MySQL

1) Create a dedicated MySQL user

What: A non-human account used only by Querio, with least-privilege access.

How (run as a user with CREATE USER privilege, e.g., root or a DBA account):

Execute the following SQL against the DB

-- Replace 'querio_user' and 'STRONG_PASSWORD' as needed
CREATE USER 'querio_user'@'%' IDENTIFIED BY 'STRONG_PASSWORD';

Tip: Use a long, random password (at least 16 characters) — a password manager can generate one. The @'%' allows connections from any host. You can replace % with Querio’s IP address for tighter security.

2) Grant read-only access to the required database/schema

What: Limit Querio’s access to only the data it needs.

How (example for my_database):

Execute the following SQL against the DB

-- Database-level privileges
GRANT SELECT ON my_database.* TO 'querio_user'@'%';

This grants read-only access to all current and future tables in my*database. *_If Querio should only read certain tables, replace my_database.*withmy_database.table_name.

3) Apply privileges

What: Make sure the new privileges take effect immediately.

FLUSH PRIVILEGES;

4) Collect and share the connection string

What: This is the standard MySQL URI format Querio will use to connect.

mysql://<username>:<password>@<host>:<port>/<database>

How to find each value:

• username: querio_user (or whatever you created)
• password: The one you set in CREATE USER
• host: Your MySQL server’s hostname or IP address
• port: Usually 3306 unless configured otherwise
• database: The database Querio should query