
Dsh Any Agent
Drive DeepSeek Harness (DSH) as a long-lived, resumable coding agent from any MCP client.
- GitHub stars
- 5
- tools
- 15
- transport
- STDIO
- env vars
- 4
- last updated
- Nov 13, 2026
Tools
15 toolsPublic tool metadata for what this MCP can expose to an agent.
dsh_startCreate a conversation: workspace, permission tier, approval policy, reasoning effort (default max), model
Create a conversation: workspace, permission tier, approval policy, reasoning effort (default max), model
No parameter schema in public metadata yet.
dsh_sendHand it a task. Defaults to wait=false: returns a run_id + sentinel_file immediately, the turn runs in the background and the sentinel file notifies you when it's done (recommended).
Hand it a task. Defaults to wait=false: returns a run_id + sentinel_file immediately, the turn runs in the background and the sentinel file notifies you when it's done (recommended).
No parameter schema in public metadata yet.
dsh_listAll conversations with live state: running / idle / detached, elapsed time, current tool, output so far.
All conversations with live state: running / idle / detached, elapsed time, current tool, output so far.
No parameter schema in public metadata yet.
dsh_readCursor-based incremental read of what a running conversation is producing right now.
Cursor-based incremental read of what a running conversation is producing right now.
No parameter schema in public metadata yet.
dsh_getConversation details; with run_id, the final result of that dispatch plus its review ticket.
Conversation details; with run_id, the final result of that dispatch plus its review ticket.
No parameter schema in public metadata yet.
dsh_reviewCaller review. Submit pass / partial / fail for a completed run, with notes and optional findings.
Caller review. Submit pass / partial / fail for a completed run, with notes and optional findings.
No parameter schema in public metadata yet.
dsh_interjectInterject while it's busy: interject = stop and redirect, queue = wait for the current turn, then speak.
Interject while it's busy: interject = stop and redirect, queue = wait for the current turn, then speak.
No parameter schema in public metadata yet.
dsh_takeoverPreempt the write lock, the only way out when another DSH process holds it.
Preempt the write lock, the only way out when another DSH process holds it.
No parameter schema in public metadata yet.
dsh_interruptStop the current turn without sending anything new (the conversation stays healthy).
Stop the current turn without sending anything new (the conversation stays healthy).
No parameter schema in public metadata yet.
dsh_releaseHand the conversation back (frees the write lock so you can open it in your own DSH GUI). Still resumable.
Hand the conversation back (frees the write lock so you can open it in your own DSH GUI). Still resumable.
No parameter schema in public metadata yet.
dsh_approval_decideAdjudicate a pending approval (only when on_approval=ask).
Adjudicate a pending approval (only when on_approval=ask).
No parameter schema in public metadata yet.
dsh_statusLightweight status check (single conversation), including the write-lock holder lock_holder.
Lightweight status check (single conversation), including the write-lock holder lock_holder.
No parameter schema in public metadata yet.
dsh_inboxCross-conversation approval inbox: every pending approval with reason, input and age.
Cross-conversation approval inbox: every pending approval with reason, input and age.
No parameter schema in public metadata yet.
dsh_queueInspect/modify the session queue: list / remove / update / promote.
Inspect/modify the session queue: list / remove / update / promote.
No parameter schema in public metadata yet.
dsh_doctorRead-only health check: DSH version, profile, state/dir writability, orphan locks, sessions and RSS, effective config.
Read-only health check: DSH version, profile, state/dir writability, orphan locks, sessions and RSS, effective config.
No parameter schema in public metadata yet.
Sponsors
Configuration
DSH_BINPath to @deepseek-ai/dsh/lib/bin.js. Leave unset to auto-detect the DeepSeek Harness desktop app, an npm global install, or the npx cache.
DSH_MCP_PERMISSIONdefault: workspace-writeDefault permission tier for dsh_start: read-only, workspace-write, or danger-full-access (setting it as the default allows full access on this machine; asking for it per conversation under another default also needs DSH_MCP_ALLOW_FULL_ACCESS=1).
DSH_MCP_APPROVALdefault: auto-denyMachine-side approval ceiling for sandbox escalation: auto-deny, ask, or auto-allow. The default workspace-write tier denies escalation. Read-only always denies.
DSH_MCP_LANGLanguage of the tool descriptions and server instructions: en or zh. Unset follows the system locale.
Readme
Give any MCP client a coding buddy that sticks around.
Details
- Repository
- github.com/xmtlzzz/dsh-any-agent
- Category
- AI & LLM Tools
- Package
dsh-any-agent- Transport
- STDIO
- Registry
- MCP registry, active