Connectors

MySQL and MariaDB

MySQL and MariaDB connector configuration options and limitations.

MySQL and MariaDB

MySQL and MariaDB are supported as separate connectors. Select the connector that matches your server.

Supported Versions

Database	Minimum Tested Version
MySQL	8.4
MariaDB	10.7

These are the lowest versions tested against Monospace. Older versions are untested and may not work.

Connection Parameters

Parameter	Type	Required	Default	Description
`host`	string	Yes	—	Database server hostname or IP address
`port`	number	Yes	—	Database server port
`user`	string	Yes	—	Database username
`password`	string	Conditional	—	Database password. Required unless `aws_iam` is set
`dbname`	string	No	—	Database name
`ssl.mode`	string	No	—	SSL connection mode
`ssl.ca_cert`	string	No	—	CA certificate (base64-encoded PEM or DER)

Alternatively, paste a connection string to auto-populate fields:

MySQL

mysql://user:password@host:3306/database

MariaDB

mariadb://user:password@host:3306/database

The MySQL connector accepts mysql://. The MariaDB connector accepts mariadb://.

Use the sslmode query parameter in the URL to set ssl.mode.

Amazon RDS and Aurora instances can authenticate with AWS IAM instead of a database password. Set aws_iam on the connection and omit password — exactly one of the two must be present. Each connection mints a short-lived token; tokens are never reused across connections.

Parameter	Type	Required	Default	Description
`aws_iam.region`	string	Yes	—	AWS region of the database instance, for example `us-east-1`
`aws_iam.access_key`	string	No	—	AWS access key ID. Must be paired with `aws_iam.secret_key`
`aws_iam.secret_key`	string	No	—	AWS secret access key. Must be paired with `aws_iam.access_key`
`aws_iam.role_arn`	string	No	—	IAM role to assume, for example `arn:aws:iam::123456789012:role/my-role`

Omit access_key and secret_key to use whatever credentials the runtime provides — an EC2 instance profile, an EKS/IRSA web identity token, an ECS task role, AWS SSO, or a shared credentials profile.

The database user is still required, and must be granted IAM authentication on the instance.

Setting aws_iam forces ssl.mode to verify-full, and the Amazon RDS certificate authority for aws_iam.region is trusted automatically — you do not need to download the RDS CA bundle and set ssl.ca_cert. An explicit ssl.ca_cert still takes precedence.

In the Studio, choose AWS IAM as the Authentication Method when adding the data source. It is offered on the PostgreSQL, MySQL, and MariaDB connectors and on the Amazon RDS and Aurora presets.

SSL Modes

Mode	Description
`disable`	No TLS encryption
`prefer`	Not supported. Choose `disable`, `require`, `verify-ca`, or `verify-full`
`require`	Require TLS without certificate verification. If `ssl.ca_cert` is provided, verifies the server certificate against it
`verify-ca`	Require TLS and verify the server certificate chain against `ssl.ca_cert`. Does not check hostname. Requires `ssl.ca_cert`
`verify-full`	Require TLS, verify the certificate chain, and verify hostname. Uses system roots when `ssl.ca_cert` is omitted

Mutual TLS is not yet supported for MySQL/MariaDB.

Limitations

Collections need a primary key for updates and deletes.
Primary key values cannot currently be changed.

MySQL and MariaDB