DSH Desktop — Watchlist

MCP100 Assessment

Watchlist / Tracking

Why we’re tracking it

Follow plugin and desktop capability changes because the bundle spans many local actions

Reviewed Oct 5, 2026 · Documentation review; complete setup workflow not independently tested

Best fit

Local desktop workspace bundling DSH sessions, agents, files, Git, terminal, plugins and MCP.

What we know

Community desktop distribution running official DeepSeek Harness web/runtime with pinned bundles, local developer tools and optional remote-session functionality.

Maintenance / activity evidence

Observed Oct 4, 2026 (UTC)chore(stats): daily download snapshot

Tracking evidence observed Oct 5, 2026. These dated signals do not establish current maintenance. Reviewed enrichment confidence: high.

Activity source · commits ↗Activity source · releases ↗

Verification gaps / watch-outs

Installation and comprehensive security have not been independently audited.
Agent/plugin/session permissions plus selected workspace authority. Writes: File/Git/terminal operations; Plugin actions; Agent tool execution.
Provider/plugin specific.
Sensitive access: Source code, Terminal context, Provider credentials, Remote session data

This is an agent host with broad developer-workstation authority; bundled permission/approval controls should remain enabled.

Security source · repository notice ↗Security source · policy file ↗Security source · policy file (attribution not established) ↗

Full authority, access and evidence limits are available in Review context and Access & risk.

Popularity

587 repository stars

Stars observed Sep 25, 2026.

Do not overwrite existing reviewed stars/download metrics with nulls from this enrichment batch.

All limitations / Review context

Which MCP and local desktop capabilities are enabled in the current bundle?

The bounded assessment reviewed the official README, repository notices, security policy path, and security page for known material public-tracking blockers. No such blocker was identified. This is a public-tracking assessment, not an installation safety certification.

This is an agent host with broad developer-workstation authority; bundled permission/approval controls should remain enabled.
Agent/plugin/session permissions plus selected workspace authority.
Provider/plugin specific.
Profile/session data are local by default; optional remote feature uses encrypted transport through external coordination services.
Reviewed write actions: File/Git/terminal operations; Plugin actions; Agent tool execution
Sensitive access: Source code, Terminal context, Provider credentials, Remote session data
Installation, client compatibility and comprehensive security have not been independently audited. Authentication and access depend on the configured services.
No independent runtime, installation, or comprehensive security audit was performed.
No installation, runtime, client matrix, or complete tool-contract audit was performed in this review.
Remote feature uses third-party account/device/signaling/relay services.
No supported self-host server for the remote service is documented.
Linux/macOS Intel lack formal installers.

Original activity observations

2026-10-04T19:43:58Z: chore(stats): daily download snapshot

Technical identity

github.com/vibeinging/dsh-desktop

Exact implementation source: https://github.com/vibeinging/dsh-desktop ↗
Reviewed resource type: Host
Repository identity: vibeinging/dsh-desktop

Evidence & Sources

Evidence basis: Recorded source evidence
Setup runtime verification: Not independently runtime-tested by MCP100 for this setup workflow.

Reviewed Oct 5, 2026 · Latest source observation Oct 7, 2026

GitHub repository ↗
vibeinging/dsh-desktop
Recorded repository material and project history.
Includes references whose attribution is not established.

Setup · Watchlist

Host / Desktop app setup

Publisher instructions.

Source evidence observed Oct 14, 2026.

Additional setup details required — see the specific gaps below.

Download / install
Publisher instructions
DSH Desktop is a desktop host built around DSH Web/plugins, not a standalone MCP server.
package install · Publisher instructions
git clone https://github.com/vibeinging/dsh-desktop.git cd dsh-desktop npm install npm run doctor npm run dev:electron
Configure application / integrations
MCP100 setup guide
This is a source development flow. For ordinary users, publisher directs to signed GitHub release; optional macOS local package build is separate.
Check connection
Suggested check
Open Desktop and inspect plugin marketplace without enabling broad privileges.
Disconnect / uninstall / revoke
Publisher instructions
DSH Desktop documents `dsh plugin --profile web remove <package>` for its optional bundles; uninstall the desktop app using the publisher/OS installer separately. The desktop host itself should not be passed to `claude mcp remove`.
Client unregistration, program uninstall, persistent-data deletion, and credential revocation must be treated separately.
Remove plugin · DSH profile only · Publisher instructions
dsh plugin --profile web remove <package>

Official Documentation & Sources

What it does

Community desktop distribution running official DeepSeek Harness web/runtime with pinned bundles, local developer tools and optional remote-session functionality.

Capability: Developer Tools
Resource type: Host
Best fit: Local desktop workspace bundling DSH sessions, agents, files, Git, terminal, plugins and MCP.

Representative uses

Run agent sessions
Work with files/Git/terminal/worktrees
Install/manage DSH bundles
Continue sessions from supported remote clients

Limitations

Remote feature uses third-party account/device/signaling/relay services.
No supported self-host server for the remote service is documented.
Linux/macOS Intel lack formal installers.

Reviewed access

Access & risk

Review the exact access boundary before connecting this MCP to accounts, credentials, or sensitive data.

Authentication: Provider/plugin specific.
Permissions: Agent/plugin/session permissions plus selected workspace authority.
Data handling: Profile/session data are local by default; optional remote feature uses encrypted transport through external coordination services.
Cost: unknown
Risk and cautions: This is an agent host with broad developer-workstation authority; bundled permission/approval controls should remain enabled.

Access scope and cautions

Write actions: File/Git/terminal operations Plugin actions Agent tool execution
Sensitive access: Source code Terminal context Provider credentials Remote session data
Risk level: high

FAQ

Based on reviewed evidence as of 2026-10-07. Watchlist tracking is not a recommendation or a security certification.

Which tasks are documented for this implementation?

The reviewed tasks include: Run agent sessions; Work with files/Git/terminal/worktrees; Install/manage DSH bundles; Continue sessions from supported remote clients.

What authentication is documented?

Model/service credentials are managed through DSH/local environment.

Can it modify data or perform write operations?

Documented write actions include: File/Git/terminal operations; Plugin actions; Agent tool execution. Recorded permission boundary: Agent/plugin/session permissions plus selected workspace authority.

What data-handling boundary should I consider?

Profile/session data are local by default; optional remote feature uses encrypted transport through external coordination services. Recorded sensitive-access context: Source code; Terminal context; Provider credentials; Remote session data.

What limitations and risks should I check before use?

This is an agent host with broad developer-workstation authority; bundled permission/approval controls should remain enabled. Remote feature uses third-party account/device/signaling/relay services. No supported self-host server for the remote service is documented. Linux/macOS Intel lack formal installers. No independent runtime, installation, or comprehensive security audit was performed.

Is this an official MCP?

vibeinging is listed as Community implementation in MCP100’s current evidence.