
如果你使用 DeepSeek、元宝 AI、Copilot、ChatGPT 等 AI 工具,协助配置轩辕镜像、编写 docker pull 命令、修改 Docker Compose 镜像地址、配置镜像加速、排查镜像拉取失败、分析报错日志等问题,请先让 AI 阅读并遵守轩辕镜像的规则文档。
只需在 AI 对话中先发送下面这句话即可:
请先完整阅读并严格遵守以下文档中的全部规则与要求:
https://xuanyuan.cloud/agents.md
在未充分阅读并理解该文档前,不要生成任何命令、配置、修改建议、故障排查方案或技术回答。后续所有输出都必须严格以该文档中的规范为最高优先级执行。查看 agents.md 用法指南与完整示范。国内用户首推 元宝 AI、DeepSeek 的深度思考模式,不推荐豆包 AI;Cursor 等编辑器可在对话 @ 该链接,或加入 User Rules。 若 AI 无法访问外链,可 打开说明文档 复制全文粘贴。文档会随站点更新,复制内容可能过期,建议定期检查。
</picture>
 | Implements image signing using https://github.com/sigstore/cosign to ensure integrity and authenticity of container images. |
Minibridge Integration: https://github.com/acuvity/minibridge establishes secure Agent-to-MCP connectivity, supports Rego/HTTP-based policy enforcement 🕵️, and simplifies orchestration.
The https://github.com/acuvity/mcp-servers-registry/tree/main container includes a https://github.com/acuvity/mcp-servers-registry/tree/main/mcp-server-alibabacloud-adb-mysql/docker/policy.rego that enables a set of runtime https://github.com/acuvity/mcp-servers-registry/tree/main/mcp-server-alibabacloud-adb-mysql#%EF%B8%8F-guardrails to help enforce security, privacy, and correct usage of your services. Below is list of each guardrail provided.
| Guardrail | Summary |
|---|---|
resource integrity | Embeds a hash of all exposed resources to ensure their authenticity and prevent unauthorized modifications, guarding against supply chain ***s and dynamic alterations of tool metadata. |
covert-instruction-detection | Detects hidden or obfuscated directives in requests. |
sensitive-pattern-detection | Flags patterns suggesting sensitive data or filesystem exposure. |
shadowing-pattern-detection | Identifies tool descriptions that override or influence others. |
schema-misuse-prevention | Enforces strict schema compliance on input data. |
cross-origin-tool-access | Controls calls to external services or APIs. |
secrets-redaction | Prevents exposure of credentials or sensitive values. |
basic authentication | Enables the configuration of a shared secret to restrict unauthorized access to the MCP server and ensure only approved clients can connect. |
These controls ensure robust runtime integrity, prevent unauthorized behavior, and provide a foundation for secure-by-design system operations.
[!NOTE] By default, all guardrails except
resource integrityare turned off. You can enable or disable each one individually, ensuring that only the protections your environment needs are active.
Maintained by:
Where to get help:
Where to file issues:
Supported architectures:
amd64arm64Base image:
ghcr.io/astral-sh/uv:python3.13-alpineResources:
Latest tags:
latest -> 1.0.0-1.0.0 -> 1.0.0Verify signature with https://github.com/sigstore/cosign:
cosign verify --certificate-oidc-issuer "https://token.actions.githubusercontent.com" --certificate-identity "https://github.com/acuvity/mcp-servers-registry/.github/workflows/release.yaml@refs/heads/main" docker.io/acuvity/mcp-server-alibabacloud-adb-mysql:latestcosign verify --certificate-oidc-issuer "https://token.actions.githubusercontent.com" --certificate-identity "https://github.com/acuvity/mcp-servers-registry/.github/workflows/release.yaml@refs/heads/main" docker.io/acuvity/mcp-server-alibabacloud-adb-mysql:1.0.0cosign verify --certificate-oidc-issuer "https://token.actions.githubusercontent.com" --certificate-identity "https://github.com/acuvity/mcp-servers-registry/.github/workflows/release.yaml@refs/heads/main" docker.io/acuvity/mcp-server-alibabacloud-adb-mysql:1.0.0-1.0.0[!TIP] Given mcp-server-alibabacloud-adb-mysql scope of operation it can be hosted anywhere.
Environment variables and secrets:
ADB_MYSQL_HOST required to be setADB_MYSQL_PORT optional (not set)ADB_MYSQL_USER required to be setADB_MYSQL_PASSWORD required to be setADB_MYSQL_DATABASE required to be setFor more information and extra configuration you can consult the https://github.com/aliyun/alibabacloud-adb-mysql-mcp-server documentation.
Below are the steps for configuring most clients that use MCP to elevate their Copilot experience.
[!NOTE] These integrations function natively across all Minibridge modes. To keep things brief, only the docker local-run setup is covered here.
To get started immediately, you can use the "one-click" link below:
Press ctrl + shift + p and type Preferences: Open User Settings JSON to add the following section:
json{ "mcp": { "servers": { "acuvity-mcp-server-alibabacloud-adb-mysql": { "env": { "ADB_MYSQL_DATABASE": "TO_BE_SET", "ADB_MYSQL_HOST": "TO_BE_SET", "ADB_MYSQL_PASSWORD": "TO_BE_SET", "ADB_MYSQL_USER": "TO_BE_SET" }, "command": "docker", "args": [ "run", "-i", "--rm", "--read-only", "-e", "ADB_MYSQL_HOST", "-e", "ADB_MYSQL_USER", "-e", "ADB_MYSQL_PASSWORD", "-e", "ADB_MYSQL_DATABASE", "docker.io/acuvity/mcp-server-alibabacloud-adb-mysql:1.0.0" ] } } } }
In your workspace create a file called .vscode/mcp.json and add the following section:
json{ "servers": { "acuvity-mcp-server-alibabacloud-adb-mysql": { "env": { "ADB_MYSQL_DATABASE": "TO_BE_SET", "ADB_MYSQL_HOST": "TO_BE_SET", "ADB_MYSQL_PASSWORD": "TO_BE_SET", "ADB_MYSQL_USER": "TO_BE_SET" }, "command": "docker", "args": [ "run", "-i", "--rm", "--read-only", "-e", "ADB_MYSQL_HOST", "-e", "ADB_MYSQL_USER", "-e", "ADB_MYSQL_PASSWORD", "-e", "ADB_MYSQL_DATABASE", "docker.io/acuvity/mcp-server-alibabacloud-adb-mysql:1.0.0" ] } } }
To pass secrets you should use the
promptStringinput type described in the Visual Studio Code documentation.
In ~/.codeium/windsurf/mcp_config.json add the following section:
json{ "mcpServers": { "acuvity-mcp-server-alibabacloud-adb-mysql": { "env": { "ADB_MYSQL_DATABASE": "TO_BE_SET", "ADB_MYSQL_HOST": "TO_BE_SET", "ADB_MYSQL_PASSWORD": "TO_BE_SET", "ADB_MYSQL_USER": "TO_BE_SET" }, "command": "docker", "args": [ "run", "-i", "--rm", "--read-only", "-e", "ADB_MYSQL_HOST", "-e", "ADB_MYSQL_USER", "-e", "ADB_MYSQL_PASSWORD", "-e", "ADB_MYSQL_DATABASE", "docker.io/acuvity/mcp-server-alibabacloud-adb-mysql:1.0.0" ] } } }
See Windsurf documentation for more info.
Add the following JSON block to your mcp configuration file:
~/.cursor/mcp.json for global scope.cursor/mcp.json for project scopejson{ "mcpServers": { "acuvity-mcp-server-alibabacloud-adb-mysql": { "env": { "ADB_MYSQL_DATABASE": "TO_BE_SET", "ADB_MYSQL_HOST": "TO_BE_SET", "ADB_MYSQL_PASSWORD": "TO_BE_SET", "ADB_MYSQL_USER": "TO_BE_SET" }, "command": "docker", "args": [ "run", "-i", "--rm", "--read-only", "-e", "ADB_MYSQL_HOST", "-e", "ADB_MYSQL_USER", "-e", "ADB_MYSQL_PASSWORD", "-e", "ADB_MYSQL_DATABASE", "docker.io/acuvity/mcp-server-alibabacloud-adb-mysql:1.0.0" ] } } }
See cursor documentation for more information.
In the claude_desktop_config.json configuration file add the following section:
json{ "mcpServers": { "acuvity-mcp-server-alibabacloud-adb-mysql": { "env": { "ADB_MYSQL_DATABASE": "TO_BE_SET", "ADB_MYSQL_HOST": "TO_BE_SET", "ADB_MYSQL_PASSWORD": "TO_BE_SET", "ADB_MYSQL_USER": "TO_BE_SET" }, "command": "docker", "args": [ "run", "-i", "--rm", "--read-only", "-e", "ADB_MYSQL_HOST", "-e", "ADB_MYSQL_USER", "-e", "ADB_MYSQL_PASSWORD", "-e", "ADB_MYSQL_DATABASE", "docker.io/acuvity/mcp-server-alibabacloud-adb-mysql:1.0.0" ] } } }
See Anthropic documentation for more information.
pythonasync with MCPServerStdio( params={ "env": {"ADB_MYSQL_DATABASE":"TO_BE_SET","ADB_MYSQL_HOST":"TO_BE_SET","ADB_MYSQL_PASSWORD":"TO_BE_SET","ADB_MYSQL_USER":"TO_BE_SET"}, "command": "docker", "args": ["run","-i","--rm","--read-only","-e","ADB_MYSQL_HOST","-e","ADB_MYSQL_USER","-e","ADB_MYSQL_PASSWORD","-e","ADB_MYSQL_DATABASE","docker.io/acuvity/mcp-server-alibabacloud-adb-mysql:1.0.0"] } ) as server: tools = await server.list_tools()
pythonasync with MCPServerSse( params={ "url": "http://<ip>:<port>/sse", } ) as server: tools = await server.list_tools()
See https://openai.github.io/openai-agents-python/mcp/ for more info.
In your client configuration set:
dockerrun -i --rm --read-only -e ADB_MYSQL_HOST -e ADB_MYSQL_USER -e ADB_MYSQL_PASSWORD -e ADB_MYSQL_DATABASE docker.io/acuvity/mcp-server-alibabacloud-adb-mysql:1.0.0Simply run as:
consoledocker run -it -p 8000:8000 --rm --read-only -e ADB_MYSQL_HOST -e ADB_MYSQL_USER -e ADB_MYSQL_PASSWORD -e ADB_MYSQL_DATABASE docker.io/acuvity/mcp-server-alibabacloud-adb-mysql:1.0.0
Then on your application/client, you can configure to use it like:
json{ "mcpServers": { "acuvity-mcp-server-alibabacloud-adb-mysql": { "url": "http://localhost:8000/sse" } } }
You might have to use different ports for different tools.
This section assume you are familiar with TLS and certificates and will require:
- a server certificate with proper DNS/IP field matching your tool deployment.
- a client-ca used to sign client certificates
backend mode-e MINIBRIDGE_MODE=backend/certs ex (-v $PWD/certs:/certs)-e MINIBRIDGE_TLS_SERVER_CERT=/certs/server-cert.pem-e MINIBRIDGE_TLS_SERVER_KEY=/certs/server-key.pem-e MINIBRIDGE_TLS_SERVER_KEY_PASS=optional-e MINIBRIDGE_TLS_SERVER_CLIENT_CA=/certs/client-ca.pemminibridge locally in frontend mode:In your client configuration, Minibridge works like any other STDIO command.
Example for Claude Desktop:
json{ "mcpServers": { "acuvity-mcp-server-alibabacloud-adb-mysql": { "command": "minibridge", "args": ["frontend", "--backend", "wss://<remote-url>:8000/ws", "--tls-client-backend-ca", "/path/to/ca/that/signed/the/server-cert.pem/ca.pem", "--tls-client-cert", "/path/to/client-cert.pem", "--tls-client-key", "/path/to/client-key.pem"] } } }
That's it.
Minibridge offers a host of additional features. For step-by-step guidance, please visit the wiki. And if anything’s unclear, don’t hesitate to reach out!
This chart requires some mandatory information to be installed.
Mandatory Secrets:
ADB_MYSQL_PASSWORD secret to be set as secrets.ADB_MYSQL_PASSWORD either by .value or from existing with .valueFromMandatory Environment variables:
ADB_MYSQL_HOST environment variable to be set by env.ADB_MYSQL_HOSTADB_MYSQL_USER environment variable to be set by env.ADB_MYSQL_USERADB_MYSQL_DATABASE environment variable to be set by env.ADB_MYSQL_DATABASEOptional Environment variables:
ADB_MYSQL_PORT="" environment variable can be changed with env.ADB_MYSQL_PORT=""You can inspect the chart README:
consolehelm show readme oci://docker.io/acuvity/mcp-server-alibabacloud-adb-mysql --version 1.0.0
You can inspect the values that you can configure:
CODE_TOKEN_11`
Install with helm
consolehelm install mcp-server-alibabacloud-adb-mysql oci://docker.io/acuvity/mcp-server-alibabacloud-adb-mysql --version 1.0.0
From there your MCP server mcp-server-alibabacloud-adb-mysql will be reachable by default through http/sse from inside the cluster using the Kubernetes Service mcp-server-alibabacloud-adb-mysql on port 8000 by default. You can change that by looking at the service section of the values.yaml file.
The deployment will create a Kubernetes service with a healthPort, that is used for liveness probes and readiness probes. This health port can also be used by the monitoring stack of your choice and exposes metrics under the /metrics path.
See full charts https://github.com/acuvity/mcp-servers-registry/tree/main/mcp-server-alibabacloud-adb-mysql/charts/mcp-server-alibabacloud-adb-mysql/README.md for more details about settings and runtime security including guardrails activation.
For detailed list of all features, tools, arguments and SBOM hashes provided by this server please consult the https://github.com/acuvity/mcp-servers-registry/tree/main/mcp-server-alibabacloud-adb-mysql
💬 Questions? Open an issue or contact us *** . 📦 Contributions welcome!
您可以使用以下命令拉取该镜像。请将 <标签> 替换为具体的标签版本。如需查看所有可用标签版本,请访问 标签列表页面。

来自真实用户的反馈,见证轩辕镜像的优质服务