Back to Home
SureshAmal icon

mmcopilot-mcp

by SureshAmal

Overview

The MMCopilot MCP Server provides trading tools for the MarketMaya platform, allowing users to create, manage, and backtest trading strategies, access account information, and search a knowledge base.

Installation

Run Command
python -m mmcopilot_mcp

Environment Variables

  • BEARER_TOKEN
  • FETCH_BEARER_TOKEN
  • GEMINI_API_KEY

Security Notes

CRITICAL: The server uses `exec()` to dynamically load and register tool functions whose code is generated from definitions fetched from an external API (MarketMaya). While there are attempts at sanitization for identifiers and descriptions (`escape_string_for_python`, `sanitize_identifier`), dynamically executing code from an untrusted source, even a 'trusted' API that could be compromised, is an extreme security risk. A malicious or compromised external API could inject arbitrary Python code, leading to remote code execution on the MCP server. This vulnerability significantly lowers the security score.

Similar Servers

Stats

Interest Score0
Security Score2
Cost ClassMedium
Avg Tokens350
Stars0
Forks0
Last Update2025-12-24

Tags

tradingmarketmayafastmcpstrategy managementknowledge base