DSH Plugin Certification

io.github.PerryLink由 GitHub 账号 PerryLink 发布v0.2.13更新于 Nov 5, 2026

Read-only MCP server exposing the dsh-plugin-certification registry for DeepSeek Harness plugins.

已验证STDIO仅桌面开发者工具安全与监控

概览

AI 生成的概览

只读 MCP 服务器,让助手查询 DeepSeek Harness 插件在公开 dsh-plugin-certification 注册表中的认证等级。

可以做什么
  • 按 GitHub 所有者与仓库名查询单个插件的认证记录,含字母等级、快照日期与五维证据
  • 列出公开注册表中的全部插件及其仓库、等级与快照日期,并返回规范版本、生成时间、总数与覆盖范围说明
  • 读取认证规范:五个评分维度、A 到 F 的等级量表,以及可覆盖等级的否决规则
适用场景
在挑选 DeepSeek Harness 插件、需要参考独立评级及其证据时使用;也可用于解释已看到的等级,例如某条记录为何被否决。
运行要求
以本地 stdio 进程运行,从 npm 包 dsh-cert-mcp 安装;未声明认证、环境变量或请求头。仅支持桌面端,不提供网页可执行版本。
安装前请注意
仅提供只读查询,不会安装或修改插件。注册表被说明为自愿加入,因此插件未出现在列表中并不代表未认证;等级对应的是快照日期,而非当前状态。

安装

在 SourceWeft 中

  1. 打开 控制台中的 DSH Plugin Certification,将其添加到工作区。
  2. 为需要使用其工具的对话启用该服务。

Desktop only,通过 STDIO。 STDIO 服务会启动本地进程,因此需要 SourceWeft 桌面宿主。

工具

3

get_certification

Get one plugin certification record

Return the certification record for ONE DeepSeek Harness plugin repository, identified by its GitHub owner and repository name: the letter grade, the snapshot date the grade was measured, and the five-dimension evidence behind it. Use this when you already know which plugin you are asking about and need its grade, or the reasoning that produced it. Use list_certified instead to enumerate every certified plugin, and certification_spec instead to learn what the five dimensions, the grade scale and the veto rule mean. Read-only: it reads a registry snapshot bundled with this server. When the public registry is reachable the snapshot may be refreshed opportunistically; otherwise the embedded snapshot is used. It performs no writes, contacts no service other than that optional refresh, and requires no credentials. Two calls with the same arguments return the same record. If the registry holds no entry for that owner/repo, the result is a plain not-found sentence naming the key it looked up and the snapshot date - it never invents, interpolates or approximates a grade.

输入参数repo必填owner必填

list_certified

List every certified plugin

List every plugin in the public dsh-plugin-certification registry, each with its repository, letter grade and snapshot date, plus the registry spec version, its generation timestamp and the total count. The returned `coverage` object states what that count is and is not: the registry is an opt-in subset of the ecosystem (a plugin appears only after it was evaluated), so a short list — the bundled snapshot holds one entry — is not evidence that the ecosystem is uncertified, and a single-entry list supports no comparison across plugins. Read `coverage` before drawing any conclusion from `count`. Use this to discover what is in the registry, or to compare grades across plugins. Use get_certification instead when you already know the plugin and want its full five-dimension evidence; this tool returns the summary row only. Read-only: it reads the embedded registry snapshot (optionally refreshed from the public registry when reachable), takes no parameters, performs no writes and needs no credentials. Repeated calls are identical until the snapshot is refreshed.

无需输入参数。

certification_spec

Explain the certification spec

Return the dsh-plugin-certification specification document, version 1: the five graded dimensions, the grade scale from A to F, and the veto rule that can override a grade. Use this to interpret a grade you have already read - for example to learn why a record was vetoed, or what a dimension actually measures. Use list_certified or get_certification instead when you want a specific plugin's data rather than the rules behind it. Read-only: the document is compiled into the server, takes no parameters, performs no writes and needs no credentials. The same document is returned on every call.

无需输入参数。

版本历史

10
  1. v0.2.13最新Nov 5, 2026
  2. v0.2.12Nov 1, 2026
  3. v0.2.11Oct 31, 2026
  4. v0.2.10Oct 21, 2026
  5. v0.2.9Oct 20, 2026
  6. v0.2.6Oct 10, 2026
  7. v0.2.5Oct 9, 2026
  8. v0.2.4Oct 5, 2026
  9. v0.2.3Oct 5, 2026
  10. v0.2.2Sep 19, 2026

评分

已满足适用检查项的 65%

该评分衡量此收录条目的完整程度,依据注册中心条目、端点与公开来源计算得出。它不是对服务器本身的评价,也不表示服务器安全或当前可用:可连通性是带日期的检查结果,评分也不包含安装量或用户评价。

  • 近 30 天内可连通25 分
  • 已声明认证方式10 分

    请在注册中心条目中声明凭据请求头,或保持端点能够响应探测,以便判定其认证方式。

  • 已列出工具必需15 分
  • 描述必需15 分
  • 图标10 分
  • 文档15 分

    请声明包含 README 的 GitHub 仓库,或在 OAuth 受保护资源元数据中提供 resource_documentation。

  • 许可证10 分

    请在仓库或注册中心条目中声明许可证。