Least privilege
Use read-only or dedicated low-privilege database accounts, dedicated SSH accounts with trusted fingerprints, and restricted API methods. Prompts and app switches do not replace underlying permissions.
Getting started / start small
Install the extension and MCP independently. Pick a small task, validate it in a test environment, then integrate it gradually.
Search the VS Code Marketplace for Claude Code Config Helper, and check that the publisher is liliangshan. Check the listing for the published version; local test builds may differ.
If you have a local VSIX, choose Extensions → … → Install from VSIX in VS Code. Reload when convenient; reloading interrupts running CLI tasks.
This only generates local examples: no server connections, password collection or package installation. Replace sample addresses and paths; configure credentials locally in your client.
{
"mcpServers": {
"mysql": {
"command": "npx",
"args": [
"-y",
"@liangshanli/mcp-server-mysql"
],
"env": {
"MYSQL_HOST": "db.example.com",
"MYSQL_PORT": "3306",
"MYSQL_USER": "ai_reader",
"MYSQL_PASSWORD": "${MYSQL_PASSWORD}",
"MYSQL_DATABASE": "app_db",
"MYSQL_SSL": "true",
"READONLY": "true",
"ALLOW_DDL": "false",
"ALLOW_DROP": "false",
"ALLOW_DELETE": "false"
}
}
}
}The MySQL example enables read-only mode and TLS. Use a read-only account and ensure the hostname matches the database certificate.
mcpServers, stored at the project root in .mcp.json. Variables such as ${MYSQL_PASSWORD} depend on environment variables available when the client starts. Check your client’s actual rules.servers, stored in .vscode/mcp.json. Passwords use VS Code’s password prompt, not a website input..cursor/mcp.json, using mcpServers. Environment expansion depends on the client version. Unexpanded placeholders are not passwords..mcp.json is discovered by the CLI;--strict-mcp-config restricts sources. Reading VS Code configuration does not implement native input-variable resolution. Prefer Claude Code format in this extension.If a config exists, merge only required server entries. Do not overwrite it. If npx cannot start on Windows, use an absolute Node.js path with the installed package entry; see npm docs.
Try a task like this:
Check whether the current MCP tools are available.
Read only the test database schema and explain table relationships.
Do not change data or schema. Tell me first if connection or permissions are missing.Use read-only or dedicated low-privilege database accounts, dedicated SSH accounts with trusted fingerprints, and restricted API methods. Prompts and app switches do not replace underlying permissions.
Do not submit passwords or private keys here. Exclude credential-bearing config files from Git as needed, and inspect logs and model output before sharing.