ModelsAtlas
Explore
Atlas / MCP servers / perrylink / dsh-mcp-panel

dsh-mcp-panelBLOCK

mcp/perrylink/dsh-mcp-panel
MCP server by perrylink · ai agent · ai agents · cordis · Audited 2026-10-12
⚑ Report / re-scanSource ↗

MCP management console for the official DeepSeek Harness MCP client: /mcp command with health diagnostics and pipeline trial calls, a Settings MCP tab with server CRUD (approval-gated writes, automatic backups) and a tool trial console over the official tool pipeline (Apache-2.0, dsh-plugin).

Verdict
BLOCK
Grade
D
Trust score
69 /100
Exposed tools
18 14r · 4w · 0d
Transport
streamable-http
License
Apache-2.0
Stars
74
01

Overview

From the repository's own README, as read at the audited commit. Badges and raw HTML are left out.

  • 1024 store channel: npm i -g dsh1024 once, then dsh1024 plugin --profile web add dsh-mcp-panel (counts toward the deepseek1024.com install ranking).

[](https://gitee.com/perrylink/dsh-mcp-panel) [](https://dshfind.com/plugins/PerryLink/dsh-mcp-panel?ref=badge) [](https://api.securityscorecards.dev/projects/github.com/PerryLink/dsh-mcp-panel)

The MCP management console for the official DeepSeek Harness MCP client — add, edit, remove, and trial-call MCP servers from a settings page, with honest status, health diagnostics, and safe, reversible profile writes.

Official client = bridge, this plugin = console: read status through the `mcp/status` seam, write only append-only, approval-gated profile patches.

Official repository. This is the only official repository of dsh-mcp-panel, maintained by PerryLink. Same-name repositories under other accounts are not affiliated.

[](LICENSE) [](https://github.com/topics/dsh-plugin) [](https://github.com/PerryLink/dsh-plugin-doctor#verified-徽章) [](https://dsh.market/) [](#) [](https://github.com/PerryLink/dsh-mcp-panel/actions) [![Version](htt

Read from source at commit 274aba2e4bedOBSERVED · 2026-10-12
02

Connect

Built from this server's own package name, version and transport as found in its source — not copied from anyone's documentation, so it cannot drift against a page we do not control.

claude-code
claude mcp add dsh-mcp-panel -- npx -y [email protected]
claude-desktop
{
  "mcpServers": {
    "dsh-mcp-panel": {
      "command": "npx",
      "args": [
        "-y",
        "[email protected]"
      ]
    }
  }
}
03

Exposed tools (18)

14 read · 4 write · 0 destructive.

ToolRiskDescription
Areadd
FetchreadFetch and convert web pages to Markdown.
FilesystemwriteRead and write files through a local filesystem MCP server.
GitreadGit repository operations (status, diff, log, branches).
GitHubreadGitHub issues, PRs, repos, and search.
MemoryreadA knowledge-graph memory store.
PlaywrightreadBrowser automation and page interaction.
Xreadd
list_mcp_resourcesreadList MCP resources
mcpwriteShow MCP server status, tools, health diagnostics, and enable/disable patch suggestions; trial-call a tool through the official pipeline
mcp__a__tread
mcp__demo__echoreadEcho
mcp__foreign__thingreadA tool from another plugin
mcp__github__create_issuewriteCreate an issue
mcp__github__treadd
mcp__stray__tread
mcp__web__searchreadSearch the web
mcp_probewriteRun a one-shot connectivity probe of a configured MCP server (streamable-http or stdio) as a background job.
04

Trust audit

BLOCKgrade D · trust 69/100 Do not install this without reading the findings. The audit found something that could harm you or your machine.

LayerWhat it checksResult
L0Provenance & inventoryPASS
L1Static analysis of the codePASS
L2Instruction surface (what it tells the agent)FAIL
L3Class-specific surfaceWARN
L4Behavioural (sandbox)SKIPPED

What the source does

Filesystem
none-observed
Network
declared (1 observation(s))
Shell
declared (1 observation(s))
Dependencies
not all pinned
Secrets in source
none-found

Findings (13)

HIGHPrompt injection · prompt.override · CWE-94, CWE-1427
README-es.md:241
| **[dsh-defend](https://github.com/PerryLink/dsh-defend)** | Prompt-injection, jailbreak, and secret-leak defense for DeepSeek Harness. | 🧊 CONGELADO — ver el README del repositorio |
Why it matters. asks the agent to drop prior instructions or safety
Fix. remove the instruction
HIGHPrompt injection · prompt.override · CWE-94, CWE-1427
README-hi.md:241
| **[dsh-defend](https://github.com/PerryLink/dsh-defend)** | Prompt-injection, jailbreak, and secret-leak defense for DeepSeek Harness. | 🧊 फ़्रोज़न — रिपॉज़िटरी README देखें |
Why it matters. asks the agent to drop prior instructions or safety
Fix. remove the instruction
HIGHPrompt injection · prompt.override · CWE-94, CWE-1427
README-pt.md:241
| **[dsh-defend](https://github.com/PerryLink/dsh-defend)** | Prompt-injection, jailbreak, and secret-leak defense for DeepSeek Harness. | 🧊 CONGELADO — ver o README do repositório |
Why it matters. asks the agent to drop prior instructions or safety
Fix. remove the instruction
HIGHPrompt injection · prompt.override · CWE-94, CWE-1427
README-zh.md:243
| **[dsh-defend](https://github.com/PerryLink/dsh-defend)** | Prompt-injection, jailbreak, and secret-leak defense for DeepSeek Harness. | 🧊 已冻结 — 见仓库 README |
Why it matters. asks the agent to drop prior instructions or safety
Fix. remove the instruction
HIGHPrompt injection · prompt.override · CWE-94, CWE-1427
README.md:251
| **[dsh-defend](https://github.com/PerryLink/dsh-defend)** | Prompt-injection, jailbreak, and secret-leak defense for DeepSeek Harness. | 🧊 FROZEN — see the repo README |
Why it matters. asks the agent to drop prior instructions or safety
Fix. remove the instruction
MEDIUMAuth / authz · mcp.remote_no_auth · CWE-287, CWE-862
streamable-http
Why it matters. a network transport with no auth environment variable found
Fix. require a token
LOWNetwork egress · net.raw_ip · CWE-200, CWE-319
tests/probe-server.spec.ts:47
baseUrl = `http://127.0.0.1:${address.port}`
LOWSupply chain · supply.unpinned · CWE-829, CWE-1357
package.json
tsdown, typescript, zod, @deepseek-ai/cordis, @deepseek-ai/cordis-plugin-include, @deepseek-ai/cordis-plugin-loader, @deepseek-ai/schemastery, @types/node
Why it matters. 10 dependency range(s) float
Fix. pin exact versions or ship a lockfile
LOWPrompt injection · prompt.transfer_instruction · CWE-94, CWE-1427
README-es.md:268
| **[dsh-session-sync](https://github.com/PerryLink/dsh-session-sync)** | Cross-device session sync for DeepSeek Harness — a dedicated git mirror of your session store. | |
Why it matters. an instruction to move sensitive data to an outside destination
Fix. remove; a skill never needs the user's secrets off the machine
LOWPrompt injection · prompt.transfer_instruction · CWE-94, CWE-1427
README-hi.md:268
| **[dsh-session-sync](https://github.com/PerryLink/dsh-session-sync)** | Cross-device session sync for DeepSeek Harness — a dedicated git mirror of your session store. | |
Why it matters. an instruction to move sensitive data to an outside destination
Fix. remove; a skill never needs the user's secrets off the machine
LOWPrompt injection · prompt.transfer_instruction · CWE-94, CWE-1427
README-pt.md:268
| **[dsh-session-sync](https://github.com/PerryLink/dsh-session-sync)** | Cross-device session sync for DeepSeek Harness — a dedicated git mirror of your session store. | |
Why it matters. an instruction to move sensitive data to an outside destination
Fix. remove; a skill never needs the user's secrets off the machine
LOWPrompt injection · prompt.transfer_instruction · CWE-94, CWE-1427
README-zh.md:270
| **[dsh-session-sync](https://github.com/PerryLink/dsh-session-sync)** | Cross-device session sync for DeepSeek Harness — a dedicated git mirror of your session store. | |
Why it matters. an instruction to move sensitive data to an outside destination
Fix. remove; a skill never needs the user's secrets off the machine
LOWPrompt injection · prompt.transfer_instruction · CWE-94, CWE-1427
README.md:278
| **[dsh-session-sync](https://github.com/PerryLink/dsh-session-sync)** | Cross-device session sync for DeepSeek Harness — a dedicated git mirror of your session store. | |
Why it matters. an instruction to move sensitive data to an outside destination
Fix. remove; a skill never needs the user's secrets off the machine

Gates applied: instruction_override, no_behavioural_pass.

Audited 2026-10-12 · audit v0.4.1 · source sha 274aba2e4bedfull audit observations/trust-audit/mcp-server/perrylink__dsh-mcp-panel.json · Report an issue / request a re-scan
05

Audit history

Every audit this server has had. A grade with a past is a grade somebody is still checking.

DateSourceVerdictGradeScoreChange
2026-10-12274aba2e4bedBLOCKD69first audit
06

Questions

What is the dsh-mcp-panel MCP server?

MCP management console for the official DeepSeek Harness MCP client: /mcp command with health diagnostics and pipeline trial calls, a Settings MCP tab with server CRUD (approval-gated writes, automatic backups) and a tool trial console over the official tool pipeline (Apache-2.0, dsh-plugin).

What tools does dsh-mcp-panel expose?

18 in total: 14 read-only, 4 that write, and 0 that can delete or overwrite. Every one is listed on this page with its risk.

Is dsh-mcp-panel safe to connect to an agent?

No — not without reading the findings first. The audit graded it D (69/100) and found 5 critical or high issues in the source. Each one is listed on this page with the file and line it is on.

What credentials does dsh-mcp-panel need?

No credential environment variables were found in its source, so it appears to need none.

How does dsh-mcp-panel run?

It speaks streamable-http, so it runs as a service you connect to over the network. It is published on npm as dsh-mcp-panel at 0.6.24.

How current is this page?

The grade is for one exact copy of the source (274aba2e4bed), read on 2026-10-12. The repository is watched and re-audited when it changes.

Advertisement