capitalcom-mcp-server

The project exhibits a strong focus on security, implementing multiple layers of safeguards. Key features include trading disabled by default, epic allowlists, size/position/daily order limits, two-phase execution (preview then explicit confirmation), and a dry-run mode. Sensitive data like API keys and passwords are explicitly handled to prevent logging via a `redact_secrets` utility. There is no visible use of `eval` or similar dangerous functions. The `install.sh` script does not execute arbitrary external code directly. While robust, the inherent risk of live trading with an LLM-driven system means a perfect 10 is reserved for read-only or highly isolated systems, but this is an exceptionally well-secured trading agent.