SQXtreme — StrategyQuant X MCP control layer

Wrapper/extension over sq-mcp that adds Windows-first DX, Spanish localization, multi-client configs, and PyPI publish infra for AI agents (opencode, Claude Code, Cursor, VS Code).

Repo: https://github.com/herjarsa/sqxtreme-mcp

What ships in v0.5.0

sq-mcp (DAVIDAROCA27) is the foundation: 482 runtime tools, MIT, 1571 tests. SQXtreme v0.5.0 adds (122 tests: 100 unit + 22 E2E live server, CI verde, OIDC publish):

1. Windows installer — iwr install.ps1 | iex (4 modos: CheckOnly/PyPI/FromSource/FromGit)
2. Spanish localization — 5 workflow prompts + 4 sub-agentes (prompts/es/) — es/
3. Multi-client configs — Claude Code, opencode, Cursor, VS Code (examples/)
4. HTTP transport — SQXTREME_TRANSPORT=http → streamable-http en :8765 (vs nativo :8082)
5. 12 features 3 fases — AlgoWizard auto-import, Builder desde frase, Live Watch, Streaming, Data auto-fix, Auto-curator, Ship MT5, Snapshot rollback, Ashare 119, Scheduled Runner, sqx-tools wrapper, Health Dashboard
6. CI matrix — Ubuntu + Windows × Python 3.10/3.11/3.12 — ruff + pytest
7. PyPI OIDC — Trusted Publishing sin token manual (publish.yml)
8. E2E test suite — tests/e2e/ corre contra server vivo en :8765 (22 tests)
9. 26 audit fixes — seguridad hardened (2026-08-30)

Roadmap (post v0.5.0)

Live trading bridge refinements · Multi-workspace orchestrator · Research Agent Loop (moonshot E1).

Install

# One-liner (after PyPI publish)
iwr https://raw.githubusercontent.com/herjarsa/sqxtreme-mcp/main/install.ps1 -UseBasicParsing | iex

# Or from source
git clone https://github.com/herjarsa/sqxtreme-mcp.git
cd sqxtreme-mcp
.\scripts\install.ps1 -FromSource

Native tools (always available, do not require sq-mcp[full])

These 3 tools are registered directly in server.py (always available, graceful-degradation if sq-mcp missing):

sq_algowizard_import

Import a Java AlgoWizard snippet into the SQ X user/extend/<Type>/ directory.

{
  "src_path": "C:\\path\\to\\MyInd.java",
  "target_type": "indicators"  // optional; inferred from package SQ.<Type> if omitted
}

Returns: {ok, dest_path, snippet_name, snippet_type, warnings} or {ok:false, error, error_type} on validation failure.

Required in .java file: package SQ.<Indicators|Signals|Conditions|...>;.

sq_builder_from_phrase

Parse a Spanish trading phrase and prepare a Builder plan (dry_run by default).

{
  "phrase": "Builder para GBPUSD H1 2023.01.01 mean reversion max 5 condiciones",
  "dry_run": true   // default; if false, would patch project.cfx via cfx_clone + cfx_apply_patch
}

Returns: {ok, dry_run, parsed: {symbol, timeframe, date_from, date_to, max_conditions, strategy_type, raw}, warnings, next_steps}.

sq_live_watch

Compute live position summary metrics from a list of position dicts.

{
  "positions": [
    {"price": 50.0, "volume": 100, "side": "long"},
    {"price": 100.0, "volume": 50, "side": "short"}
  ]
}

Returns: {net_exposure, gross, pnl_total, n_long, n_short, warnings}. Validates: price must be finite numeric; volume > 0; side ∈ {"long","short"}.

Delegated tools (from sq-mcp, 482+ tools)

When sq-mcp[full] extra is installed, the server delegates all sq-mcp tool groups (pkgutil.iter_modules + import_module + register(mcp)). Key examples:

For full list: run server and call MCP tools/list (485+ entries).

Spanish prompts (9)

What this gets you (honest scope)

Running an AI agent with SQXtreme + [full] extra: 9 Spanish MCP prompts + 482 sq-mcp runtime tools delegated + 3 native tools + cross-client install + 26 audit security fixes + 22 E2E tests against live server.

NOT included in v0.5.0: a live AI agent actually connected (manual client setup per docs/CLIENTS.md), E2E test with real SQ X engine (file-based tools work, engine-dependent tools require live engine).

Security

• E2E-tested edge cases: phrase injection ('; DROP TABLE), NaN/Inf prices, empty inputs, traversal attempts
• sqxtreme-mcp delegates to upstream sq-mcp which has XXE defense + atomic writes + NaN validation
• 26 audit fixes from v0.4.3 release (security hardened)
• See CHANGELOG.md for full security fix list

License

MIT.