mysh

[](https://github.com/atani/mysh/actions/workflows/ci.yml) [](https://codecov.io/gh/atani/mysh) [](https://goreportcard.com/report/github.com/atani/mysh) [](https://pkg.go.dev/github.com/atani/mysh) [](https://opensource.org/licenses/MIT)

English | 日本語

**Stop leaking production data to AI coding agents.**

mysh is a safer MySQL CLI for the AI coding era: it manages connection profiles, SSH tunnels, and query output so Claude Code, Cursor, shell scripts, and MCP clients can work with production-like databases without accidentally seeing raw sensitive data.

*Pronounced "my-sh" (/maɪʃ/), like "my shell".*


**New to mysh?** See the [Getting Started guide for non-engineers](docs/getting-started.md) — set up in 5 minutes and start querying with Claude Code.

If you believe AI agents should never receive raw production PII, consider starring the repo to help more teams find it.

Why mysh?

Traditional MySQL clients are great for humans, but risky in AI-assisted workflows: query results can be copied into prompts, captured by scripts, or returned to agents without a final privacy check.

mysh is built for that gap:

• AI-safe by default: automatically masks configured sensitive fields in production and non-TTY contexts
• One command for secure access: handles MySQL connection profiles and SSH tunnels together
• Team-friendly onboarding: export shared connection configs without passwords, then let each teammate enter their own