Metatrader-5-MCP-Server

The server implements robust security measures, especially for the `execute_mt5` tool. It explicitly blocks calls to `mt5.initialize()`, `mt5.shutdown()`, `os.system()`, `subprocess`, `eval()`, `exec()`, and `__import__`. The `mt5` object in the execution namespace is a `SafeMT5` proxy exposing only whitelisted read-only MetaTrader 5 functions. Input validation for `mt5_query` and `mt5_analyze` prevents malformed requests and potential injection attempts. HTTP rate limiting is implemented, and command length limits are enforced. The overall design prioritizes read-only data access and prevents trading operations.