MCP and GenAI Variables

Variable Inventory

Numeric values outside these released-handler ranges are rejected rather than clamped when the variable is set. Tool handlers can impose their own additional effective limits.

Server Variables

mcp-enabled

Master switch for the MCP listener. The accepted Boolean spellings in the released handler are true/1 and false/0 (case-insensitive for the words).

mcp-port

TCP port for the MCP HTTP/HTTPS listener. The released handler accepts 1 through 65535; the default is 6071.

mcp-use_ssl

Controls HTTP versus HTTPS. It defaults to true. In TLS mode the MCP server uses ProxySQL’s loaded key and certificate and cannot start if they are unavailable. Setting it to false exposes bearer tokens and tool data over unencrypted HTTP unless another trusted TLS terminator protects the connection.

mcp-timeout_ms

Runtime timeout setting, default 30000 milliseconds. The v4.0.10 variable handler accepts every non-negative integer, including zero, and rejects negative values.

The released setter uses integer conversion that turns non-numeric text into zero, which is then accepted. Use canonical decimal integer text and verify the runtime value after loading.

MCP Endpoint Authentication

Each variable is the Bearer token for exactly one endpoint. All default to the empty string.

An empty token does not make an endpoint public. In v4.0.10 it disables access: the resource rejects every POST request with HTTP 401 until its variable contains a non-empty value. This fail-closed behavior is important because Query, Config, Stats, RAG, and other endpoint tools can read sensitive state or mutate data.

Use distinct high-entropy tokens, send them in the Authorization header, rotate them through main.global_variables, and protect access to the Admin interface. The server also accepts a token URL query argument as a fallback, but URLs can leak into logs and history.

Example:

UPDATE global_variables
SET variable_value = 'replace-with-a-long-random-token'
WHERE variable_name = 'mcp-stats_endpoint_auth';

LOAD MCP VARIABLES TO RUNTIME;
SAVE MCP VARIABLES TO DISK;

Stats Safety Variables

mcp-stats_show_queries_max_rows

Configurable page/window cap for /mcp/stats show_queries. It defaults to 200 and accepts 1–1000. The handler also has an independent hard maximum of 1000. It reports the requested limit/offset, effective limit, and effective cap in the result.

mcp-stats_show_processlist_max_rows

Configurable returned-row cap for /mcp/stats show_processlist. It defaults to 200 and accepts 1–1000. The handler also hard-caps the effective value at 1000 and reports requested/effective pagination metadata.

mcp-stats_enable_debug_tools

Enables debug-oriented Stats tools. The default is false. In v4.0.10 it gates show_free_connections, which exposes individual pooled connections and protocol/session metadata and has no per-call row cap. Enable it only for controlled diagnostics, then disable it again.

UPDATE global_variables
SET variable_value = 'true'
WHERE variable_name = 'mcp-stats_enable_debug_tools';

LOAD MCP VARIABLES TO RUNTIME;

Backend hosts, protocols, credentials, schemas, and target policy metadata are not configured through legacy mcp-mysql_* global variables in v4.0.10. Use the server-side mcp_auth_profiles and mcp_target_profiles tables and load both atomically with LOAD MCP PROFILES TO RUNTIME; see that reference for v4.0.10 TLS and policy-field enforcement caveats.

GenAI Variables

These 32 genai-* names are the complete public GenAI registry in v4.0.10. Update their rows in main.global_variables, run LOAD GENAI VARIABLES TO RUNTIME, and, after validating and correcting the memory rows, persist them with SAVE GENAI VARIABLES TO DISK. A runtime load restarts the GenAI worker handler and rebuilds the vector-store and LLM components, so in-flight AI work can be interrupted. The variables are available only with the GenAI plugin in the AI/MCP v4.0.10 tier; Stable v3.0.10 and Innovation v3.1.10 do not expose this plugin-owned variable family at runtime.

The setter parses integers with atoi and the budget with atof: nonnumeric text becomes zero. Zero is accepted only where the table’s range includes it. Otherwise the setter logs an error, ignores that runtime assignment, and retains the current runtime value. The loader does not propagate that setter failure, so LOAD can still return OK while the invalid text remains in main.global_variables; a later SAVE GENAI VARIABLES TO DISK can persist it. Except for genai-rag_enabled, Boolean setters store true only for the exact lowercase text true and store false for every other non-null string. genai-rag_enabled also treats 1 as true. Use canonical values, inspect runtime_global_variables after every load, and correct the memory row before SAVE.

Worker, embedding, and reranking

AI and LLM controls

Anomaly-policy and routing placeholders

Do not treat the stored anomaly, routing, or budget settings as security controls in v4.0.10. The released detector uses its own constructed policy values instead of these documented policy variables. When the GenAI plugin is running and both genai-enabled and genai-anomaly_enabled are true, eligible MySQL and PostgreSQL queries are inspected through the registered plugin hooks. The released detector can block a query; the core then returns a protocol-appropriate error to the client instead of routing it to a backend.

Vector storage and RAG

genai-rag_enabled=false does not disable /mcp/rag in this release. Control access with mcp-rag_endpoint_auth, the MCP listener gate, and network policy; see MCP endpoints and RAG.