MySQL

Where to find these

Worclaude queries MySQL live and read-only — nothing is copied into the app, and every statement it writes is a single SELECT.

1. Host, port and database

From your connection string, or from the provider's console:

mysql://user:[email protected]:3306/appdb
                      └────────host────────┘ └po┘ └ db ┘

Port is 3306 unless someone changed it. On RDS or Aurora: Databases → your instance → Endpoint; on PlanetScale, the connect dialog gives you the parts.

MySQL has no schemas inside a database — the database is the schema. So this one field decides everything the source can see, and list_tables defaults to it.

2. A read-only user

Not your application's user. Ask for a read-only account, or create one:

CREATE USER 'worclaude_ro'@'%' IDENTIFIED BY 'a-long-random-string';
GRANT SELECT ON appdb.* TO 'worclaude_ro'@'%';
FLUSH PRIVILEGES;

ON appdb.* covers tables added later, so there is no equivalent of the Postgres default-privileges trap here.

3. Network access

The database has to accept connections from this deployment's egress address — a security group rule, or the host part of the MySQL user ('%' above allows any, which you may want to narrow). A connection that hangs rather than being refused is almost always this.

4. SSL mode

Leave it on require unless you have been told otherwise. disable sends the password in the clear.