mcp-cap
What can this MCP server actually do? Inspect its real capability surface, seal it, and get told when it changes. Never invokes a tool; gives the server a minimal environment.
50 results
What can this MCP server actually do? Inspect its real capability surface, seal it, and get told when it changes. Never invokes a tool; gives the server a minimal environment.
A safe external-skill discovery and adoption bundle for DeepSeek Harness
Turn DeepSeek Harness sessions into redacted, README-ready animated demos — as a local CLI or DSH plugin.
A safety harness plugin for DeepSeek Harness (DSH): protected-path enforcement, trash-based safe_delete with undo, last-known-good composition snapshots, pre-restart composition checks, and an audit journal.
Lock, verify and govern AI agent skills: a DSH plugin that makes the agent check what a skill can do before installing or updating it, and notice when it changes.
Free security audit for Linux servers — no API keys, no paid tools. Scans for viruses (ClamAV), rootkits (rkhunter + chkrootkit), SSH brute force, crypto miners, exposed credentials, and open ports. 1
Mingleng mcpguard for DeepSeek Harness 鈥?the first security plugin for DSH. Scans skills and MCP configs for prompt injection, homoglyphs, hidden Unicode, dangerous shell and credential leaks.
Out-of-tree DeepSeek Harness bundle: an executable implementation of the Harness Engineering Methodology (HARNESS-METHODOLOGY-SPEC v1.0) — agent-discipline prompt section + artifact scaffolding tool + compliance audit tool.
保险区 Vault Wall — 让 DeepSeek Harness 无法感知、无法触碰用户指定敏感路径的隔离墙插件(隔离墙 + 人在回路审批 + 执行后验证 + 循环纠正 + 可回滚规则)
Forgetting engine for AI agents — memory TTL, decay, eviction, audit. The opposite of memory programming.
AI Agent runtime authorization & evidence verification — tool-call GuardrailProvider, CCS 7-dimension verification standard, MCP/DSH security scanner, SSRF/command-injection/credential-exfil blocking with Ed25519 signed receipts.
Governed platform access for DeepSeek Harness — no credential on the machine
Password + CIDR gate for DeepSeek Harness web / DeepSeek Harness 局域网密码门禁
Guard DeepSeek Harness PowerShell, file, image, and search tools on Windows with workspace, credential, approval, and audit policy.
Set up free, encrypted, deduplicated backups of remote Linux servers, pulled from a Windows PC with Restic — tar-over-SSH streaming, zero software installed server-side, with size verification against
Three-mode visible-session advisor plugin for DeepSeek Harness with configurable tool permissions, local-subagent coverage, and task-tree budgets.
DSH++ — a local-first control plane for DeepSeek Harness. Plugin security auditing and workflow regression testing for dsh, in a CLI plus a loopback web console.
Run an agent unattended for hours and get a morning brief that is an audit, not a summary. Signs a manifest before the work, holds the run to it, and reports the difference.
Deny an AI agent access to .env files, credential stores, keys and any path you hide — across file tools, shell commands, search selectors and run_code. A DeepSeek Harness (dsh) plugin.
OpenKapsel workspace bridge for the DeepSeek Harness: operate a remote OpenKapsel workspace (files, shell, context, memory, sharing, preview) through skill-driven tool calls using only its workspace URL and control token.
Human intent verification and cryptographic action authorization for AI agents. AI can propose an action. Only a human can authorize it.
dsh-voredteam —— 单模式(网络安全模式)DSH 插件合集:黑板书 Fact/Intent/Hint 引擎 + 总控派发专业子 agent + 作战面板/设置 两个面板 + 唯一门禁(禁 DDoS/禁爆破/模糊测试低频)。
Explain what a pending dsh approval will actually do, with one LLM call: an Explain button beside Allow/Reject plus the Host /explain command behind it
Deterministic fact producers for security auditing: which deleted code came from a security fix, and which changed symbols no test ever executed.