === 0) {
+            // No sensitive columns found
+            return data;
+        }
+        // Apply masking to all records
+        return data.map(record => {
+            const maskedRecord = { ...record };
+            for (const { col, strategy } of columnsToMask) {
+                if (maskedRecord[col] !== null && maskedRecord[col] !== undefined) {
+                    maskedRecord[col] = this.applyStrategy(maskedRecord[col], strategy);
+                }
+            }
+            return maskedRecord;
+        });
+    }
+    applyStrategy(value, strategy) {
+        const strVal = String(value);
+        switch (strategy) {
+            case MaskingStrategy.REDACT:
+                return "[REDACTED]";
+            case MaskingStrategy.PARTIAL:
+                if (strVal.includes('@')) {
+                    // Email masking: j***@domain.com
+                    const [local, domain] = strVal.split('@');
+                    const maskedLocal = local.length > 2 ? local[0] + '***' + local[local.length - 1] : '***';
+                    return `${maskedLocal}@${domain}`;
+                }
+                else if (strVal.length > 4) {
+                    // Generic partial: show last 4 chars (e.g. phone/cc)
+                    // or first 1 + last 4
+                    return '***' + strVal.slice(-4);
+                }
+                else {
+                    return "***";
+                }
+            case MaskingStrategy.HASH:
+                // Simple placeholder for hash to avoid crypto dependency if not needed,
+                // or use a simple consistent hash if strictly required. 
+                // For now, let's use a redaction-like placeholder to indicate hashing intent.
+                return "[HASHED]";
+            default:
+                return value;
+        }
+    }
+}
+exports.MaskingLayer = MaskingLayer;

package/dist/security/securityLayer.d.ts

@@ -1,10 +1,12 @@
 import { FeatureConfig } from "../config/featureConfig.js";
+import { MaskingLayer } from "./maskingLayer.js";
 export declare class SecurityLayer {
     private ajv;
     private readonly dangerousKeywords;
     private readonly allowedOperations;
     private readonly ddlOperations;
     private featureConfig;
+    masking: MaskingLayer;
     constructor(featureConfig?: FeatureConfig);
     /**
      * Check if a query is a read-only information query (SHOW, DESCRIBE, EXPLAIN, etc.)

package/dist/security/securityLayer.js

@@ -6,10 +6,14 @@ Object.defineProperty(exports, "__esModule", { value: true });
 exports.SecurityLayer = void 0;
 const ajv_1 = __importDefault(require("ajv"));
 const featureConfig_js_1 = require("../config/featureConfig.js");
+const maskingLayer_js_1 = require("./maskingLayer.js");
 class SecurityLayer {
     constructor(featureConfig) {
         this.ajv = new ajv_1.default();
         this.featureConfig = featureConfig || new featureConfig_js_1.FeatureConfig();
+        // Initialize masking layer from environment variable
+        const maskingProfile = process.env.MCP_MASKING_PROFILE || "none";
+        this.masking = new maskingLayer_js_1.MaskingLayer(maskingProfile);
         // Define dangerous SQL keywords that should ALWAYS be blocked (critical security threats)
         // These are blocked even with 'execute' permission
         // Note: Avoid blocking common table/column names like "user" or "password"

package/dist/tools/crudTools.js

@@ -187,7 +187,7 @@ class CrudTools {
                 const results = await this.db.query(query, paramValidation.sanitizedParams);
                 return {
                     status: "success",
-                    data: results,
+                    data: this.security.masking.processResults(results),
                     total,
                 };
             }
@@ -197,7 +197,7 @@ class CrudTools {
                 const results = await this.db.query(query, paramValidation.sanitizedParams);
                 return {
                     status: "success",
-                    data: results,
+                    data: this.security.masking.processResults(results),
                     total: results.length,
                 };
             }

package/dist/tools/queryTools.js

@@ -90,9 +90,10 @@ class QueryTools {
             }
             // Execute the query with sanitized parameters
             const results = await this.db.query(finalQuery, paramValidation.sanitizedParams, useCache);
+            const maskedResults = this.security.masking.processResults(results);
             return {
                 status: "success",
-                data: results,
+                data: maskedResults,
                 optimizedQuery,
             };
         }

package/manifest.json

@@ -1,7 +1,7 @@
 {
   "name": "mysql-mcp",
   "description": "A Model Context Protocol for MySQL database interaction",
-  "version": "1.12.0",
+  "version": "1.13.0",
   "tools": [
     {
       "name": "list_databases",
@@ -9,7 +9,9 @@
       "input_schema": {},
       "output_schema": {
         "type": "array",
-        "items": { "type": "string" }
+        "items": {
+          "type": "string"
+        }
       }
     },
     {
@@ -18,7 +20,9 @@
       "input_schema": {},
       "output_schema": {
         "type": "array",
-        "items": { "type": "string" }
+        "items": {
+          "type": "string"
+        }
       }
     },
     {
@@ -27,9 +31,13 @@
       "input_schema": {
         "type": "object",
         "properties": {
-          "table_name": { "type": "string" }
+          "table_name": {
+            "type": "string"
+          }
         },
-        "required": ["table_name"]
+        "required": [
+          "table_name"
+        ]
       },
       "output_schema": {
         "type": "object",
@@ -39,18 +47,38 @@
             "items": {
               "type": "object",
               "properties": {
-                "name": { "type": "string" },
-                "type": { "type": "string" },
-                "nullable": { "type": "boolean" },
-                "default": { "type": ["string", "null"] },
-                "primary_key": { "type": "boolean" }
+                "name": {
+                  "type": "string"
+                },
+                "type": {
+                  "type": "string"
+                },
+                "nullable": {
+                  "type": "boolean"
+                },
+                "default": {
+                  "type": [
+                    "string",
+                    "null"
+                  ]
+                },
+                "primary_key": {
+                  "type": "boolean"
+                }
               }
             }
           },
-          "primary_key": { "type": ["string", "null"] },
+          "primary_key": {
+            "type": [
+              "string",
+              "null"
+            ]
+          },
           "indexes": {
             "type": "array",
-            "items": { "type": "string" }
+            "items": {
+              "type": "string"
+            }
           }
         }
       }
@@ -61,17 +89,33 @@
       "input_schema": {
         "type": "object",
         "properties": {
-          "table_name": { "type": "string" },
-          "data": { "type": "object" }
+          "table_name": {
+            "type": "string"
+          },
+          "data": {
+            "type": "object"
+          }
         },
-        "required": ["table_name", "data"]
+        "required": [
+          "table_name",
+          "data"
+        ]
       },
       "output_schema": {
         "type": "object",
         "properties": {
-          "success": { "type": "boolean" },
-          "id": { "type": ["string", "number"] },
-          "affected_rows": { "type": "number" }
+          "success": {
+            "type": "boolean"
+          },
+          "id": {
+            "type": [
+              "string",
+              "number"
+            ]
+          },
+          "affected_rows": {
+            "type": "number"
+          }
         }
       }
     },
@@ -81,20 +125,42 @@
       "input_schema": {
         "type": "object",
         "properties": {
-          "table_name": { "type": "string" },
-          "filters": { "type": "object" },
-          "limit": { "type": "number" },
-          "offset": { "type": "number" },
-          "sort_by": { "type": "string" },
-          "sort_direction": { "type": "string", "enum": ["ASC", "DESC"] }
+          "table_name": {
+            "type": "string"
+          },
+          "filters": {
+            "type": "object"
+          },
+          "limit": {
+            "type": "number"
+          },
+          "offset": {
+            "type": "number"
+          },
+          "sort_by": {
+            "type": "string"
+          },
+          "sort_direction": {
+            "type": "string",
+            "enum": [
+              "ASC",
+              "DESC"
+            ]
+          }
         },
-        "required": ["table_name"]
+        "required": [
+          "table_name"
+        ]
       },
       "output_schema": {
         "type": "object",
         "properties": {
-          "records": { "type": "array" },
-          "total": { "type": "number" }
+          "records": {
+            "type": "array"
+          },
+          "total": {
+            "type": "number"
+          }
         }
       }
     },
@@ -104,18 +170,37 @@
       "input_schema": {
         "type": "object",
         "properties": {
-          "table_name": { "type": "string" },
-          "id_field": { "type": "string" },
-          "id": { "type": ["string", "number"] },
-          "data": { "type": "object" }
+          "table_name": {
+            "type": "string"
+          },
+          "id_field": {
+            "type": "string"
+          },
+          "id": {
+            "type": [
+              "string",
+              "number"
+            ]
+          },
+          "data": {
+            "type": "object"
+          }
         },
-        "required": ["table_name", "id", "data"]
+        "required": [
+          "table_name",
+          "id",
+          "data"
+        ]
       },
       "output_schema": {
         "type": "object",
         "properties": {
-          "success": { "type": "boolean" },
-          "affected_rows": { "type": "number" }
+          "success": {
+            "type": "boolean"
+          },
+          "affected_rows": {
+            "type": "number"
+          }
         }
       }
     },
@@ -125,17 +210,33 @@
       "input_schema": {
         "type": "object",
         "properties": {
-          "table_name": { "type": "string" },
-          "id_field": { "type": "string" },
-          "id": { "type": ["string", "number"] }
+          "table_name": {
+            "type": "string"
+          },
+          "id_field": {
+            "type": "string"
+          },
+          "id": {
+            "type": [
+              "string",
+              "number"
+            ]
+          }
         },
-        "required": ["table_name", "id"]
+        "required": [
+          "table_name",
+          "id"
+        ]
       },
       "output_schema": {
         "type": "object",
         "properties": {
-          "success": { "type": "boolean" },
-          "affected_rows": { "type": "number" }
+          "success": {
+            "type": "boolean"
+          },
+          "affected_rows": {
+            "type": "number"
+          }
         }
       }
     },
@@ -145,16 +246,26 @@
       "input_schema": {
         "type": "object",
         "properties": {
-          "query": { "type": "string" },
-          "params": { "type": "array" }
+          "query": {
+            "type": "string"
+          },
+          "params": {
+            "type": "array"
+          }
         },
-        "required": ["query"]
+        "required": [
+          "query"
+        ]
       },
       "output_schema": {
         "type": "object",
         "properties": {
-          "results": { "type": "array" },
-          "fields": { "type": "array" }
+          "results": {
+            "type": "array"
+          },
+          "fields": {
+            "type": "array"
+          }
         }
       }
     },
@@ -164,17 +275,32 @@
       "input_schema": {
         "type": "object",
         "properties": {
-          "query": { "type": "string" },
-          "params": { "type": "array" }
+          "query": {
+            "type": "string"
+          },
+          "params": {
+            "type": "array"
+          }
         },
-        "required": ["query"]
+        "required": [
+          "query"
+        ]
       },
       "output_schema": {
         "type": "object",
         "properties": {
-          "success": { "type": "boolean" },
-          "affected_rows": { "type": "number" },
-          "insert_id": { "type": ["number", "null"] }
+          "success": {
+            "type": "boolean"
+          },
+          "affected_rows": {
+            "type": "number"
+          },
+          "insert_id": {
+            "type": [
+              "number",
+              "null"
+            ]
+          }
         }
       }
     },
@@ -185,11 +311,21 @@
       "output_schema": {
         "type": "object",
         "properties": {
-          "host": { "type": "string" },
-          "port": { "type": "number" },
-          "database": { "type": "string" },
-          "user": { "type": "string" },
-          "connected": { "type": "boolean" }
+          "host": {
+            "type": "string"
+          },
+          "port": {
+            "type": "number"
+          },
+          "database": {
+            "type": "string"
+          },
+          "user": {
+            "type": "string"
+          },
+          "connected": {
+            "type": "boolean"
+          }
         }
       }
     },
@@ -200,9 +336,15 @@
       "output_schema": {
         "type": "object",
         "properties": {
-          "success": { "type": "boolean" },
-          "latency_ms": { "type": "number" },
-          "message": { "type": "string" }
+          "success": {
+            "type": "boolean"
+          },
+          "latency_ms": {
+            "type": "number"
+          },
+          "message": {
+            "type": "string"
+          }
         }
       }
     },
@@ -212,9 +354,13 @@
       "input_schema": {
         "type": "object",
         "properties": {
-          "table_name": { "type": "string" }
+          "table_name": {
+            "type": "string"
+          }
         },
-        "required": ["table_name"]
+        "required": [
+          "table_name"
+        ]
       },
       "output_schema": {
         "type": "object",
@@ -224,9 +370,15 @@
             "items": {
               "type": "object",
               "properties": {
-                "table": { "type": "string" },
-                "column": { "type": "string" },
-                "referenced_column": { "type": "string" }
+                "table": {
+                  "type": "string"
+                },
+                "column": {
+                  "type": "string"
+                },
+                "referenced_column": {
+                  "type": "string"
+                }
               }
             }
           },
@@ -235,9 +387,15 @@
             "items": {
               "type": "object",
               "properties": {
-                "table": { "type": "string" },
-                "column": { "type": "string" },
-                "referenced_column": { "type": "string" }
+                "table": {
+                  "type": "string"
+                },
+                "column": {
+                  "type": "string"
+                },
+                "referenced_column": {
+                  "type": "string"
+                }
               }
             }
           }
@@ -250,18 +408,36 @@
       "input_schema": {
         "type": "object",
         "properties": {
-          "database": { "type": "string", "description": "Optional specific database name" },
-          "max_tables": { "type": "number", "description": "Max tables to include (default 50, max 200)" },
-          "max_columns": { "type": "number", "description": "Max columns per table (default 12, max 200)" },
-          "include_relationships": { "type": "boolean", "description": "Whether to include FK relationships (default true)" }
+          "database": {
+            "type": "string",
+            "description": "Optional specific database name"
+          },
+          "max_tables": {
+            "type": "number",
+            "description": "Max tables to include (default 50, max 200)"
+          },
+          "max_columns": {
+            "type": "number",
+            "description": "Max columns per table (default 12, max 200)"
+          },
+          "include_relationships": {
+            "type": "boolean",
+            "description": "Whether to include FK relationships (default true)"
+          }
         }
       },
       "output_schema": {
         "type": "object",
         "properties": {
-          "database": { "type": "string" },
-          "total_tables": { "type": "number" },
-          "context_text": { "type": "string" }
+          "database": {
+            "type": "string"
+          },
+          "total_tables": {
+            "type": "number"
+          },
+          "context_text": {
+            "type": "string"
+          }
         }
       }
     },
@@ -289,23 +465,77 @@
             "items": {
               "type": "object",
               "properties": {
-                "table_name": { "type": "string" },
-                "row_count": { "type": "number" },
-                "data_size_bytes": { "type": "number" },
-                "index_size_bytes": { "type": "number" },
-                "total_size_mb": { "type": "string" }
+                "table_name": {
+                  "type": "string"
+                },
+                "row_count": {
+                  "type": "number"
+                },
+                "data_size_bytes": {
+                  "type": "number"
+                },
+                "index_size_bytes": {
+                  "type": "number"
+                },
+                "total_size_mb": {
+                  "type": "string"
+                }
               }
             }
           },
           "summary": {
             "type": "object",
             "properties": {
-              "total_tables": { "type": "number" },
-              "total_size_mb": { "type": "string" }
+              "total_tables": {
+                "type": "number"
+              },
+              "total_size_mb": {
+                "type": "string"
+              }
+            }
+          }
+        }
+      }
+    },
+    {
+      "name": "repair_query",
+      "description": "Analyzes a SQL query (and optional error) to suggest repairs or optimizations using EXPLAIN and heuristics.",
+      "input_schema": {
+        "type": "object",
+        "properties": {
+          "query": {
+            "type": "string",
+            "description": "The SQL query to analyze or repair"
+          },
+          "error_message": {
+            "type": "string",
+            "description": "Optional error message received when executing the query"
+          }
+        },
+        "required": [
+          "query"
+        ]
+      },
+      "output_schema": {
+        "type": "object",
+        "properties": {
+          "status": {
+            "type": "string"
+          },
+          "analysis": {
+            "type": "object"
+          },
+          "fixed_query": {
+            "type": "string"
+          },
+          "suggestions": {
+            "type": "array",
+            "items": {
+              "type": "string"
             }
           }
         }
       }
     }
   ]
-}
+}

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@berthojoris/mcp-mysql-server",
-  "version": "1.13.0",
+  "version": "1.14.0",
   "description": "Model Context Protocol server for MySQL database integration with dynamic per-project permissions, backup/restore, data import/export, and data migration capabilities",
   "main": "dist/index.js",
   "types": "dist/index.d.ts",