@neverinfamous/mysql-mcp 2.1.0

package/dist/auth/types.d.ts

@@ -0,0 +1,208 @@
+/**
+ * mysql-mcp - OAuth Types
+ *
+ * Type definitions for OAuth 2.0 components including
+ * RFC 9728, RFC 8414, and RFC 7591 compliance.
+ */
+/**
+ * OAuth 2.0 Protected Resource Metadata (RFC 9728)
+ */
+export interface ProtectedResourceMetadata {
+    /** Resource identifier (canonical URI) */
+    resource: string;
+    /** Authorization servers that can issue tokens for this resource */
+    authorization_servers?: string[];
+    /** JWKS URI for token verification */
+    jwks_uri?: string;
+    /** Scopes supported by this resource */
+    scopes_supported?: string[];
+    /** Bearer token presentation methods supported */
+    bearer_methods_supported?: ('header' | 'body' | 'query')[];
+    /** Resource signing algorithms supported */
+    resource_signing_alg_values_supported?: string[];
+    /** Resource documentation URL */
+    resource_documentation?: string;
+    /** Resource policy URI */
+    resource_policy_uri?: string;
+    /** Resource terms of service URI */
+    resource_tos_uri?: string;
+}
+/**
+ * OAuth 2.0 Authorization Server Metadata (RFC 8414)
+ */
+export interface AuthorizationServerMetadata {
+    /** Authorization server issuer identifier */
+    issuer: string;
+    /** Authorization endpoint URL */
+    authorization_endpoint?: string;
+    /** Token endpoint URL */
+    token_endpoint: string;
+    /** JWKS URI */
+    jwks_uri?: string;
+    /** Registration endpoint (RFC 7591) */
+    registration_endpoint?: string;
+    /** Scopes supported */
+    scopes_supported?: string[];
+    /** Response types supported */
+    response_types_supported?: string[];
+    /** Grant types supported */
+    grant_types_supported?: string[];
+    /** Token endpoint auth methods supported */
+    token_endpoint_auth_methods_supported?: string[];
+    /** Code challenge methods supported (PKCE) */
+    code_challenge_methods_supported?: string[];
+}
+/**
+ * OAuth 2.0 Dynamic Client Registration Request (RFC 7591)
+ */
+export interface ClientRegistrationRequest {
+    /** Redirect URIs */
+    redirect_uris?: string[];
+    /** Token endpoint auth method */
+    token_endpoint_auth_method?: string;
+    /** Grant types requested */
+    grant_types?: string[];
+    /** Response types requested */
+    response_types?: string[];
+    /** Client name */
+    client_name?: string;
+    /** Client URI */
+    client_uri?: string;
+    /** Scopes requested */
+    scope?: string;
+    /** JWKS URI for client authentication */
+    jwks_uri?: string;
+    /** JWKS document for client authentication */
+    jwks?: JWKSDocument;
+}
+/**
+ * OAuth 2.0 Dynamic Client Registration Response (RFC 7591)
+ */
+export interface ClientRegistrationResponse {
+    /** Client identifier */
+    client_id: string;
+    /** Client secret (for confidential clients) */
+    client_secret?: string;
+    /** Client secret expiration timestamp */
+    client_secret_expires_at?: number;
+    /** Registration access token */
+    registration_access_token?: string;
+    /** Registration client URI */
+    registration_client_uri?: string;
+    /** Client ID issued at timestamp */
+    client_id_issued_at?: number;
+    /** All other fields from the request */
+    [key: string]: unknown;
+}
+/**
+ * JSON Web Key (JWK)
+ */
+export interface JWK {
+    /** Key type (e.g., 'RSA', 'EC') */
+    kty: string;
+    /** Key use ('sig' for signature, 'enc' for encryption) */
+    use?: string;
+    /** Key operations */
+    key_ops?: string[];
+    /** Algorithm */
+    alg?: string;
+    /** Key ID */
+    kid?: string;
+    /** RSA modulus */
+    n?: string;
+    /** RSA public exponent */
+    e?: string;
+    /** EC curve */
+    crv?: string;
+    /** EC x coordinate */
+    x?: string;
+    /** EC y coordinate */
+    y?: string;
+}
+/**
+ * JSON Web Key Set (JWKS)
+ */
+export interface JWKSDocument {
+    /** Array of JWK keys */
+    keys: JWK[];
+}
+/**
+ * Result of token validation
+ */
+export interface TokenValidationResult {
+    /** Whether the token is valid */
+    valid: boolean;
+    /** Validated claims (if valid) */
+    claims?: TokenClaims;
+    /** Error message (if invalid) */
+    error?: string;
+    /** Error code (if invalid) */
+    errorCode?: string;
+}
+/**
+ * Validated token claims
+ */
+export interface TokenClaims {
+    /** Subject (user ID) */
+    sub: string;
+    /** Granted scopes (parsed from space-delimited string) */
+    scopes: string[];
+    /** Token expiration time (Unix timestamp) */
+    exp: number;
+    /** Token issued at time (Unix timestamp) */
+    iat: number;
+    /** Token issuer */
+    iss?: string | undefined;
+    /** Token audience */
+    aud?: string | string[] | undefined;
+    /** Not before time (Unix timestamp) */
+    nbf?: number | undefined;
+    /** JWT ID */
+    jti?: string | undefined;
+    /** Client ID */
+    client_id?: string | undefined;
+    /** Additional claims */
+    [key: string]: unknown;
+}
+/**
+ * Resource server configuration
+ */
+export interface ResourceServerConfig {
+    /** Resource identifier (canonical server URI) */
+    resource: string;
+    /** Authorization servers that can issue tokens */
+    authorizationServers: string[];
+    /** Scopes supported by this resource */
+    scopesSupported: string[];
+    /** Bearer token methods accepted (default: ['header']) */
+    bearerMethodsSupported?: ('header' | 'body' | 'query')[];
+}
+/**
+ * Token validator configuration
+ */
+export interface TokenValidatorConfig {
+    /** JWKS URI for key discovery */
+    jwksUri: string;
+    /** Expected issuer */
+    issuer: string;
+    /** Expected audience */
+    audience: string;
+    /** Clock tolerance in seconds (default: 60) */
+    clockTolerance?: number | undefined;
+    /** JWKS cache TTL in seconds (default: 3600) */
+    jwksCacheTtl?: number | undefined;
+    /** Supported algorithms (default: ['RS256', 'RS384', 'RS512', 'ES256', 'ES384', 'ES512']) */
+    algorithms?: string[] | undefined;
+}
+/**
+ * Authorization server discovery configuration
+ */
+export interface AuthServerDiscoveryConfig {
+    /** Authorization server URL (issuer) */
+    authServerUrl: string;
+    /** Cache TTL in seconds (default: 3600) */
+    cacheTtl?: number | undefined;
+    /** Request timeout in milliseconds (default: 5000) */
+    timeout?: number | undefined;
+}
+//# sourceMappingURL=types.d.ts.map

package/dist/auth/types.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"types.d.ts","sourceRoot":"","sources":["../../src/auth/types.ts"],"names":[],"mappings":"AAAA;;;;;GAKG;AAMH;;GAEG;AACH,MAAM,WAAW,yBAAyB;IACtC,0CAA0C;IAC1C,QAAQ,EAAE,MAAM,CAAC;IAEjB,oEAAoE;IACpE,qBAAqB,CAAC,EAAE,MAAM,EAAE,CAAC;IAEjC,sCAAsC;IACtC,QAAQ,CAAC,EAAE,MAAM,CAAC;IAElB,wCAAwC;IACxC,gBAAgB,CAAC,EAAE,MAAM,EAAE,CAAC;IAE5B,kDAAkD;IAClD,wBAAwB,CAAC,EAAE,CAAC,QAAQ,GAAG,MAAM,GAAG,OAAO,CAAC,EAAE,CAAC;IAE3D,4CAA4C;IAC5C,qCAAqC,CAAC,EAAE,MAAM,EAAE,CAAC;IAEjD,iCAAiC;IACjC,sBAAsB,CAAC,EAAE,MAAM,CAAC;IAEhC,0BAA0B;IAC1B,mBAAmB,CAAC,EAAE,MAAM,CAAC;IAE7B,oCAAoC;IACpC,gBAAgB,CAAC,EAAE,MAAM,CAAC;CAC7B;AAMD;;GAEG;AACH,MAAM,WAAW,2BAA2B;IACxC,6CAA6C;IAC7C,MAAM,EAAE,MAAM,CAAC;IAEf,iCAAiC;IACjC,sBAAsB,CAAC,EAAE,MAAM,CAAC;IAEhC,yBAAyB;IACzB,cAAc,EAAE,MAAM,CAAC;IAEvB,eAAe;IACf,QAAQ,CAAC,EAAE,MAAM,CAAC;IAElB,uCAAuC;IACvC,qBAAqB,CAAC,EAAE,MAAM,CAAC;IAE/B,uBAAuB;IACvB,gBAAgB,CAAC,EAAE,MAAM,EAAE,CAAC;IAE5B,+BAA+B;IAC/B,wBAAwB,CAAC,EAAE,MAAM,EAAE,CAAC;IAEpC,4BAA4B;IAC5B,qBAAqB,CAAC,EAAE,MAAM,EAAE,CAAC;IAEjC,4CAA4C;IAC5C,qCAAqC,CAAC,EAAE,MAAM,EAAE,CAAC;IAEjD,8CAA8C;IAC9C,gCAAgC,CAAC,EAAE,MAAM,EAAE,CAAC;CAC/C;AAMD;;GAEG;AACH,MAAM,WAAW,yBAAyB;IACtC,oBAAoB;IACpB,aAAa,CAAC,EAAE,MAAM,EAAE,CAAC;IAEzB,iCAAiC;IACjC,0BAA0B,CAAC,EAAE,MAAM,CAAC;IAEpC,4BAA4B;IAC5B,WAAW,CAAC,EAAE,MAAM,EAAE,CAAC;IAEvB,+BAA+B;IAC/B,cAAc,CAAC,EAAE,MAAM,EAAE,CAAC;IAE1B,kBAAkB;IAClB,WAAW,CAAC,EAAE,MAAM,CAAC;IAErB,iBAAiB;IACjB,UAAU,CAAC,EAAE,MAAM,CAAC;IAEpB,uBAAuB;IACvB,KAAK,CAAC,EAAE,MAAM,CAAC;IAEf,yCAAyC;IACzC,QAAQ,CAAC,EAAE,MAAM,CAAC;IAElB,8CAA8C;IAC9C,IAAI,CAAC,EAAE,YAAY,CAAC;CACvB;AAED;;GAEG;AACH,MAAM,WAAW,0BAA0B;IACvC,wBAAwB;IACxB,SAAS,EAAE,MAAM,CAAC;IAElB,+CAA+C;IAC/C,aAAa,CAAC,EAAE,MAAM,CAAC;IAEvB,yCAAyC;IACzC,wBAAwB,CAAC,EAAE,MAAM,CAAC;IAElC,gCAAgC;IAChC,yBAAyB,CAAC,EAAE,MAAM,CAAC;IAEnC,8BAA8B;IAC9B,uBAAuB,CAAC,EAAE,MAAM,CAAC;IAEjC,oCAAoC;IACpC,mBAAmB,CAAC,EAAE,MAAM,CAAC;IAE7B,wCAAwC;IACxC,CAAC,GAAG,EAAE,MAAM,GAAG,OAAO,CAAC;CAC1B;AAMD;;GAEG;AACH,MAAM,WAAW,GAAG;IAChB,mCAAmC;IACnC,GAAG,EAAE,MAAM,CAAC;IAEZ,0DAA0D;IAC1D,GAAG,CAAC,EAAE,MAAM,CAAC;IAEb,qBAAqB;IACrB,OAAO,CAAC,EAAE,MAAM,EAAE,CAAC;IAEnB,gBAAgB;IAChB,GAAG,CAAC,EAAE,MAAM,CAAC;IAEb,aAAa;IACb,GAAG,CAAC,EAAE,MAAM,CAAC;IAGb,kBAAkB;IAClB,CAAC,CAAC,EAAE,MAAM,CAAC;IACX,0BAA0B;IAC1B,CAAC,CAAC,EAAE,MAAM,CAAC;IAGX,eAAe;IACf,GAAG,CAAC,EAAE,MAAM,CAAC;IACb,sBAAsB;IACtB,CAAC,CAAC,EAAE,MAAM,CAAC;IACX,sBAAsB;IACtB,CAAC,CAAC,EAAE,MAAM,CAAC;CACd;AAED;;GAEG;AACH,MAAM,WAAW,YAAY;IACzB,wBAAwB;IACxB,IAAI,EAAE,GAAG,EAAE,CAAC;CACf;AAMD;;GAEG;AACH,MAAM,WAAW,qBAAqB;IAClC,iCAAiC;IACjC,KAAK,EAAE,OAAO,CAAC;IAEf,kCAAkC;IAClC,MAAM,CAAC,EAAE,WAAW,CAAC;IAErB,iCAAiC;IACjC,KAAK,CAAC,EAAE,MAAM,CAAC;IAEf,8BAA8B;IAC9B,SAAS,CAAC,EAAE,MAAM,CAAC;CACtB;AAED;;GAEG;AACH,MAAM,WAAW,WAAW;IACxB,wBAAwB;IACxB,GAAG,EAAE,MAAM,CAAC;IAEZ,0DAA0D;IAC1D,MAAM,EAAE,MAAM,EAAE,CAAC;IAEjB,6CAA6C;IAC7C,GAAG,EAAE,MAAM,CAAC;IAEZ,4CAA4C;IAC5C,GAAG,EAAE,MAAM,CAAC;IAEZ,mBAAmB;IACnB,GAAG,CAAC,EAAE,MAAM,GAAG,SAAS,CAAC;IAEzB,qBAAqB;IACrB,GAAG,CAAC,EAAE,MAAM,GAAG,MAAM,EAAE,GAAG,SAAS,CAAC;IAEpC,uCAAuC;IACvC,GAAG,CAAC,EAAE,MAAM,GAAG,SAAS,CAAC;IAEzB,aAAa;IACb,GAAG,CAAC,EAAE,MAAM,GAAG,SAAS,CAAC;IAEzB,gBAAgB;IAChB,SAAS,CAAC,EAAE,MAAM,GAAG,SAAS,CAAC;IAE/B,wBAAwB;IACxB,CAAC,GAAG,EAAE,MAAM,GAAG,OAAO,CAAC;CAC1B;AAMD;;GAEG;AACH,MAAM,WAAW,oBAAoB;IACjC,iDAAiD;IACjD,QAAQ,EAAE,MAAM,CAAC;IAEjB,kDAAkD;IAClD,oBAAoB,EAAE,MAAM,EAAE,CAAC;IAE/B,wCAAwC;IACxC,eAAe,EAAE,MAAM,EAAE,CAAC;IAE1B,0DAA0D;IAC1D,sBAAsB,CAAC,EAAE,CAAC,QAAQ,GAAG,MAAM,GAAG,OAAO,CAAC,EAAE,CAAC;CAC5D;AAED;;GAEG;AACH,MAAM,WAAW,oBAAoB;IACjC,iCAAiC;IACjC,OAAO,EAAE,MAAM,CAAC;IAEhB,sBAAsB;IACtB,MAAM,EAAE,MAAM,CAAC;IAEf,wBAAwB;IACxB,QAAQ,EAAE,MAAM,CAAC;IAEjB,+CAA+C;IAC/C,cAAc,CAAC,EAAE,MAAM,GAAG,SAAS,CAAC;IAEpC,gDAAgD;IAChD,YAAY,CAAC,EAAE,MAAM,GAAG,SAAS,CAAC;IAElC,6FAA6F;IAC7F,UAAU,CAAC,EAAE,MAAM,EAAE,GAAG,SAAS,CAAC;CACrC;AAED;;GAEG;AACH,MAAM,WAAW,yBAAyB;IACtC,wCAAwC;IACxC,aAAa,EAAE,MAAM,CAAC;IAEtB,2CAA2C;IAC3C,QAAQ,CAAC,EAAE,MAAM,GAAG,SAAS,CAAC;IAE9B,sDAAsD;IACtD,OAAO,CAAC,EAAE,MAAM,GAAG,SAAS,CAAC;CAChC"}

package/dist/auth/types.js

@@ -0,0 +1,8 @@
+/**
+ * mysql-mcp - OAuth Types
+ *
+ * Type definitions for OAuth 2.0 components including
+ * RFC 9728, RFC 8414, and RFC 7591 compliance.
+ */
+export {};
+//# sourceMappingURL=types.js.map

package/dist/auth/types.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"types.js","sourceRoot":"","sources":["../../src/auth/types.ts"],"names":[],"mappings":"AAAA;;;;;GAKG"}

package/dist/cli/args.d.ts

@@ -0,0 +1,15 @@
+import type { McpServerConfig, DatabaseConfig, OAuthConfig } from '../types/index.js';
+/**
+ * Parse command line arguments
+ */
+export declare function parseArgs(argv?: string[]): {
+    config: Partial<McpServerConfig>;
+    databases: DatabaseConfig[];
+    oauth: OAuthConfig | undefined;
+    shouldExit: boolean;
+};
+/**
+ * Print help message
+ */
+export declare function printHelp(): void;
+//# sourceMappingURL=args.d.ts.map

package/dist/cli/args.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"args.d.ts","sourceRoot":"","sources":["../../src/cli/args.ts"],"names":[],"mappings":"AACA,OAAO,KAAK,EAAE,eAAe,EAAiB,cAAc,EAAc,WAAW,EAAE,MAAM,mBAAmB,CAAC;AAEjH;;GAEG;AACH,wBAAgB,SAAS,CAAC,IAAI,GAAE,MAAM,EAA0B,GAAG;IAC/D,MAAM,EAAE,OAAO,CAAC,eAAe,CAAC,CAAC;IACjC,SAAS,EAAE,cAAc,EAAE,CAAC;IAC5B,KAAK,EAAE,WAAW,GAAG,SAAS,CAAC;IAC/B,UAAU,EAAE,OAAO,CAAC;CACvB,CAkRA;AAED;;GAEG;AACH,wBAAgB,SAAS,IAAI,IAAI,CAoDhC"}

package/dist/cli/args.js

@@ -0,0 +1,303 @@
+import { parseMySQLConnectionString, DEFAULT_CONFIG } from '../server/McpServer.js';
+/**
+ * Parse command line arguments
+ */
+export function parseArgs(argv = process.argv.slice(2)) {
+    const args = argv;
+    const config = {};
+    const databases = [];
+    // Default pool config
+    const poolConfig = {
+        connectionLimit: 10,
+        waitForConnections: true,
+        queueLimit: 0
+    };
+    // OAuth config
+    let oauthEnabled = false;
+    let oauthIssuer;
+    let oauthAudience;
+    let oauthJwksUri;
+    let oauthClockTolerance;
+    // MySQL connection params
+    let mysqlHost;
+    let mysqlPort = 3306;
+    let mysqlUser;
+    let mysqlPassword;
+    let mysqlDatabase;
+    for (let i = 0; i < args.length; i++) {
+        const arg = args[i];
+        const nextArg = args[i + 1];
+        switch (arg) {
+            case '--transport':
+            case '-t':
+                if (nextArg && !nextArg.startsWith('-')) {
+                    config.transport = nextArg;
+                    i++;
+                }
+                break;
+            case '--port':
+            case '-p':
+                if (nextArg && !nextArg.startsWith('-')) {
+                    config.port = parseInt(nextArg, 10);
+                    i++;
+                }
+                break;
+            case '--mysql':
+            case '-m':
+                if (nextArg && !nextArg.startsWith('-')) {
+                    // Parse connection string
+                    const dbConfig = parseMySQLConnectionString(nextArg);
+                    dbConfig.pool = poolConfig;
+                    databases.push(dbConfig);
+                    i++;
+                }
+                break;
+            case '--mysql-host':
+                if (nextArg && !nextArg.startsWith('-')) {
+                    mysqlHost = nextArg;
+                    i++;
+                }
+                break;
+            case '--mysql-port':
+                if (nextArg && !nextArg.startsWith('-')) {
+                    mysqlPort = parseInt(nextArg, 10);
+                    i++;
+                }
+                break;
+            case '--mysql-user':
+                if (nextArg && !nextArg.startsWith('-')) {
+                    mysqlUser = nextArg;
+                    i++;
+                }
+                break;
+            case '--mysql-password':
+                if (nextArg && !nextArg.startsWith('-')) {
+                    mysqlPassword = nextArg;
+                    i++;
+                }
+                break;
+            case '--mysql-database':
+                if (nextArg && !nextArg.startsWith('-')) {
+                    mysqlDatabase = nextArg;
+                    i++;
+                }
+                break;
+            case '--pool-size':
+                if (nextArg && !nextArg.startsWith('-')) {
+                    poolConfig.connectionLimit = parseInt(nextArg, 10);
+                    i++;
+                }
+                break;
+            case '--pool-timeout':
+                if (nextArg && !nextArg.startsWith('-')) {
+                    poolConfig.acquireTimeout = parseInt(nextArg, 10);
+                    i++;
+                }
+                break;
+            case '--pool-queue-limit':
+                if (nextArg && !nextArg.startsWith('-')) {
+                    poolConfig.queueLimit = parseInt(nextArg, 10);
+                    i++;
+                }
+                break;
+            case '--tool-filter':
+            case '-f':
+                // Note: tool filter values can start with '-' (e.g., "-base,-ecosystem,+starter")
+                // so we can't use the usual !nextArg.startsWith('-') check
+                if (nextArg !== undefined) {
+                    config.toolFilter = nextArg;
+                    i++;
+                }
+                break;
+            case '--name':
+                if (nextArg && !nextArg.startsWith('-')) {
+                    config.name = nextArg;
+                    i++;
+                }
+                break;
+            // OAuth options
+            case '--oauth-enabled':
+            case '-o':
+                oauthEnabled = true;
+                break;
+            case '--oauth-issuer':
+                if (nextArg && !nextArg.startsWith('-')) {
+                    oauthIssuer = nextArg;
+                    i++;
+                }
+                break;
+            case '--oauth-audience':
+                if (nextArg && !nextArg.startsWith('-')) {
+                    oauthAudience = nextArg;
+                    i++;
+                }
+                break;
+            case '--oauth-jwks-uri':
+                if (nextArg && !nextArg.startsWith('-')) {
+                    oauthJwksUri = nextArg;
+                    i++;
+                }
+                break;
+            case '--oauth-clock-tolerance':
+                if (nextArg && !nextArg.startsWith('-')) {
+                    oauthClockTolerance = parseInt(nextArg, 10);
+                    i++;
+                }
+                break;
+            case '--version':
+            case '-v':
+                console.error(`mysql-mcp version ${DEFAULT_CONFIG.version}`);
+                return { config, databases, oauth: undefined, shouldExit: true };
+            case '--help':
+            case '-h':
+                printHelp();
+                return { config, databases, oauth: undefined, shouldExit: true };
+            default:
+                if (arg?.startsWith('-')) {
+                    console.error(`Unknown option: ${arg}`);
+                    printHelp();
+                    process.exit(1);
+                }
+        }
+    }
+    // Build database config from individual params if provided
+    if (mysqlHost || mysqlUser || mysqlDatabase) {
+        // Check required fields
+        if (!mysqlHost) {
+            mysqlHost = process.env['MYSQL_HOST'] ?? 'localhost';
+        }
+        if (!mysqlUser) {
+            mysqlUser = process.env['MYSQL_USER'];
+        }
+        if (!mysqlPassword) {
+            mysqlPassword = process.env['MYSQL_PASSWORD'];
+        }
+        if (!mysqlDatabase) {
+            mysqlDatabase = process.env['MYSQL_DATABASE'];
+        }
+        if (mysqlUser && mysqlDatabase) {
+            databases.push({
+                type: 'mysql',
+                host: mysqlHost,
+                port: mysqlPort,
+                username: mysqlUser,
+                password: mysqlPassword,
+                database: mysqlDatabase,
+                pool: poolConfig
+            });
+        }
+    }
+    // Check environment variables as fallback
+    if (databases.length === 0) {
+        const envHost = process.env['MYSQL_HOST'];
+        const envUser = process.env['MYSQL_USER'];
+        const envPassword = process.env['MYSQL_PASSWORD'];
+        const envDatabase = process.env['MYSQL_DATABASE'];
+        const envPort = process.env['MYSQL_PORT'];
+        const envPoolSize = process.env['MYSQL_POOL_SIZE'];
+        if (envHost && envUser && envDatabase) {
+            if (envPoolSize) {
+                poolConfig.connectionLimit = parseInt(envPoolSize, 10);
+            }
+            databases.push({
+                type: 'mysql',
+                host: envHost,
+                port: envPort ? parseInt(envPort, 10) : 3306,
+                username: envUser,
+                password: envPassword,
+                database: envDatabase,
+                pool: poolConfig
+            });
+        }
+    }
+    // Check for tool filter in environment
+    if (!config.toolFilter) {
+        config.toolFilter = process.env['MYSQL_MCP_TOOL_FILTER'] ?? process.env['TOOL_FILTER'];
+    }
+    // Check OAuth environment variables
+    if (!oauthEnabled && process.env['OAUTH_ENABLED'] === 'true') {
+        oauthEnabled = true;
+    }
+    if (!oauthIssuer) {
+        oauthIssuer = process.env['OAUTH_ISSUER'];
+    }
+    if (!oauthAudience) {
+        oauthAudience = process.env['OAUTH_AUDIENCE'];
+    }
+    if (!oauthJwksUri) {
+        oauthJwksUri = process.env['OAUTH_JWKS_URI'];
+    }
+    if (oauthClockTolerance === undefined && process.env['OAUTH_CLOCK_TOLERANCE']) {
+        oauthClockTolerance = parseInt(process.env['OAUTH_CLOCK_TOLERANCE'], 10);
+    }
+    // Build OAuth config if enabled
+    let oauth;
+    if (oauthEnabled) {
+        oauth = {
+            enabled: true,
+            authorizationServerUrl: oauthIssuer,
+            issuer: oauthIssuer,
+            audience: oauthAudience,
+            jwksUri: oauthJwksUri,
+            clockTolerance: oauthClockTolerance
+        };
+    }
+    return { config, databases, oauth, shouldExit: false };
+}
+/**
+ * Print help message
+ */
+export function printHelp() {
+    console.error(`
+mysql-mcp - Enterprise MySQL MCP Server
+
+Usage: mysql-mcp [options]
+
+Connection Options:
+  --mysql, -m <url>           MySQL connection string
+                              (mysql://user:pass@host:port/database)
+  --mysql-host <host>         MySQL host (default: localhost)
+  --mysql-port <port>         MySQL port (default: 3306)
+  --mysql-user <user>         MySQL username
+  --mysql-password <pass>     MySQL password
+  --mysql-database <db>       MySQL database name
+
+Pool Options:
+  --pool-size <n>             Connection pool size (default: 10)
+  --pool-timeout <ms>         Connection acquire timeout (default: 10000)
+  --pool-queue-limit <n>      Queue limit for waiting requests (default: 0)
+
+Server Options:
+  --transport, -t <type>      Transport type: stdio, http, sse (default: stdio)
+  --port, -p <port>           HTTP port for http/sse transports
+  --tool-filter, -f <filter>  Tool filter string (e.g., "-replication,-partitioning")
+  --name <name>               Server name (default: mysql-mcp)
+
+OAuth Options:
+  --oauth-enabled, -o         Enable OAuth 2.0 authentication
+  --oauth-issuer <url>        Authorization server URL (issuer)
+  --oauth-audience <aud>      Expected token audience
+  --oauth-jwks-uri <url>      JWKS URI (auto-discovered from issuer if not set)
+  --oauth-clock-tolerance <s> Clock tolerance in seconds (default: 60)
+
+Other:
+  --version, -v               Show version
+  --help, -h                  Show this help
+
+Environment Variables:
+  MYSQL_HOST                  MySQL host
+  MYSQL_PORT                  MySQL port
+  MYSQL_USER                  MySQL username
+  MYSQL_PASSWORD              MySQL password
+  MYSQL_DATABASE              MySQL database
+  MYSQL_POOL_SIZE             Connection pool size
+  MYSQL_MCP_TOOL_FILTER       Tool filter string
+  LOG_LEVEL                   Log level (debug, info, warn, error)
+  OAUTH_ENABLED               Enable OAuth (true/false)
+  OAUTH_ISSUER                Authorization server URL
+  OAUTH_AUDIENCE              Expected token audience
+  OAUTH_JWKS_URI              JWKS endpoint URL
+  OAUTH_CLOCK_TOLERANCE       Clock tolerance in seconds
+`);
+}
+//# sourceMappingURL=args.js.map

package/dist/cli/args.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"args.js","sourceRoot":"","sources":["../../src/cli/args.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,0BAA0B,EAAE,cAAc,EAAE,MAAM,wBAAwB,CAAC;AAGpF;;GAEG;AACH,MAAM,UAAU,SAAS,CAAC,OAAiB,OAAO,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC;IAM5D,MAAM,IAAI,GAAG,IAAI,CAAC;IAClB,MAAM,MAAM,GAA6B,EAAE,CAAC;IAC5C,MAAM,SAAS,GAAqB,EAAE,CAAC;IAEvC,sBAAsB;IACtB,MAAM,UAAU,GAAe;QAC3B,eAAe,EAAE,EAAE;QACnB,kBAAkB,EAAE,IAAI;QACxB,UAAU,EAAE,CAAC;KAChB,CAAC;IAEF,eAAe;IACf,IAAI,YAAY,GAAG,KAAK,CAAC;IACzB,IAAI,WAA+B,CAAC;IACpC,IAAI,aAAiC,CAAC;IACtC,IAAI,YAAgC,CAAC;IACrC,IAAI,mBAAuC,CAAC;IAE5C,0BAA0B;IAC1B,IAAI,SAA6B,CAAC;IAClC,IAAI,SAAS,GAAG,IAAI,CAAC;IACrB,IAAI,SAA6B,CAAC;IAClC,IAAI,aAAiC,CAAC;IACtC,IAAI,aAAiC,CAAC;IAEtC,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,IAAI,CAAC,MAAM,EAAE,CAAC,EAAE,EAAE,CAAC;QACnC,MAAM,GAAG,GAAG,IAAI,CAAC,CAAC,CAAC,CAAC;QACpB,MAAM,OAAO,GAAG,IAAI,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC;QAE5B,QAAQ,GAAG,EAAE,CAAC;YACV,KAAK,aAAa,CAAC;YACnB,KAAK,IAAI;gBACL,IAAI,OAAO,IAAI,CAAC,OAAO,CAAC,UAAU,CAAC,GAAG,CAAC,EAAE,CAAC;oBACtC,MAAM,CAAC,SAAS,GAAG,OAAwB,CAAC;oBAC5C,CAAC,EAAE,CAAC;gBACR,CAAC;gBACD,MAAM;YAEV,KAAK,QAAQ,CAAC;YACd,KAAK,IAAI;gBACL,IAAI,OAAO,IAAI,CAAC,OAAO,CAAC,UAAU,CAAC,GAAG,CAAC,EAAE,CAAC;oBACtC,MAAM,CAAC,IAAI,GAAG,QAAQ,CAAC,OAAO,EAAE,EAAE,CAAC,CAAC;oBACpC,CAAC,EAAE,CAAC;gBACR,CAAC;gBACD,MAAM;YAEV,KAAK,SAAS,CAAC;YACf,KAAK,IAAI;gBACL,IAAI,OAAO,IAAI,CAAC,OAAO,CAAC,UAAU,CAAC,GAAG,CAAC,EAAE,CAAC;oBACtC,0BAA0B;oBAC1B,MAAM,QAAQ,GAAG,0BAA0B,CAAC,OAAO,CAAC,CAAC;oBACrD,QAAQ,CAAC,IAAI,GAAG,UAAU,CAAC;oBAC3B,SAAS,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC;oBACzB,CAAC,EAAE,CAAC;gBACR,CAAC;gBACD,MAAM;YAEV,KAAK,cAAc;gBACf,IAAI,OAAO,IAAI,CAAC,OAAO,CAAC,UAAU,CAAC,GAAG,CAAC,EAAE,CAAC;oBACtC,SAAS,GAAG,OAAO,CAAC;oBACpB,CAAC,EAAE,CAAC;gBACR,CAAC;gBACD,MAAM;YAEV,KAAK,cAAc;gBACf,IAAI,OAAO,IAAI,CAAC,OAAO,CAAC,UAAU,CAAC,GAAG,CAAC,EAAE,CAAC;oBACtC,SAAS,GAAG,QAAQ,CAAC,OAAO,EAAE,EAAE,CAAC,CAAC;oBAClC,CAAC,EAAE,CAAC;gBACR,CAAC;gBACD,MAAM;YAEV,KAAK,cAAc;gBACf,IAAI,OAAO,IAAI,CAAC,OAAO,CAAC,UAAU,CAAC,GAAG,CAAC,EAAE,CAAC;oBACtC,SAAS,GAAG,OAAO,CAAC;oBACpB,CAAC,EAAE,CAAC;gBACR,CAAC;gBACD,MAAM;YAEV,KAAK,kBAAkB;gBACnB,IAAI,OAAO,IAAI,CAAC,OAAO,CAAC,UAAU,CAAC,GAAG,CAAC,EAAE,CAAC;oBACtC,aAAa,GAAG,OAAO,CAAC;oBACxB,CAAC,EAAE,CAAC;gBACR,CAAC;gBACD,MAAM;YAEV,KAAK,kBAAkB;gBACnB,IAAI,OAAO,IAAI,CAAC,OAAO,CAAC,UAAU,CAAC,GAAG,CAAC,EAAE,CAAC;oBACtC,aAAa,GAAG,OAAO,CAAC;oBACxB,CAAC,EAAE,CAAC;gBACR,CAAC;gBACD,MAAM;YAEV,KAAK,aAAa;gBACd,IAAI,OAAO,IAAI,CAAC,OAAO,CAAC,UAAU,CAAC,GAAG,CAAC,EAAE,CAAC;oBACtC,UAAU,CAAC,eAAe,GAAG,QAAQ,CAAC,OAAO,EAAE,EAAE,CAAC,CAAC;oBACnD,CAAC,EAAE,CAAC;gBACR,CAAC;gBACD,MAAM;YAEV,KAAK,gBAAgB;gBACjB,IAAI,OAAO,IAAI,CAAC,OAAO,CAAC,UAAU,CAAC,GAAG,CAAC,EAAE,CAAC;oBACtC,UAAU,CAAC,cAAc,GAAG,QAAQ,CAAC,OAAO,EAAE,EAAE,CAAC,CAAC;oBAClD,CAAC,EAAE,CAAC;gBACR,CAAC;gBACD,MAAM;YAEV,KAAK,oBAAoB;gBACrB,IAAI,OAAO,IAAI,CAAC,OAAO,CAAC,UAAU,CAAC,GAAG,CAAC,EAAE,CAAC;oBACtC,UAAU,CAAC,UAAU,GAAG,QAAQ,CAAC,OAAO,EAAE,EAAE,CAAC,CAAC;oBAC9C,CAAC,EAAE,CAAC;gBACR,CAAC;gBACD,MAAM;YAEV,KAAK,eAAe,CAAC;YACrB,KAAK,IAAI;gBACL,kFAAkF;gBAClF,2DAA2D;gBAC3D,IAAI,OAAO,KAAK,SAAS,EAAE,CAAC;oBACxB,MAAM,CAAC,UAAU,GAAG,OAAO,CAAC;oBAC5B,CAAC,EAAE,CAAC;gBACR,CAAC;gBACD,MAAM;YAEV,KAAK,QAAQ;gBACT,IAAI,OAAO,IAAI,CAAC,OAAO,CAAC,UAAU,CAAC,GAAG,CAAC,EAAE,CAAC;oBACtC,MAAM,CAAC,IAAI,GAAG,OAAO,CAAC;oBACtB,CAAC,EAAE,CAAC;gBACR,CAAC;gBACD,MAAM;YAEV,gBAAgB;YAChB,KAAK,iBAAiB,CAAC;YACvB,KAAK,IAAI;gBACL,YAAY,GAAG,IAAI,CAAC;gBACpB,MAAM;YAEV,KAAK,gBAAgB;gBACjB,IAAI,OAAO,IAAI,CAAC,OAAO,CAAC,UAAU,CAAC,GAAG,CAAC,EAAE,CAAC;oBACtC,WAAW,GAAG,OAAO,CAAC;oBACtB,CAAC,EAAE,CAAC;gBACR,CAAC;gBACD,MAAM;YAEV,KAAK,kBAAkB;gBACnB,IAAI,OAAO,IAAI,CAAC,OAAO,CAAC,UAAU,CAAC,GAAG,CAAC,EAAE,CAAC;oBACtC,aAAa,GAAG,OAAO,CAAC;oBACxB,CAAC,EAAE,CAAC;gBACR,CAAC;gBACD,MAAM;YAEV,KAAK,kBAAkB;gBACnB,IAAI,OAAO,IAAI,CAAC,OAAO,CAAC,UAAU,CAAC,GAAG,CAAC,EAAE,CAAC;oBACtC,YAAY,GAAG,OAAO,CAAC;oBACvB,CAAC,EAAE,CAAC;gBACR,CAAC;gBACD,MAAM;YAEV,KAAK,yBAAyB;gBAC1B,IAAI,OAAO,IAAI,CAAC,OAAO,CAAC,UAAU,CAAC,GAAG,CAAC,EAAE,CAAC;oBACtC,mBAAmB,GAAG,QAAQ,CAAC,OAAO,EAAE,EAAE,CAAC,CAAC;oBAC5C,CAAC,EAAE,CAAC;gBACR,CAAC;gBACD,MAAM;YAEV,KAAK,WAAW,CAAC;YACjB,KAAK,IAAI;gBACL,OAAO,CAAC,KAAK,CAAC,qBAAqB,cAAc,CAAC,OAAO,EAAE,CAAC,CAAC;gBAC7D,OAAO,EAAE,MAAM,EAAE,SAAS,EAAE,KAAK,EAAE,SAAS,EAAE,UAAU,EAAE,IAAI,EAAE,CAAC;YAErE,KAAK,QAAQ,CAAC;YACd,KAAK,IAAI;gBACL,SAAS,EAAE,CAAC;gBACZ,OAAO,EAAE,MAAM,EAAE,SAAS,EAAE,KAAK,EAAE,SAAS,EAAE,UAAU,EAAE,IAAI,EAAE,CAAC;YAErE;gBACI,IAAI,GAAG,EAAE,UAAU,CAAC,GAAG,CAAC,EAAE,CAAC;oBACvB,OAAO,CAAC,KAAK,CAAC,mBAAmB,GAAG,EAAE,CAAC,CAAC;oBACxC,SAAS,EAAE,CAAC;oBACZ,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;gBACpB,CAAC;QACT,CAAC;IACL,CAAC;IAED,2DAA2D;IAC3D,IAAI,SAAS,IAAI,SAAS,IAAI,aAAa,EAAE,CAAC;QAC1C,wBAAwB;QACxB,IAAI,CAAC,SAAS,EAAE,CAAC;YACb,SAAS,GAAG,OAAO,CAAC,GAAG,CAAC,YAAY,CAAC,IAAI,WAAW,CAAC;QACzD,CAAC;QACD,IAAI,CAAC,SAAS,EAAE,CAAC;YACb,SAAS,GAAG,OAAO,CAAC,GAAG,CAAC,YAAY,CAAC,CAAC;QAC1C,CAAC;QACD,IAAI,CAAC,aAAa,EAAE,CAAC;YACjB,aAAa,GAAG,OAAO,CAAC,GAAG,CAAC,gBAAgB,CAAC,CAAC;QAClD,CAAC;QACD,IAAI,CAAC,aAAa,EAAE,CAAC;YACjB,aAAa,GAAG,OAAO,CAAC,GAAG,CAAC,gBAAgB,CAAC,CAAC;QAClD,CAAC;QAED,IAAI,SAAS,IAAI,aAAa,EAAE,CAAC;YAC7B,SAAS,CAAC,IAAI,CAAC;gBACX,IAAI,EAAE,OAAO;gBACb,IAAI,EAAE,SAAS;gBACf,IAAI,EAAE,SAAS;gBACf,QAAQ,EAAE,SAAS;gBACnB,QAAQ,EAAE,aAAa;gBACvB,QAAQ,EAAE,aAAa;gBACvB,IAAI,EAAE,UAAU;aACnB,CAAC,CAAC;QACP,CAAC;IACL,CAAC;IAED,0CAA0C;IAC1C,IAAI,SAAS,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QACzB,MAAM,OAAO,GAAG,OAAO,CAAC,GAAG,CAAC,YAAY,CAAC,CAAC;QAC1C,MAAM,OAAO,GAAG,OAAO,CAAC,GAAG,CAAC,YAAY,CAAC,CAAC;QAC1C,MAAM,WAAW,GAAG,OAAO,CAAC,GAAG,CAAC,gBAAgB,CAAC,CAAC;QAClD,MAAM,WAAW,GAAG,OAAO,CAAC,GAAG,CAAC,gBAAgB,CAAC,CAAC;QAClD,MAAM,OAAO,GAAG,OAAO,CAAC,GAAG,CAAC,YAAY,CAAC,CAAC;QAC1C,MAAM,WAAW,GAAG,OAAO,CAAC,GAAG,CAAC,iBAAiB,CAAC,CAAC;QAEnD,IAAI,OAAO,IAAI,OAAO,IAAI,WAAW,EAAE,CAAC;YACpC,IAAI,WAAW,EAAE,CAAC;gBACd,UAAU,CAAC,eAAe,GAAG,QAAQ,CAAC,WAAW,EAAE,EAAE,CAAC,CAAC;YAC3D,CAAC;YACD,SAAS,CAAC,IAAI,CAAC;gBACX,IAAI,EAAE,OAAO;gBACb,IAAI,EAAE,OAAO;gBACb,IAAI,EAAE,OAAO,CAAC,CAAC,CAAC,QAAQ,CAAC,OAAO,EAAE,EAAE,CAAC,CAAC,CAAC,CAAC,IAAI;gBAC5C,QAAQ,EAAE,OAAO;gBACjB,QAAQ,EAAE,WAAW;gBACrB,QAAQ,EAAE,WAAW;gBACrB,IAAI,EAAE,UAAU;aACnB,CAAC,CAAC;QACP,CAAC;IACL,CAAC;IAED,uCAAuC;IACvC,IAAI,CAAC,MAAM,CAAC,UAAU,EAAE,CAAC;QACrB,MAAM,CAAC,UAAU,GAAG,OAAO,CAAC,GAAG,CAAC,uBAAuB,CAAC,IAAI,OAAO,CAAC,GAAG,CAAC,aAAa,CAAC,CAAC;IAC3F,CAAC;IAED,oCAAoC;IACpC,IAAI,CAAC,YAAY,IAAI,OAAO,CAAC,GAAG,CAAC,eAAe,CAAC,KAAK,MAAM,EAAE,CAAC;QAC3D,YAAY,GAAG,IAAI,CAAC;IACxB,CAAC;IACD,IAAI,CAAC,WAAW,EAAE,CAAC;QACf,WAAW,GAAG,OAAO,CAAC,GAAG,CAAC,cAAc,CAAC,CAAC;IAC9C,CAAC;IACD,IAAI,CAAC,aAAa,EAAE,CAAC;QACjB,aAAa,GAAG,OAAO,CAAC,GAAG,CAAC,gBAAgB,CAAC,CAAC;IAClD,CAAC;IACD,IAAI,CAAC,YAAY,EAAE,CAAC;QAChB,YAAY,GAAG,OAAO,CAAC,GAAG,CAAC,gBAAgB,CAAC,CAAC;IACjD,CAAC;IACD,IAAI,mBAAmB,KAAK,SAAS,IAAI,OAAO,CAAC,GAAG,CAAC,uBAAuB,CAAC,EAAE,CAAC;QAC5E,mBAAmB,GAAG,QAAQ,CAAC,OAAO,CAAC,GAAG,CAAC,uBAAuB,CAAC,EAAE,EAAE,CAAC,CAAC;IAC7E,CAAC;IAED,gCAAgC;IAChC,IAAI,KAA8B,CAAC;IACnC,IAAI,YAAY,EAAE,CAAC;QACf,KAAK,GAAG;YACJ,OAAO,EAAE,IAAI;YACb,sBAAsB,EAAE,WAAW;YACnC,MAAM,EAAE,WAAW;YACnB,QAAQ,EAAE,aAAa;YACvB,OAAO,EAAE,YAAY;YACrB,cAAc,EAAE,mBAAmB;SACtC,CAAC;IACN,CAAC;IAED,OAAO,EAAE,MAAM,EAAE,SAAS,EAAE,KAAK,EAAE,UAAU,EAAE,KAAK,EAAE,CAAC;AAC3D,CAAC;AAED;;GAEG;AACH,MAAM,UAAU,SAAS;IACrB,OAAO,CAAC,KAAK,CAAC;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;CAkDjB,CAAC,CAAC;AACH,CAAC"}

package/dist/cli.d.ts

@@ -0,0 +1,17 @@
+#!/usr/bin/env node
+/**
+ * mysql-mcp - Command Line Interface
+ *
+ * Entry point for running the mysql-mcp server from the command line.
+ */
+import type { McpServerConfig, DatabaseConfig, OAuthConfig } from './types/index.js';
+/**
+ * Main entry point
+ */
+export declare function main(args?: {
+    config: Partial<McpServerConfig>;
+    databases: DatabaseConfig[];
+    oauth: OAuthConfig | undefined;
+    shouldExit?: boolean;
+}): Promise<void>;
+//# sourceMappingURL=cli.d.ts.map

package/dist/cli.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"cli.d.ts","sourceRoot":"","sources":["../src/cli.ts"],"names":[],"mappings":";AACA;;;;GAIG;AAIH,OAAO,KAAK,EAAE,eAAe,EAAE,cAAc,EAAE,WAAW,EAAE,MAAM,kBAAkB,CAAC;AAgErF;;GAEG;AACH,wBAAsB,IAAI,CACtB,IAAI,CAAC,EAAE;IACH,MAAM,EAAE,OAAO,CAAC,eAAe,CAAC,CAAC;IACjC,SAAS,EAAE,cAAc,EAAE,CAAC;IAC5B,KAAK,EAAE,WAAW,GAAG,SAAS,CAAC;IAC/B,UAAU,CAAC,EAAE,OAAO,CAAC;CACxB,GACF,OAAO,CAAC,IAAI,CAAC,CA0Ef"}