DSH Plugin Certification

io.github.PerryLink由 GitHub 帳號 PerryLink 發布v0.2.13更新於 Nov 5, 2026

Read-only MCP server exposing the dsh-plugin-certification registry for DeepSeek Harness plugins.

已驗證STDIO僅桌面開發者工具安全與監控

概覽

AI 產生的概覽

唯讀 MCP 伺服器,讓助理查詢 DeepSeek Harness 外掛在公開 dsh-plugin-certification 登錄表中的認證等級。

可以做什麼
  • 依 GitHub 擁有者與儲存庫名稱查詢單一外掛的認證紀錄,包含字母等級、快照日期與五個面向的證據
  • 列出公開登錄表中的所有外掛及其儲存庫、等級與快照日期,並回傳規格版本、產生時間、總數與涵蓋範圍說明
  • 讀取認證規格:五個評分面向、A 到 F 的等級量表,以及可覆寫等級的否決規則
適用情境
在挑選 DeepSeek Harness 外掛、需要參考獨立評級及其證據時使用;也適合用來解讀已看到的等級,例如某筆紀錄為何被否決。
執行需求
以本機 stdio 程序執行,從 npm 套件 dsh-cert-mcp 安裝;未宣告驗證、環境變數或標頭。僅支援桌面端,不提供網頁可執行版本。
安裝前請注意
僅提供唯讀查詢,不會安裝或修改外掛。登錄表被說明為自願加入,因此外掛未出現在清單中不代表未認證;等級對應的是快照日期,而非目前狀態。

安裝

在 SourceWeft 中

  1. 開啟 儀表板中的 DSH Plugin Certification,將其新增到工作區。
  2. 為需要使用其工具的對話啟用該服務。

Desktop only,透過 STDIO。 STDIO 服務會啟動本機處理程序,因此需要 SourceWeft 桌面主機。

工具

3

get_certification

Get one plugin certification record

Return the certification record for ONE DeepSeek Harness plugin repository, identified by its GitHub owner and repository name: the letter grade, the snapshot date the grade was measured, and the five-dimension evidence behind it. Use this when you already know which plugin you are asking about and need its grade, or the reasoning that produced it. Use list_certified instead to enumerate every certified plugin, and certification_spec instead to learn what the five dimensions, the grade scale and the veto rule mean. Read-only: it reads a registry snapshot bundled with this server. When the public registry is reachable the snapshot may be refreshed opportunistically; otherwise the embedded snapshot is used. It performs no writes, contacts no service other than that optional refresh, and requires no credentials. Two calls with the same arguments return the same record. If the registry holds no entry for that owner/repo, the result is a plain not-found sentence naming the key it looked up and the snapshot date - it never invents, interpolates or approximates a grade.

輸入參數repo必填owner必填

list_certified

List every certified plugin

List every plugin in the public dsh-plugin-certification registry, each with its repository, letter grade and snapshot date, plus the registry spec version, its generation timestamp and the total count. The returned `coverage` object states what that count is and is not: the registry is an opt-in subset of the ecosystem (a plugin appears only after it was evaluated), so a short list — the bundled snapshot holds one entry — is not evidence that the ecosystem is uncertified, and a single-entry list supports no comparison across plugins. Read `coverage` before drawing any conclusion from `count`. Use this to discover what is in the registry, or to compare grades across plugins. Use get_certification instead when you already know the plugin and want its full five-dimension evidence; this tool returns the summary row only. Read-only: it reads the embedded registry snapshot (optionally refreshed from the public registry when reachable), takes no parameters, performs no writes and needs no credentials. Repeated calls are identical until the snapshot is refreshed.

無需輸入參數。

certification_spec

Explain the certification spec

Return the dsh-plugin-certification specification document, version 1: the five graded dimensions, the grade scale from A to F, and the veto rule that can override a grade. Use this to interpret a grade you have already read - for example to learn why a record was vetoed, or what a dimension actually measures. Use list_certified or get_certification instead when you want a specific plugin's data rather than the rules behind it. Read-only: the document is compiled into the server, takes no parameters, performs no writes and needs no credentials. The same document is returned on every call.

無需輸入參數。

版本歷史

10
  1. v0.2.13最新Nov 5, 2026
  2. v0.2.12Nov 1, 2026
  3. v0.2.11Oct 31, 2026
  4. v0.2.10Oct 21, 2026
  5. v0.2.9Oct 20, 2026
  6. v0.2.6Oct 10, 2026
  7. v0.2.5Oct 9, 2026
  8. v0.2.4Oct 5, 2026
  9. v0.2.3Oct 5, 2026
  10. v0.2.2Sep 19, 2026

評分

已滿足適用檢查項的 65%

該評分衡量此收錄條目的完整程度,依據註冊中心條目、端點與公開來源計算得出。它不是對伺服器本身的評價,也不表示伺服器安全或目前可用:可連通性是帶日期的檢查結果,評分也不包含安裝量或使用者評價。

  • 近 30 天內可連通25 分
  • 已宣告認證方式10 分

    請在註冊中心條目中宣告憑證請求標頭,或保持端點能夠回應探測,以便判定其認證方式。

  • 已列出工具必需15 分
  • 描述必需15 分
  • 圖示10 分
  • 文件15 分

    請宣告包含 README 的 GitHub 儲存庫,或在 OAuth 受保護資源後設資料中提供 resource_documentation。

  • 授權條款10 分

    請在儲存庫或註冊中心條目中宣告授權條款。