@berthojoris/mcp-mysql-server 1.43.0 → 1.43.2

package/CHANGELOG.md

@@ -5,6 +5,22 @@ All notable changes to the MySQL MCP Server will be documented in this file.
 The format is based on [Keep a Changelog](https://keepachangelog.com/en/1.0.0/),
 and this project adheres to [Semantic Versioning](https://semver.org/spec/v2.0.0.html).
 
+## [1.43.2] - 2026-07-23
+
+### Changed
+- Version bump to `1.43.2` for npm publish.
+- Synchronized version across `package.json`, `src/mcp-server.ts`, `DOCUMENTATIONS.md`, `README.md`, and `manifest.json`.
+
+## [1.43.1] - 2026-05-26
+
+### Fixed
+- **URL-encoded credentials in MySQL connection strings** (#4): authentication failed when the username or password contained URL-encoded special characters (e.g. `@` → `%40`, `:` → `%3A`).
+  - Both `url.username` and `url.password` are now passed through `decodeURIComponent()` before being handed to the MySQL client.
+  - The decoding is also applied when only one of the two is set (e.g. `mysql://:p%40ss%3Aw0rd@host/db` or `mysql://us%40er@host/db`), which previously bypassed decoding entirely.
+
+### Changed
+- Synchronized version to `1.43.1` across `package.json`, `src/mcp-server.ts`, `DOCUMENTATIONS.md`, and `README.md`.
+
 ## [1.43.0] - 2026-05-25
 
 ### Added

package/DOCUMENTATIONS.md

@@ -1,7 +1,7 @@
 # MySQL MCP Server - Documentation
 
-**Last Updated:** 2026-05-25 14:52:30
-**Version:** 1.43.0
+**Last Updated:** 2026-07-23 05:00:00
+**Version:** 1.43.2
 **Total Tools:** 88
 
 Comprehensive documentation for the MySQL MCP Server. For quick start, see [README.md](README.md).
@@ -47,6 +47,8 @@ Configure MySQL MCP with two access-control layers:
 **Layer 1 (Permissions)**: Broad operation control  
 **Layer 2 (Categories)**: Fine-grained tool filtering  
 
+> **Credentials with special characters**: if the username or password in the connection string contains URL-reserved characters (`@`, `:`, `/`, `?`, `#`, `%`, `&`, etc.), URL-encode them — e.g. the password `p@ss:w0rd` becomes `p%40ss%3Aw0rd`, giving `mysql://user:p%40ss%3Aw0rd@host:3306/db`. The server passes both the username and password through `decodeURIComponent()` before connecting, including when only one of the two is set.
+
 ### Environment Variables
 
 ```json

package/README.md

@@ -4,7 +4,7 @@
 
 **A production-ready Model Context Protocol (MCP) server for MySQL database integration with AI agents**
 
-**Last Updated:** 2026-05-25 14:52:30
+**Last Updated:** 2026-07-23 05:00:00
 
 [![npm version](https://img.shields.io/npm/v/@berthojoris/mcp-mysql-server)](https://www.npmjs.com/package/@berthojoris/mcp-mysql-server)
 [![npm downloads](https://img.shields.io/npm/dm/@berthojoris/mcp-mysql-server)](https://www.npmjs.com/package/@berthojoris/mcp-mysql-server)
@@ -66,6 +66,8 @@ npm install -g @berthojoris/mcp-mysql-server
 mcp-mysql mysql://user:pass@localhost:3306/db "list,read,utility"
 ```
 
+> **Credentials with special characters**: if your username or password contains characters that have a special meaning in URLs (`@`, `:`, `/`, `?`, `#`, `%`, `&`, etc.), URL-encode them before putting them in the connection string. For example, the password `p@ss:w0rd` becomes `p%40ss%3Aw0rd`, giving `mysql://user:p%40ss%3Aw0rd@host:3306/db`. The server decodes both the username and password before connecting.
+
 ---
 
 ## Quick Start

package/bin/mcp-mysql.js

@@ -95,11 +95,15 @@ try {
   // Remove leading slash from pathname and make database optional
   database = url.pathname.replace(/^\//, "") || null;
 
-  // Extract username and password from auth
-  const auth =
-    url.username && url.password
-      ? { user: url.username, password: url.password }
-      : { user: url.username || "root", password: url.password || "" };
+  // Extract username and password from auth.
+  // Both fields may be URL-encoded (e.g. "@" -> "%40"), so always decode
+  // whatever the URL parser hands us, including when only one side is set.
+  const decodeAuthField = (value) =>
+    value ? decodeURIComponent(value) : value;
+  const auth = {
+    user: decodeAuthField(url.username) || "root",
+    password: decodeAuthField(url.password) || "",
+  };
 
   connectionConfig = {
     host: url.hostname,

package/dist/mcp-server.js

@@ -18,7 +18,7 @@ const toolArgumentValidation_js_1 = require("./tools/toolArgumentValidation.js")
 const permissions = process.env.MCP_PERMISSIONS || process.env.MCP_CONFIG || "";
 const categories = process.env.MCP_CATEGORIES || "";
 const SERVER_NAME = "mysql-mcp-server";
-const SERVER_VERSION = "1.43.0";
+const SERVER_VERSION = "1.43.2";
 // Declare the MySQL MCP instance (will be initialized in main())
 let mysqlMCP;
 // Define all available tools with their schemas

package/dist/tools/databaseTools.js

@@ -113,6 +113,7 @@ class DatabaseTools {
         SELECT
           COLUMN_NAME as column_name,
           DATA_TYPE as data_type,
+          CHARACTER_MAXIMUM_LENGTH as character_maximum_length,
           IS_NULLABLE as is_nullable,
           COLUMN_KEY as column_key,
           COLUMN_DEFAULT as column_default,

package/manifest.json

@@ -1,7 +1,7 @@
 {
   "name": "mysql-mcp",
   "description": "A Model Context Protocol for MySQL database interaction",
-  "version": "1.43.0",
+  "version": "1.43.2",
   "tools": [
     {
       "name": "list_databases",

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@berthojoris/mcp-mysql-server",
-  "version": "1.43.0",
+  "version": "1.43.2",
   "description": "Model Context Protocol server for MySQL database integration with dynamic per-project permissions",
   "main": "dist/index.js",
   "types": "dist/index.d.ts",