dsh.so
EN
English中文
dsh-mcp-workspace-scope avatar

dsh-mcp-workspace-scope

Scopes MCP tool injection per workspace directory in the DeepSeek Harness: a session opened in a project sees only the MCP servers that project needs — removed from the model's tool list and refused at call time. Plus per-session switches in the composer to narrow or widen the session you are in, temporarily.

PluginDeveloperStorageFile
Verification
L5 · Run tested
Passed
Risk
Low
Health
Active
Trust
Gold

What it doesAI

Scopes MCP tool injection per workspace directory in DeepSeek Harness, so each session only sees and calls the MCP servers its project needs.

  • Per-workspace MCP server scoping based on directory
  • Filters model tool list and denies unapproved calls
  • Per-session composer switches to narrow or widen access

AI-generated from the repo README — for reference only.

Installation

dsh plugin --profile web add dsh-mcp-workspace-scope@0.1.1

security scan passed · npm package v0.1.1

Install method: npm · sandbox install verified (L4)

Verification & Compatibility

Static checks (version-independent)
L1 静态
Passed
L2 静态
Passed
L3 静态
Passed

L1–L3 are registry / install-spec static checks — constant across dsh versions.

External credentials (plugin-level): none detected

Per-version runtime verdicts (L4/L5)
dsh 0.1.2-alpha.1currentL5 · verified
Environment
  • • Node.js: v24.14.0
  • • DSH: 0.1.2-alpha.1
Runtime levels
L4 版本
Passed
L5 版本
Passed
Sandbox install verified
L5 · verified · valid for dsh 0.1.2-alpha.1

ID: dsh-mcp-workspace-scope-20260902T003906Z · profile: l5-web-smoke

Issued: 2026-09-02 · expires: 2026-12-01

View checks & evidence
L1 · Found✓ Passed

↳ carried from earlier record dsh-mcp-workspace-scope-20260902T044820Z (l3-fullscan)

Defaulted from L3✓ Passed
defaulted to passed — L3 install spec passed (full-registry L3 sweep policy)
L2 · Structured✓ Passed

↳ carried from earlier record dsh-mcp-workspace-scope-20260902T044820Z (l3-fullscan)

Defaulted from L3✓ Passed
defaulted to passed — L3 install spec passed (full-registry L3 sweep policy)
L3 · Install spec✓ Passed

↳ carried from earlier record dsh-mcp-workspace-scope-20260902T044820Z (l3-fullscan)

Install command parsed✓ Passed
Source: registry verification · Method: install spec parse · Captured 2026-09-02
DSH version declared✓ Passed
Source: registry verification · Method: DSH version declaration · Captured 2026-09-02
L4 · Install tested✓ Passed
Install succeeded✓ Passed
L5 · Run tested✓ Passed

active in loader tree (149 entries)

Sandbox install passed✓ Passed
Web boot ready✓ Passed
Source: DSH runtime · Method: web boot
HTTP endpoint served✓ Passed
Source: DSH runtime · Method: HTTP request
Plugin active in inventory✓ Passed
Source: DSH runtime · Method: plugin inventory query

Author badges

Embed the official badges in your README to showcase security & install-test status:

dsh.so risk
`[![dsh.so risk](https://www.dsh.so/badge/dsh-mcp-workspace-scope.svg)](https://www.dsh.so/artifact/dsh-mcp-workspace-scope/)`
dsh.so install
`[![dsh.so install](https://www.dsh.so/badge/install/dsh-mcp-workspace-scope.svg)](https://www.dsh.so/artifact/dsh-mcp-workspace-scope/)`

Security Report

Automated static scan, not manual review.

DSH.SO VETPASSEDf4762e
Security reviewAutomated review · daily
PASSED

Vet static analysis found no suspicious behavior — verdict is clean.

0 critical·0 high·0 medium·100 score
Version binding
plugin version0.1.1dsh manifest
scanned commitf4762e0f8c1b2026-09-02
latest commitf4762e0f8c1b
vet verdictclean · npmscore 100

Vet is an AST static scan (npm artifact or git source).

Disclaimer: automated static analysis, not a security guarantee. Always review what you install.

Risk details

No critical or warning findings.

Activity

Last commit 2026-08-31 · activity: Active

• Repo created: 2026-09-01

• Stars: ★ 1 · Forks: 0

• Health: Active — committed within last 30 days

Source

GitHub: github.com/felix-lj-ct/dsh-mcp-workspace-scope

Was this page helpful?