The Self-Hosted MySQL GUI Your Team Opens in a Browser

It depends on your needs. MySQL Workbench is free and has advanced DBA features like ER diagrams, server administration, and migration tools. QueryGlow runs on your server and opens from any browser for your whole team, with Safe Mode, a check before writes on production and schema-only AI SQL. If you mostly browse data and write queries, try the live demo (the real app on a sample database, read-only, AI switched off, no signup) and decide.

Yes. Safe Mode always refuses DROP DATABASE, SHUTDOWN, INTO OUTFILE and INTO DUMPFILE, LOAD_FILE and LOAD DATA. By default it also refuses DROP TABLE, TRUNCATE, and DELETE or UPDATE without WHERE (QUERYGLOW_ALLOW_DESTRUCTIVE=true lifts these). A SELECT without LIMIT gets LIMIT 1000. Safe Mode is on in a fresh install and covers the Query Editor and AI agents. On a connection marked production, the Query Editor also asks before any INSERT, UPDATE, DELETE or DDL.

Yes. QueryGlow has built-in SSH tunnels bound to localhost on a random port. Paste your private key into the connection form, no terminal setup and no separate SSH client. The SSH host key is pinned on first connect, and a server that presents a different key is refused. For direct connections turn on SSL; Verify server certificate is off for new connections, turn it on when the certificate comes from a public authority. Works with MySQL on AWS RDS, DigitalOcean or private networks without exposing database ports.

No. Enter one login, click Find databases on this server, tick the databases you want and add them all at once. You can also paste a mysql:// URL, and Find local servers checks ports 3306 and 3307 on the QueryGlow host. Sidebar search, sort and group by host keep a long list manageable.

Yes. MariaDB is MySQL-compatible and uses the same mysql2 driver. Schema-only AI, Safe Mode, CSV import and export, inline editing and column reordering work the same way. One tool for both MySQL and MariaDB.

Ask AI sends your database type, table and column names with their types, and your prompt. Never rows. You describe what you need in plain English, the MySQL lands in the editor, and you review it before running. Use your own OpenAI, Anthropic or Google key, entered in the app (stored encrypted on your server) or set in .env. Ask AI is switched off in the public demo.

Agent Access gives Claude Code, Cursor or another MCP client a token instead of a connection string. Tokens are per connection and read-only by default, enforced by the database with a read-only transaction. Every call, including refused ones, shows up in the Activity tab, and you can pause one agent or all of them.

Connection passwords, SSH keys and AI keys are encrypted at rest with AES-256-GCM. Safe Mode refuses destructive statements by default and always blocks server file operations such as INTO OUTFILE. Connections marked production show a red badge in the sidebar and the header, and the Query Editor shows the statement and asks before any write runs on them. SSH host keys are pinned, and SSL connections can verify the server certificate. Your rows never leave your server; Ask AI sends only the schema, and only to the provider whose key you entered. No telemetry, no tracking.

Run ./queryglow update on your server. It backs up first, checks the new nginx config, keeps the running image as queryglow:previous, checks that the new version is serving and rolls back on its own if not. Every 1.x update is included in the $79.