dsh-client-connection-authz
Auth-capable drop-in replacement for the DeepSeek Harness client connection layer.
Install
$ dsh plugin --profile web add \Plugin Overview & Capabilities
AI-assisted organization based on the public repository snapshot. The content must be grounded in source evidence and does not replace compatibility or security verification.
Key Capabilities
- Replaces default client connection via Cordis bundle patch
- Delegates remote request authorization to external authorizer plugins
- Provides multi-tier privilege checks separating loopback/admin endpoints from trusted host calls
- Guards against DNS rebinding and loopback header spoofing
- Maintains compatibility with official Web UI client bundles
Useful For
- Securing remote network access to DeepSeek Harness web profiles
- Integrating external authentication systems like Tailscale, OAuth, or custom identity providers
- Enforcing strict access control over privileged RPC endpoints such as terminal and workspace operations
Who It Fits
- Developers deploying DeepSeek Harness on remote servers or VPNs
- Security engineers requiring identity verification and authorization policies for Harness instances
Documented Limitations
- Cannot be used standalone; requires an accompanying authorization plugin (such as dsh-auth-tailscale) to provide the authorizer
- Tied to specific DeepSeek Harness release contract lines (e.g., 0.1.7-alpha.x)
- Currently packaged from private git repositories unless built from source
DSH Compatibility
Version-specific runtime evidence collected by DSH Plugin. A missing result means we have not tested that combination yet.
Security Signals
Objective signals discovered from package metadata and source inspection. These are not a guarantee that a plugin is safe.
package.json declares 3 runtime, 7 development, 3 peer, and 0 optional dependencies.
package.json declares DSH bundle metadata.
GitHub reports the repository license as MIT.
A root package.json was captured and can be inspected by the registry.
package.json declares a prepare lifecycle script that may run during relevant package installation workflows.
Public GitHub source metadata is available for this registry snapshot.
Source & Registry Notes
Public provenance, Registry classification, and the latest source check for this entry, kept separate from runtime verification.
- Source repository
- sperictao/dsh-client-connection-authz
- Registry source
- GitHub · dsh-plugin topic
- Registry classification
- Plugin
- Source checked
- c2ab111 · 2026-09-24
This project is independently indexed from public source information. DSH Plugin is not affiliated with DeepSeek or the plugin author. Always check the author repository before installation.
Repository Activity
- GitHub stars
- 1GitHub stars
- Forks
- 0
- Open issues
- 0
- Last commit
- 2026-09-22
- Last release
- No release detected
Related DSH Plugins
Ranked by overlapping capabilities, use cases, plugin type, categories, and DSH profile.
Mobile remote access plugin enabling LAN and Cloudflare tunnel pairing via QR code for DeepSeek Harness.
View plugin →Full office suite integration for DeepSeek Harness supporting spreadsheets, docs, slides, bases, and canvases.
View plugin →Local cross-agent memory and session history recall integration for DeepSeek Harness.
View plugin →End-to-end encrypted remote access plugin bundle for DeepSeek Harness across desktop, web, and mobile.
View plugin →