mt5api 0.0.4__tar.gz → 0.2.0__tar.gz

{mt5api-0.0.4 → mt5api-0.2.0}/.agents/skills/local-qa/SKILL.md

@@ -1,7 +1,7 @@
 ---
 name: local-qa
 description: Run local QA including formatting, linting, and testing for the repository. Use whenever any file has been updated.
-disable-model-invocation: true
+disable-model-invocation: false
 ---
 
 # Local QA (format, lint, and test)

{mt5api-0.0.4 → mt5api-0.2.0}/.agents/skills/local-qa/scripts/qa.sh

@@ -10,7 +10,7 @@ uv run pyright .
 uv run pytest
 
 # Markdown
-npx prettier --write './**/*.md'
+npx -y prettier --write './**/*.md'
 
 # GitHub Actions
 case "${OSTYPE}" in

{mt5api-0.0.4 → mt5api-0.2.0}/.agents/skills/mt5api/SKILL.md

@@ -3,8 +3,8 @@ name: mt5api
 description: >-
   Query the MT5 API for account info, terminal status, health checks, symbol
   data, market data (OHLCV rates, ticks, market depth), open positions, pending
-  orders, and trade history. Use when the user wants to interact with any mt5api
-  endpoint.
+  orders, trade history, and reconnecting the MT5 terminal with new
+  credentials. Use when the user wants to interact with any mt5api endpoint.
 allowed-tools: Bash
 ---
 
@@ -30,6 +30,16 @@ if [ -n "${MT5API_SECRET_KEY:-}" ]; then
 fi
 ```
 
+Login credentials for `/connection/login` are read from the environment so
+the password is never hard-coded in a command:
+
+| Variable          | Description                                | Required for login |
+| ----------------- | ------------------------------------------ | ------------------ |
+| `MT5API_LOGIN`    | Trading account login (integer)            | yes                |
+| `MT5API_PASSWORD` | Trading account password                   | yes                |
+| `MT5API_SERVER`   | Trading server name (e.g., `Broker-Demo`)  | yes                |
+| `MT5API_TIMEOUT`  | Connection timeout in milliseconds (`> 0`) | no                 |
+
 ## Response Formats
 
 All endpoints (except `/health`) return JSON by default. Request Parquet with
@@ -44,6 +54,11 @@ All endpoints (except `/health`) return JSON by default. Request Parquet with
   symbol or skipping DOM data.
 - Empty arrays from `/positions`, `/orders`, `/history/orders`, or
   `/history/deals` are valid results.
+- `/connection/login` reconnects the shared MT5 client to a different account.
+  It shuts down the current connection and releases any active market-book
+  subscriptions before logging in. Never echo the password back to the user
+  and do not log it; the response only confirms `login`, `server`, `timeout`,
+  and `connected`.
 
 ---
 
@@ -77,6 +92,59 @@ curl -s "${AUTH_HEADER[@]}" \
 
 ---
 
+## Connection
+
+### Reconnect to MT5
+
+Shut down the current MT5 client and reconnect with new credentials. Active
+market-book subscriptions are released first. The call is serialized so
+concurrent reconnect attempts do not race. The password is sent only in the
+request body and is never echoed in the response.
+
+```bash
+# Build JSON body from env vars; include timeout only when set
+LOGIN_BODY=$(python3 -c "
+import json, os, sys
+body = {
+    'login': int(os.environ['MT5API_LOGIN']),
+    'password': os.environ['MT5API_PASSWORD'],
+    'server': os.environ['MT5API_SERVER'],
+}
+t = os.environ.get('MT5API_TIMEOUT')
+if t:
+    body['timeout'] = int(t)
+print(json.dumps(body))
+")
+curl -s -X POST "${AUTH_HEADER[@]}" \
+  -H 'Content-Type: application/json' \
+  -d "${LOGIN_BODY}" \
+  "${MT5API_URL}/connection/login" | python -m json.tool
+```
+
+Request body:
+
+| Field    | Type   | Required | Description                                |
+| -------- | ------ | -------- | ------------------------------------------ |
+| login    | int    | yes      | Trading account login (positive integer)   |
+| password | string | yes      | Trading account password (never echoed)    |
+| server   | string | yes      | Trading server name (e.g., `Broker-Demo`)  |
+| timeout  | int    | no       | Connection timeout in milliseconds (`> 0`) |
+
+Successful response (`200`):
+
+| Field     | Type   | Description                                  |
+| --------- | ------ | -------------------------------------------- |
+| login     | int    | Login that was used to connect               |
+| server    | string | Trading server that was connected to         |
+| timeout   | int?   | Timeout in milliseconds if one was specified |
+| connected | bool   | `true` when the new connection succeeded     |
+
+On failure, MT5 errors surface as `503 Service Unavailable` with an RFC 7807
+problem-details body. Never include the supplied password in any summary or
+diagnostic you return to the user.
+
+---
+
 ## Account & Terminal
 
 ### Account Info
@@ -323,3 +391,6 @@ Either `(date_from AND date_to)` or `(ticket OR position)` must be provided.
    running or reachable.
 9. For historical queries, remind the user that either a date range or a
    ticket/position filter is required.
+10. For `/connection/login`, always send the password in the POST body and
+    never repeat it in any reply or log message. If the user asks you to
+    reconnect, confirm the target `login`/`server` before sending the request.

{mt5api-0.0.4 → mt5api-0.2.0}/.github/workflows/ci.yml

@@ -19,7 +19,6 @@ on:
         options:
           - lint-and-test
           - docs-deploy
-          - release
         description: Choose the workflow to run
         default: lint-and-test
 permissions:
@@ -54,10 +53,7 @@ jobs:
   python-docs-deploy:
     if: >
       github.event_name == 'push'
-      || (
-        github.event_name == 'workflow_dispatch'
-        && (inputs.workflow == 'docs-deploy' || inputs.workflow == 'release')
-      )
+      || (github.event_name == 'workflow_dispatch' && inputs.workflow == 'docs-deploy')
     permissions:
       contents: write
     uses: dceoy/gh-actions-for-devops/.github/workflows/python-package-mkdocs-gh-deploy.yml@main  # zizmor: ignore[unpinned-uses]
@@ -66,23 +62,6 @@ jobs:
       runs-on: ubuntu-slim
     secrets:
       GH_TOKEN: ${{ secrets.GITHUB_TOKEN }}
-  python-package-release:
-    if: >
-      github.event_name == 'push'
-      || (
-        github.event_name == 'workflow_dispatch'
-        && (inputs.workflow == 'release' || inputs.workflow == 'lint-and-test')
-      )
-    permissions:
-      contents: write
-      id-token: write
-    uses: dceoy/gh-actions-for-devops/.github/workflows/python-package-release-on-pypi-and-github.yml@main  # zizmor: ignore[unpinned-uses]
-    with:
-      package-path: .
-      create-releases: ${{ github.event_name == 'workflow_dispatch' && inputs.workflow == 'release' }}
-    secrets:
-      PYPI_API_TOKEN: ${{ secrets.PYPI_API_TOKEN }}
-      GH_TOKEN: ${{ secrets.GITHUB_TOKEN }}
   dependabot-auto-merge:
     if: >
       github.event_name == 'pull_request' && github.actor == 'dependabot[bot]'

mt5api-0.2.0/.github/workflows/release.yml

@@ -0,0 +1,44 @@
+---
+name: Release
+on:
+  workflow_dispatch:
+permissions:
+  contents: read
+defaults:
+  run:
+    shell: bash -euo pipefail {0}
+    working-directory: .
+jobs:
+  build-and-release:
+    permissions:
+      contents: write
+      id-token: write
+    uses: dceoy/gh-actions-for-devops/.github/workflows/python-package-release-on-pypi-and-github.yml@main  # zizmor: ignore[unpinned-uses]
+    with:
+      package-path: .
+      create-github-release: true
+      publish-to-pypi: false
+    secrets:
+      GH_TOKEN: ${{ secrets.GITHUB_TOKEN }}
+  publish-to-pypi:
+    name: Publish the Python 🐍 distribution 📦 to PyPI
+    if: >
+      startsWith(github.ref, 'refs/tags/')
+    needs:
+      - build-and-release
+    runs-on: ubuntu-latest
+    environment:
+      name: pypi
+      url: https://pypi.org/p/${{ needs.build-and-release.outputs.project-name }}
+    permissions:
+      id-token: write  # IMPORTANT: mandatory for trusted publishing
+    steps:
+      - name: Download all the dists
+        uses: actions/download-artifact@3e5f45b2cfb9172054b4087a40e8e0b5a5461e7c  # v8.0.1
+        with:
+          name: ${{ needs.build-and-release.outputs.distribution-artifact-name }}
+          path: dist/
+      - name: Publish distribution 📦 to PyPI
+        uses: pypa/gh-action-pypi-publish@cef221092ed1bacb1cc03d23a2d87d1d172e277b  # v1.14.0
+        with:
+          verbose: true

{mt5api-0.0.4 → mt5api-0.2.0}/AGENTS.md

@@ -31,7 +31,7 @@
 ### Package Structure
 
 - `mt5api/`: Main FastAPI package.
-  - `main.py`: App wiring, lifespan handling, middleware, CORS, and router registration.
+  - `main.py`: App wiring, lifespan handling, middleware, and router registration.
   - `__main__.py`: CLI entry point for launching the API from environment-backed configuration.
   - `config.py`: Environment-backed configuration normalization and validation.
   - `auth.py`: Optional API key authentication helpers.
@@ -50,6 +50,8 @@
 - Comprehensive linting with 35+ rule categories (ruff)
 - Test coverage tracking with 100% (pytest-cov)
 - Parametrized tests for input/result matrices using `pytest.mark.parametrize` (pytest)
+- Test doubles (mocks, stubs) using `pytest_mock` for external dependencies (pytest-mock)
+- Pydantic models for data validation and configuration
 
 ## Documentation Workflow
 
@@ -66,7 +68,7 @@
 ## Security & Configuration Tips
 
 - Do not commit real MT5 credentials or API keys.
-- Configure `MT5API_SECRET_KEY`, `MT5API_RATE_LIMIT`, `MT5API_CORS_ORIGINS`, `MT5API_ROUTER_PREFIX`, and `MT5API_LOG_LEVEL` through environment variables.
+- Configure `MT5API_SECRET_KEY`, `MT5API_ROUTER_PREFIX`, and `MT5API_LOG_LEVEL` through environment variables.
 - Keep runtime configuration in the environment instead of hardcoding deployment values.
 - Authentication mode is fixed at process startup; cover both authenticated and unauthenticated behavior when changing auth-related code.
 

{mt5api-0.0.4 → mt5api-0.2.0}/PKG-INFO

@@ -1,6 +1,6 @@
 Metadata-Version: 2.4
 Name: mt5api
-Version: 0.0.4
+Version: 0.2.0
 Summary: MetaTrader 5 REST API
 Project-URL: Repository, https://github.com/dceoy/mt5api.git
 Author-email: dceoy <dceoy@users.noreply.github.com>
@@ -24,7 +24,6 @@ Requires-Dist: pdmt5>=0.2.1
 Requires-Dist: pyarrow>=18.0.0
 Requires-Dist: python-jose[cryptography]>=3.3.0
 Requires-Dist: python-multipart>=0.0.9
-Requires-Dist: slowapi>=0.1.9
 Requires-Dist: uvicorn[standard]>=0.32.0
 Description-Content-Type: text/markdown
 
@@ -36,8 +35,8 @@ MetaTrader 5 REST API
 
 mt5api exposes MT5 market data, account info, trading history, and trading
 operations over HTTP. It uses the [`pdmt5`](https://github.com/dceoy/pdmt5)
-client internally and adds optional API-key auth, rate limiting, and
-JSON/Parquet response formatting.
+client internally and adds optional API-key auth and JSON/Parquet response
+formatting.
 
 The API server must run on Windows. The `MetaTrader5` Python package used by
 `pdmt5` is supported only on Windows, so you must host `mt5api` on a Windows
@@ -52,7 +51,7 @@ graph TB
 
     subgraph "Windows Host"
         subgraph "FastAPI Application"
-            Middleware["Middleware Stack<br/>CORS · Logging · Error Handler · Rate Limiter"]
+            Middleware["Middleware Stack<br/>Logging · Error Handler"]
             Routers["Routers<br/>health · symbols · market · account · history · calc · trading"]
             Auth["API Key Security Dependency<br/>Security(api_key_header) · verify_api_key"]
             Deps["FastAPI Dependencies<br/>MT5 Client Singleton · Format Negotiation"]
@@ -75,8 +74,8 @@ graph TB
 - REST endpoints for symbols, market data, account info, orders, history,
   calculations, and trading operations
 - JSON and Apache Parquet responses (content negotiation)
-- Optional API key authentication with per-minute rate limiting
-- Structured JSON logging and configurable CORS
+- Optional API key authentication
+- Structured JSON logging
 - OpenAPI/Swagger docs built into the API
 
 ## Requirements
@@ -90,6 +89,20 @@ graph TB
 
 Install and run the API on the Windows machine where MetaTrader 5 is installed.
 
+Install the latest release from PyPI:
+
+```console
+pip install mt5api
+```
+
+Or, when managing the project with `uv`, add it as a dependency:
+
+```console
+uv add mt5api
+```
+
+Alternatively, install from source:
+
 ```powershell
 git clone https://github.com/dceoy/mt5api.git
 cd mt5api
@@ -98,12 +111,24 @@ uv sync
 
 ## Running the API on Windows
 
+After installing from PyPI:
+
 ```powershell
 $env:MT5API_SECRET_KEY = "your-secret-api-key"  # Optional: omit to disable auth
 $env:MT5API_ROUTER_PREFIX = "/api/v1"     # Optional: omit for root-level routes
-uv run uvicorn mt5api.main:app --host 0.0.0.0 --port 8000
+python -m mt5api
 ```
 
+`python -m mt5api` reads `MT5API_HOST`, `MT5API_PORT`, and `MT5API_LOG_LEVEL`
+from the environment. You can also invoke `uvicorn` directly:
+
+```powershell
+uvicorn mt5api.main:app --host 0.0.0.0 --port 8000
+```
+
+If you cloned the source tree, prepend `uv run` to either command (for example,
+`uv run uvicorn mt5api.main:app --host 0.0.0.0 --port 8000`).
+
 Docs:
 
 - Swagger UI: `http://localhost:8000/docs`

{mt5api-0.0.4 → mt5api-0.2.0}/README.md

@@ -6,8 +6,8 @@ MetaTrader 5 REST API
 
 mt5api exposes MT5 market data, account info, trading history, and trading
 operations over HTTP. It uses the [`pdmt5`](https://github.com/dceoy/pdmt5)
-client internally and adds optional API-key auth, rate limiting, and
-JSON/Parquet response formatting.
+client internally and adds optional API-key auth and JSON/Parquet response
+formatting.
 
 The API server must run on Windows. The `MetaTrader5` Python package used by
 `pdmt5` is supported only on Windows, so you must host `mt5api` on a Windows
@@ -22,7 +22,7 @@ graph TB
 
     subgraph "Windows Host"
         subgraph "FastAPI Application"
-            Middleware["Middleware Stack<br/>CORS · Logging · Error Handler · Rate Limiter"]
+            Middleware["Middleware Stack<br/>Logging · Error Handler"]
             Routers["Routers<br/>health · symbols · market · account · history · calc · trading"]
             Auth["API Key Security Dependency<br/>Security(api_key_header) · verify_api_key"]
             Deps["FastAPI Dependencies<br/>MT5 Client Singleton · Format Negotiation"]
@@ -45,8 +45,8 @@ graph TB
 - REST endpoints for symbols, market data, account info, orders, history,
   calculations, and trading operations
 - JSON and Apache Parquet responses (content negotiation)
-- Optional API key authentication with per-minute rate limiting
-- Structured JSON logging and configurable CORS
+- Optional API key authentication
+- Structured JSON logging
 - OpenAPI/Swagger docs built into the API
 
 ## Requirements
@@ -60,6 +60,20 @@ graph TB
 
 Install and run the API on the Windows machine where MetaTrader 5 is installed.
 
+Install the latest release from PyPI:
+
+```console
+pip install mt5api
+```
+
+Or, when managing the project with `uv`, add it as a dependency:
+
+```console
+uv add mt5api
+```
+
+Alternatively, install from source:
+
 ```powershell
 git clone https://github.com/dceoy/mt5api.git
 cd mt5api
@@ -68,12 +82,24 @@ uv sync
 
 ## Running the API on Windows
 
+After installing from PyPI:
+
 ```powershell
 $env:MT5API_SECRET_KEY = "your-secret-api-key"  # Optional: omit to disable auth
 $env:MT5API_ROUTER_PREFIX = "/api/v1"     # Optional: omit for root-level routes
-uv run uvicorn mt5api.main:app --host 0.0.0.0 --port 8000
+python -m mt5api
 ```
 
+`python -m mt5api` reads `MT5API_HOST`, `MT5API_PORT`, and `MT5API_LOG_LEVEL`
+from the environment. You can also invoke `uvicorn` directly:
+
+```powershell
+uvicorn mt5api.main:app --host 0.0.0.0 --port 8000
+```
+
+If you cloned the source tree, prepend `uv run` to either command (for example,
+`uv run uvicorn mt5api.main:app --host 0.0.0.0 --port 8000`).
+
 Docs:
 
 - Swagger UI: `http://localhost:8000/docs`

{mt5api-0.0.4 → mt5api-0.2.0}/docs/api/deployment.md

@@ -36,9 +36,7 @@ nssm install mt5api
 # Optional: set MT5API_SECRET_KEY only when you want to require X-API-Key headers.
 MT5API_SECRET_KEY=your-secret-api-key
 MT5API_LOG_LEVEL=INFO
-MT5API_RATE_LIMIT=100
 MT5API_MAX_MARKET_BOOK_SUBSCRIPTIONS=100
-MT5API_CORS_ORIGINS=*
 MT5API_ROUTER_PREFIX=/api/v1
 ```
 

{mt5api-0.0.4 → mt5api-0.2.0}/docs/api/rest-api.md

@@ -30,9 +30,7 @@ Set the optional API key and other limits via environment variables:
 ```powershell
 $env:MT5API_SECRET_KEY = "your-secret-api-key"  # Optional: omit to disable auth
 $env:MT5API_LOG_LEVEL = "INFO"
-$env:MT5API_RATE_LIMIT = "100"
 $env:MT5API_MAX_MARKET_BOOK_SUBSCRIPTIONS = "100"
-$env:MT5API_CORS_ORIGINS = "*"
 $env:MT5API_ROUTER_PREFIX = "/api/v1"     # Optional: omit for root-level routes
 ```
 
@@ -70,10 +68,7 @@ disabled and those endpoints are accessible without authorization.
 curl -H "X-API-Key: your-secret-api-key" "http://windows-host:8000/symbols"
 ```
 
-## Rate Limiting
-
-Rate limiting uses `slowapi` with a default limit of `100/minute`. Set
-`MT5API_RATE_LIMIT` to an integer for a different per-minute cap.
+## Subscription Limits
 
 Active market-book subscriptions are capped at `100` symbols by default. Set
 `MT5API_MAX_MARKET_BOOK_SUBSCRIPTIONS` to a positive integer to adjust that
@@ -121,9 +116,9 @@ If `MT5API_ROUTER_PREFIX` is configured, prepend it to each API route below.
 - `GET /rates/range` (`symbol`, `timeframe`, `date_from`, `date_to`, `format`)
 - `GET /ticks/from` (`symbol`, `date_from`, `count`, `flags`, `format`)
 - `GET /ticks/range` (`symbol`, `date_from`, `date_to`, `flags`, `format`)
-- `GET /market-book/{symbol}` (`format`) — Market depth (DOM)
-- `POST /market-book/{symbol}/subscribe` — Subscribe to DOM events
-- `POST /market-book/{symbol}/unsubscribe` — Unsubscribe from DOM events
+- `GET /market-book/{symbol}` (`format`) — Market depth (DOM) _(experimental)_
+- `POST /market-book/{symbol}/subscribe` — Subscribe to DOM events _(experimental)_
+- `POST /market-book/{symbol}/unsubscribe` — Unsubscribe from DOM events _(experimental)_
 
 ### Calculations
 
@@ -167,6 +162,14 @@ structure](https://www.mql5.com/en/docs/constants/structures/mqltraderequest),
 with typed validation for core fields such as `action`, `symbol`, `volume`,
 `type`, and `price`.
 
+### Connection
+
+- `POST /connection/login` (body: `{"login": ..., "password": "...",
+"server": "...", "timeout": ...}`) — Reconnect the MT5 terminal with the
+  supplied credentials. Any active market-book subscriptions are released and
+  the previous MT5 client is shut down before the new connection is
+  established. The supplied password is never echoed in responses or logs.
+
 ## Response Formatter Utilities
 
 If you are extending the API with custom endpoints, use the formatter helpers
@@ -296,6 +299,14 @@ curl -X POST -H "X-API-Key: your-secret-api-key" -H "Content-Type: application/j
   "http://windows-host:8000/order/check"
 ```
 
+### Reconnect to MT5
+
+```console
+curl -X POST -H "X-API-Key: your-secret-api-key" -H "Content-Type: application/json" \
+  -d '{"login": 12345678, "password": "s3cret", "server": "MetaQuotes-Demo", "timeout": 60000}' \
+  "http://windows-host:8000/connection/login"
+```
+
 ## Error Responses
 
 Errors follow RFC 7807 Problem Details:
@@ -315,9 +326,8 @@ Errors follow RFC 7807 Problem Details:
 Minimum security posture for deployments:
 
 - Set `MT5API_SECRET_KEY` to enable API key authentication when needed
-- Rate limiting enabled (`MT5API_RATE_LIMIT`)
+- Configure rate limiting at the reverse proxy or API gateway level
 - Run behind HTTPS in production
-- Restrict CORS origins (`MT5API_CORS_ORIGINS`) for public deployments
 - Restrict access to operational endpoints (`/order/check`,
   `/symbols/{symbol}/select`, `/market-book/{symbol}/subscribe`,
   `/market-book/{symbol}/unsubscribe`) to trusted clients only

{mt5api-0.0.4 → mt5api-0.2.0}/docs/index.md

@@ -7,7 +7,7 @@ trading operations.
 
 mt5api exposes MT5 data and trading operations over HTTP using FastAPI. It
 relies on the underlying MT5 client library for connectivity and adds optional
-authentication, rate limiting, and response formatting suitable for analytics
+authentication and response formatting suitable for analytics
 workflows.
 
 The API server must run on Windows because the `MetaTrader5` Python package is
@@ -19,8 +19,8 @@ logged in. API clients can connect from any operating system.
 - REST endpoints for symbols, market data, account info, orders, history,
   calculations, and trading operations
 - JSON and Apache Parquet responses
-- Optional API key authentication and rate limiting
-- Structured JSON logging and configurable CORS
+- Optional API key authentication
+- Structured JSON logging
 - OpenAPI/Swagger docs built in
 
 ## Requirements

{mt5api-0.0.4 → mt5api-0.2.0}/mt5api/config.py

@@ -6,18 +6,14 @@ import os
 import re
 
 from .constants import (
-    DEFAULT_API_CORS_ORIGINS,
     DEFAULT_API_HOST,
     DEFAULT_API_LOG_LEVEL,
-    DEFAULT_API_RATE_LIMIT,
     DEFAULT_API_ROUTER_PREFIX,
     DEFAULT_MAX_MARKET_BOOK_SUBSCRIPTIONS,
-    ENV_MT5API_CORS_ORIGINS,
     ENV_MT5API_HOST,
     ENV_MT5API_LOG_LEVEL,
     ENV_MT5API_MAX_MARKET_BOOK_SUBSCRIPTIONS,
     ENV_MT5API_PORT,
-    ENV_MT5API_RATE_LIMIT,
     ENV_MT5API_ROUTER_PREFIX,
     ENV_MT5API_SECRET_KEY,
 )
@@ -81,24 +77,6 @@ def get_configured_api_log_level() -> str:
     return os.getenv(ENV_MT5API_LOG_LEVEL, DEFAULT_API_LOG_LEVEL)
 
 
-def get_configured_api_rate_limit() -> str:
-    """Get the configured API rate limit string.
-
-    Returns:
-        Raw per-minute rate-limit string from configuration.
-    """
-    return os.getenv(ENV_MT5API_RATE_LIMIT, str(DEFAULT_API_RATE_LIMIT))
-
-
-def get_configured_api_cors_origins() -> str:
-    """Get the configured CORS origins string.
-
-    Returns:
-        Raw CORS origins configuration string.
-    """
-    return os.getenv(ENV_MT5API_CORS_ORIGINS, DEFAULT_API_CORS_ORIGINS)
-
-
 def get_configured_api_router_prefix() -> str:
     """Get the configured API router prefix.
 

{mt5api-0.0.4 → mt5api-0.2.0}/mt5api/constants.py

@@ -20,8 +20,6 @@ MAX_MARKET_BOOK_SUBSCRIPTIONS_STATE_KEY = "max_market_book_subscriptions"
 ENV_MT5API_HOST = "MT5API_HOST"
 ENV_MT5API_PORT = "MT5API_PORT"
 ENV_MT5API_LOG_LEVEL = "MT5API_LOG_LEVEL"
-ENV_MT5API_RATE_LIMIT = "MT5API_RATE_LIMIT"
-ENV_MT5API_CORS_ORIGINS = "MT5API_CORS_ORIGINS"
 ENV_MT5API_ROUTER_PREFIX = "MT5API_ROUTER_PREFIX"
 ENV_MT5API_MAX_MARKET_BOOK_SUBSCRIPTIONS = "MT5API_MAX_MARKET_BOOK_SUBSCRIPTIONS"
 ENV_MT5API_SECRET_KEY = "MT5API_SECRET_KEY"  # noqa: S105
@@ -29,8 +27,6 @@ ENV_MT5API_SECRET_KEY = "MT5API_SECRET_KEY"  # noqa: S105
 DEFAULT_API_HOST = "0.0.0.0"  # noqa: S104
 DEFAULT_API_PORT = 8000
 DEFAULT_API_LOG_LEVEL = "INFO"
-DEFAULT_API_RATE_LIMIT = 100
-DEFAULT_API_CORS_ORIGINS = "*"
 DEFAULT_API_ROUTER_PREFIX = ""
 DEFAULT_MAX_MARKET_BOOK_SUBSCRIPTIONS = 100
 MAX_API_PORT = 65535