The HTTP Plugin for MySQL offers three APIs: REST-like CRUD, REST-like JSON DOCUMENT and SQL. The SQL API lets you run any SQL you want. Including, for example,
DROP mysql.users if you mess up your setup. Insecure? It depends on your viewpoint.
It’s more than just another protocol…