What you’ll need
- A QueryBear account (sign up free)
- A MySQL or MariaDB database (5.7+ / 10.x+)
- Windsurf installed
Step 1: Create a read-only MySQL user
Step 2: Add the connection to QueryBear
Dashboard → Connections → New connection → MySQL, with the credentials from Step 1.Step 3: Add QueryBear to Windsurf
1
Open Windsurf Settings
Settings → MCP Servers → Add custom server.
2
Paste the config
serverUrl — easy to miss if you’re copy-pasting from Cursor.3
Save and authorize
First QueryBear tool call triggers OAuth in browser.
Step 4: Verify
In Cascade:“What QueryBear tools do you have? List my connections.”
Try it
“In our MySQL DB, find users who signed up but never completed onboarding. Outline the queries you’d run first.”Cascade plans the query (
SELECT u.* FROM users u LEFT JOIN onboarding_events o ... WHERE o.id IS NULL), gets your go-ahead, then runs it through QueryBear.
MySQL + Windsurf gotchas
serverUrlnoturl. Top mistake — Cursor usesurl, Windsurf usesserverUrl.- Cascade multi-steps —
get_schema→run_query→ maybeget_schemaagain. Normal. - For RDS or IP-restricted MySQL, allow QueryBear’s egress IP in your security group.
- Multi-statement queries are blocked at the parser.
Related
- MySQL MCP server — MySQL-specific deep dive
- Windsurf client — Windsurf overview
- Security model — what the gateway protects against