DeepSeek Harness Plugin Hub

Publish and manage complete Harness Profiles. Discover Plugins for your next setup.

Explore

PluginsPresetsDocsNews

Community

Publish a pluginContactReport an issue

Resources

Plugin Hub on GitHubDeepSeek HarnessSystem statusPrivacy notice
© 2026 DeepSeek Harness Plugin HubPowered byPaxTech

Independent and unofficial. Not affiliated with, authorized by, or endorsed by DeepSeek.

Security & Access DSH plugins — Page 15

CATEGORY

Security & Access DSH plugins

Verified manifests and exact versions in this category.

All categoriesAgents & Orchestration1041Memory & Context1301Coding & Developer Tools2800UI & Customization3661Integrations & Communication1911Vision & Media617Search & Research862Security & Access1266Models & Usage1684Productivity & Workflow2242

All plugins

1263 plugins
Av0.2.20
dsh-autogate

Autogate

DeepSeek Harness auto-approval plugin: Adds an Auto mode on top of the workspace-write sandbox—deterministic rules allow or deny, ambiguous operations are adjudicated by the LLM, and dangerous operations are escalated to a human. Preserves the workspace sandbox boundary without widening it to full-a

security-access★ 3↓ 0
Updated 10/16/2026
v0.5.0
@dmh2002/dsh-connect-qoder

Connect Qoder

Integrate Qoder (通义灵码 domestic/international versions) into DeepSeek Harness: PAT multi-account pool, daily check-ins, points readout, and model management.

models-usagesecurity-access★ 3↓ 0
Updated 10/14/2026
Mv0.2.1
dsh-minato-bridge

Minato Bridge

NOT the toolkit - this manifest exists only so the repository can be installed as a plugin by URL. It is an optional READ-ONLY bridge that publishes dsh in-process session/token state as one small JSON snapshot for the standalone DeepSeek Harness Toolkit (dsh-minato). Install the toolkit first: http

integrations-communicationsecurity-accessmodels-usage★ 3↓ 0
Updated 10/14/2026
Pv0.2.2
dsh-plugin-subagent-delete

Plugin Subagent Delete

DeepSeek Harness plugin: ownership-checked delete_subagent / release_subagent / list_subagents tools and host routes that permanently remove subagent sessions and refresh open web clients.

agents-orchestrationsecurity-access★ 3↓ 0
Updated 10/11/2026
Cv1.1.0
dsh-claude-oauth

Claude Oauth

Claude Pro/Max OAuth model provider for DeepSeek Harness with Google/Gmail login in Settings, auto-token refresh, live model discovery, and real-time quota tracking

models-usagesecurity-access★ 3↓ 0
Updated 10/9/2026
Cv0.1.4
@lbryany/dsh-codebuddy

Codebuddy

CodeBuddy OAuth, dynamic models, and reasoning controls for DeepSeek Harness

security-access★ 3↓ 0
Updated 10/8/2026
Pv0.3.1
dsh-polymarket-knowhow

Polymarket Knowhow

DeepSeek Harness plugin: complete Polymarket API coverage — market data tools, authenticated trading tools, WebSocket stream service, and an embedded Polymarket knowhow skill

integrations-communicationsecurity-access★ 3↓ 0
Updated 10/7/2026
Ov0.11.0
dsh-omp-advisor

Omp Advisor

Ward Council — oh-my-pi advisor subsystem ported to DeepSeek Harness: independent reviewer models watch your agent's live transcript, investigate with read-only tools, and advise it. Advisors guide. The ward protects. The model executes.

agents-orchestrationsecurity-access★ 3↓ 0
Updated 9/30/2026
Hv3.2.3
@across2005/harness-self-evolution

Harness Self Evolution

Benchmark-driven self-evolution plugin for DeepSeek Harness: iterate on a frozen benchmark and accept only when strictly better; real execution remains fail-closed until transactional sandbox support.

developer-toolssecurity-access★ 3↓ 0
Updated 9/30/2026
Pv0.5.0
@deepseek-ai/dsh-plugin-vm-sandbox

Plugin Vm Sandbox

OrbStack VM sandbox v0.5.0: Adapted to DeepSeek Harness 0.2.0-rc.2 (client inject migrated from the removed dsh-client-runtime to dsh-client-ui-renderer, DSH peer version gate added, host service inject completed, and session title reading fixed). Retains 45 vm_* tools, interactive terminal, snapsho

developer-toolssecurity-access★ 3↓ 0
Updated 9/29/2026
Cv2.0.0
dsh-capability-toggle-plugin

Capability Toggle Plugin

DSH WebUI capability controls for skills, MCP servers, tools, prompt injections, approvals, and safety guards at session, project, and global levels.

security-access★ 3↓ 0
Updated 9/29/2026
Pv0.2.0
dsh-peer-mcp

Peer Mcp

Let two DeepSeek Harness machines trade work and files over the network while each machine's files stay where they are, gated by a one-time pairing code.

integrations-communicationsecurity-access★ 3↓ 0
Updated 9/24/2026
v0.3.0
dsh-auto-approval

Auto Approval

Automode for DeepSeek Harness: a fourth permission preset that runs on full access with a classifier (LLM or TypeSafe Jev) as the only gate before every tool call

security-access★ 3↓ 0
Updated 9/20/2026
v0.2.1
@drifter-yh/dsh-tool-policy

Tool Policy

Allow, ask, or deny DeepSeek Harness tool calls before execution

security-access★ 3↓ 0
Updated 9/20/2026
Av0.2.1-rc.1
dsh-ai-soul

Ai Soul

Persistent identity layer for DeepSeek Harness

security-access★ 3↓ 0
Updated 9/18/2026
Sv0.3.0
dsh-system-proxy

System Proxy

DSH host plugin — smart outbound HTTP(S) routing: named proxies (http/https/socks4/4a/5/5h), per-host/provider/plugin rules, direct-first fallback with health memory (global fetch + node http/https).

security-access★ 3↓ 0
Updated 9/18/2026
Sv0.2.0
dsh-ssh-servers

Ssh Servers

Human-gated SSH connections for DeepSeek Harness: save server profiles, let the user log in by hand, and give the agent a remote workspace.

security-accessproductivity-workflow★ 3↓ 0
Updated 9/16/2026
Sv0.4.6
dsh-ssh-tunnel

Ssh Tunnel

Multi-host SSH tunnel and SSHManager tool for DeepSeek Harness (project-scoped grants)

security-accessdeveloper-tools★ 3↓ 0
Updated 9/15/2026
Ev0.2.1
@aaronandwork/dsh-evidence-gate

Evidence Gate

Evidence-first conclusion gate for DeepSeek Harness (DSH): 3-tier evidence hierarchy policy, a model tool that verdicts claims (VERIFIED/REFERENCED/UNVERIFIED), durable per-session tool-activity cross-checking (arguments + output anchors, restart-surviving), per-session switch + persisted ledger, an

security-access★ 3↓ 0
Updated 9/12/2026
Ev0.2.0
dsh-evidence-gate

Evidence Gatealt · AaronandWork

Evidence-first conclusion gate for DeepSeek Harness (DSH): 3-tier evidence hierarchy policy, a model tool that verdicts claims (VERIFIED/REFERENCED/UNVERIFIED), durable per-session tool-activity cross-checking (arguments + output anchors, restart-surviving), per-session switch + persisted ledger, an

memory-contextsecurity-access★ 3↓ 0
Updated 9/11/2026
Cv0.3.1
dsh-capability-receipt

Capability Receipt

Content-addressed receipts for skills actually loaded by DeepSeek Harness

security-access★ 3↓ 0
Updated 9/7/2026
Pv0.2.1
dsh-policy-drift-proof

Policy Drift Proof

Content-addressed, value-redacted policy drift evidence for DeepSeek Harness

security-access★ 3↓ 0
Updated 9/7/2026
Rv0.2.1
dsh-recovery-proof

Recovery Proof

Read-only recovery drill evidence for DeepSeek Harness

security-access★ 3↓ 0
Updated 9/7/2026
Av1.1.1
@j0ss077/dsh-always-require-tools-approval

Always Require Tools Approval

Require a one-shot user approval before configured tools execute

security-access★ 3↓ 0
Updated 9/6/2026
Jv0.10.0
dsh-jumpserver

Jumpserver

JumpServer asset lookup for DeepSeek Harness: query assets via conversation using AccessKey/SecretKey signed requests

security-accessintegrations-communication★ 3↓ 0
Updated 9/6/2026
v0.2.0
dsh-mnemos

Mnemos

Cross-session memory with governance, self-evolution and an approval-gated write path for DeepSeek Harness. Heat-ranked recall, environment conventions, forgetting lifecycle, supersession chains, poisoning defense, auto-distillation, and an open measurement ABI.

memory-contextsecurity-access★ 3↓ 0
Updated 9/4/2026
Cv0.1.2
dsh-context-provenance

Context Provenance

Observe-only provenance ledger over public DeepSeek Harness runtime evidence

security-access★ 3↓ 0
Updated 9/3/2026
v0.3.11
dsh-safemode-profile

Safemode Profile

Safemode profile enforcer: force-restores ~/.dsh/profiles/safemode to a clean whitelist (dsh-base + dsh-web-app) on start and continuously guards it against modification, so `dsh --profile safemode` always boots with zero third-party plugins. No build scripts: the bundle row does all work.

security-access★ 3↓ 0
Updated 9/1/2026
Rv0.2.0
dsh-route-resilience

Route Resilience

Multi-route high availability, fault isolation and observability for DeepSeek Harness. Route groups fail over between authorized provider routes on rate limits (429 / Retry-After), transport errors and auth/quota failures, with per-route quarantine (exponential backoff) and disablement.

models-usagesecurity-access★ 3↓ 0
Updated 8/29/2026
Hv0.1.0-rc.5
@deepseek-ai/dsh-host-telegram

Host Telegram

Telegram remote-control surface for dsh sessions: whitelisted chats list, read, prompt, and stop dsh sessions through the host ApiProxy

integrations-communicationsecurity-access★ 3↓ 0
Updated 8/28/2026
← Previous1…1314151617…43Next →
DeepSeek Harness Plugin Hub
ProfilesPluginsCategoriesNewsDocsSign inManage Profiles
ProfilesPluginsCategoriesNewsDocsSign in