What is project-specification?

A project specification for an MCP service that connects AI agents to MySQL databases. It defines the Python setup, project layout, connection settings, and available database tools.

Use it when developing, configuring, or maintaining the MySQL explorer, including its Python package, environment settings, and tools for listing tables, viewing table structures, and running queries.

It gives contributors one shared reference for how the service should be built and configured. It also documents which database actions are read-only.

project-specification — Cursor rule for Cursor by xsg22: A project specification for an MCP service that connects…

Install

Getting it into your agent

One page per mod, every tool's command on it. A separate URL per tool would split the same page into five that compete with each other.

agentmods

npx agentmods add rules/xsg22/mcp-mysql-explorer/project-specification

Clone the repo

git clone --depth 1 https://github.com/xsg22/mcp-mysql-explorer

Made for: Cursor.

Wrote this? Show the measurements

A badge with what this costs and how it scanned, read live from this page, so it follows the numbers instead of freezing them. Markdown for a README, HTML for a documentation site or a project page.

README.md

[![agentmods](https://agentmods.dev/badge/rules/xsg22/mcp-mysql-explorer/project-specification.svg)](https://agentmods.dev/rules/xsg22/mcp-mysql-explorer/project-specification)

Your own site

<a href="https://agentmods.dev/rules/xsg22/mcp-mysql-explorer/project-specification"><img src="https://agentmods.dev/badge/rules/xsg22/mcp-mysql-explorer/project-specification.svg" alt="Measured on agentmods" height="20"></a>

Per session 775 This file is loaded in full into every session.

When invoked 775 The same file — it is already loaded in full.

Security scan A 0 findings. Scan, not verified.

Origin original No closer match found in the catalogue.

Token cost

What it costs to keep this loaded

Counted locally with the o200k_base tokenizer, which is exact for GPT models; Claude uses its own tokenizer and its counts differ. Treat this as one consistent yardstick across the catalogue rather than a bill. Prices are per million input tokens.

Model	Per session	Once invoked
Fable 5	$0.00775	$0.00775
Opus 5	$0.00387	$0.00387
Sonnet 5	$0.00155	$0.00155
Haiku 4.5	$0.00077	$0.00077

Measured 4d ago against content hash 8d2d62db3949, method: parsed. Prices are Anthropic first-party input rates as of 2026-08-30, from the pricing page.

Security

Grade A, and why

project-specification scanned grade A with 0 findings against 26 rules in 11 categories — prompt injection, anti-refusal, data exfiltration, privilege escalation, supply chain, agent snooping, system-prompt leakage, SSRF and excessive agency — measured 4d ago.

A static scan of the body, not an audit. Every finding is printed with the line that produced it so you can judge whether it matters here. A mod is markdown that instructs an agent; that is exactly why what it instructs is worth reading.

Nothing flagged

None of the 26 patterns this scan looks for appear in this file: no shell pipes, no recursive deletes, no credential paths, no hidden text, no instruction-override or anti-refusal phrasing, no agent-config snooping. That is not a guarantee, it is the absence of the things that are checkable.

.cursor/rules/project-specification.mdc · 99 lines

What it actually says

MCP MySQL Explorer 项目规范

项目概述

基于 Model Context Protocol (MCP) 的 MySQL 数据库查询服务，已发布到 PyPI。

PyPI: https://pypi.org/project/mcp-mysql-explorer/
安装: pip install mcp-mysql-explorer
命令: mcp-mysql-explorer

技术栈

运行时: Python >= 3.10
MCP SDK: mcp[cli] >= 1.2.0 (FastMCP)
MySQL 驱动: PyMySQL >= 1.1.0
构建工具: hatchling
传输协议: stdio

项目结构

mcp-mysql/
├── pyproject.toml                    # 包元数据 & 依赖
├── README.md                         # PyPI / GitHub 文档
├── LICENSE                           # MIT
├── .gitignore
├── .env                              # 本地连接配置（不发布）
└── src/
    └── mcp_mysql_explorer/
        ├── __init__.py               # 版本号
        ├── __main__.py               # python -m 支持
        └── server.py                 # MCP 服务主程序

连接配置方式

支持三种配置方式，优先级：命令行参数 > 环境变量 > .env 文件

命令行参数

mcp-mysql-explorer --host HOST --port PORT --user USER --password PASS --database DB

环境变量

MYSQL_HOST, MYSQL_PORT, MYSQL_USER, MYSQL_PASSWORD, MYSQL_DATABASE

.env 文件

工作目录下 .env 文件自动加载

MCP 工具清单

工具名	功能	安全级别
`list_tables`	列出所有表	只读
`describe_table`	查看表结构（含字段注释）	只读
`query`	执行 SELECT/SHOW/DESCRIBE/EXPLAIN 查询	只读
`execute_sql`	执行写入 SQL（INSERT/UPDATE/DELETE/DDL）	读写
`get_table_indexes`	查看表索引	只读
`get_create_table`	获取建表语句	只读
`get_database_info`	获取数据库概览	只读

安全设计

query 工具仅允许 SELECT/SHOW/DESCRIBE/EXPLAIN 语句
execute_sql 工具可执行写入操作，自动提交或回滚
标识符使用反引号包裹防止 SQL 注入
查询结果最多返回 1000 行

Cursor MCP 配置示例

{
  "mcpServers": {
    "mysql": {
      "command": "mcp-mysql-explorer",
      "args": [
        "--host", "your-host",
        "--port", "3306",
        "--user", "your-user",
        "--password", "your-password",
        "--database", "your-database"
      ]
    }
  }
}

发布流程

python -m build
python -m twine upload dist/*

Changes

What this file has done since we first saw it

Hashed on every crawl. A supply-chain change to an agent config is a question of when, not whether, so the history is kept rather than the latest state alone.

4d ago First seen · 99 lines · 775 tokens per session scan A 8d2d62db3949

Subscribe to this mod's changes

project-specification is a cursor rule published in the GitHub repository xsg22/mcp-mysql-explorer (2 stars, last pushed 2mo ago), licensed MIT. It adds 775 tokens to every session, about $0.0039 per session on Opus 5. A static security scan graded it A with 0 findings. No closer match exists in the catalogue, so it is treated as the original; first seen 2026-08-31.

project-specification