Plugins

Connects DeepSeek Harness to a local SiYuan (思源笔记) desktop app: registers its note tools as mcp__siyuan__<tool>, exposes the AI configured in SiYuan together with its agent loop as one more tool, ships a notes skill, and enforces a readonly/authoring/full profile on every call while keeping the tool list available when the app is closed.

Reads and writes a self-hosted Bitwarden/Vaultwarden vault from any session: eleven bitwarden_* tools, real-time WebSocket sync with a polling fallback, a settings panel with readonly, ask and auto write modes, and optional local masking — with masking on, passwords surface as stable placeholders unless revealed one field at a time, and on-disk session logs are swept for bitwarden secrets. Masking and log sweeping are separate switches.

Alibaba Cloud / Qwen balance card above the Settings row in the DSH web sidebar: account available and cash balance, coupon balances with expiry dates (student vouchers included) read through the BSS OpenAPI, and OpenAI-compatible relay quota. An official DashScope sk- key has no balance endpoint at all, so real money and coupons require an Alibaba Cloud AccessKey with bss:DescribeCoupons + bss:DescribeAcccount (AliyunBSSReadOnlyAccess is enough); secrets stay in the host process, the browser only sees a masked AccessKey ID, and /api/dsh-qwen-balance/* is loopback-only.

Zhihu (知乎) for DeepSeek Harness: wraps the local pyzhihu-cli as 18 zhihu_* tools — 14 read-only (search, hot list, question, answer, user, feed, topic, notifications, collections) plus 4 publishing tools that are not registered until readOnly is turned off — with a web panel in the sidebar for login, config and lookups.

Two halves with one account store: a left-panel GitHub repositories viewer that is read-only by construction (three GET endpoints, every non-GET refused with 405 before routing, request body never read, tokens never leave the host), and a github-manager skill exposing exactly two tools — github_accounts and github_api — so the agent does the writing. Sign-in is GitHub Device Flow, and the store self-invalidates on mtime so a token added later is picked up without a restart.