matlab-mcp-core-server

The server's core functionality involves executing arbitrary MATLAB code provided via API calls (`evaluate_matlab_code`, `run_matlab_file`, `run_matlab_test_file`). This feature, while essential for its purpose, inherently carries significant security implications. The `README.md` explicitly warns users to "thoroughly review and validate all tool calls before you run them" and to "Always keep a human in the loop for important actions." The implementation includes `PathValidator` interfaces, suggesting efforts to restrict file system access to allowed directories for script execution and project paths. Telemetry collection is enabled by default but can be disabled via the `--disable-telemetry=true` argument. Communication with MATLAB sessions uses TLS, indicated by `certificatePEM` and `certificateKey` in the `embeddedconnector`.