The philosophy of DeepSeek Harness is “everything is a plugin”. When an agent needs to operate Alibaba Cloud resources directly, manually integrating with OpenAPI can be cumbersome and error-prone. The following introduces dsh-aliyun-mcp, a plugin that connects the official Alibaba Cloud OpenAPI MCP Server to DSH.

What Is This

dsh-aliyun-mcp is an online tool plugin maintained by zhengjy01. It runs the Alibaba Cloud MCP Proxy locally and exchanges a static AccessKey for a Bearer Token, thereby establishing a connection with the official Alibaba Cloud OpenAPI. The plugin registers its tools under the mcp__aliyun__* namespace, covering tens of thousands of Alibaba Cloud OpenAPI operations, including ECS, OSS, Domains, DNS, and Function Compute.

Core Features

  • Connects to the official Alibaba Cloud OpenAPI MCP Server.
  • Runs the Alibaba Cloud MCP Proxy locally via uvx.
  • Supports static AccessKey authentication mode.
  • Registers tools under the mcp__aliyun__* namespace.
  • Supported cloud services include ECS, OSS, Domains, DNS, Function Compute, and thousands of other Alibaba Cloud OpenAPI operations.

Installation and Enabling

  1. Ensure that uv is installed locally (for example, via brew install uv).
  2. Ensure that the DeepSeek Harness version in use is 0.1.5-rc.1 or later.
  3. Run the installation command:
dsh plugin --profile web add dsh-aliyun-mcp
  1. Restart DSH Web to apply the changes.

Typical Usage

  • Configuration: Find the “Alibaba Cloud MCP” section in the Web settings panel. Enter the AccessKey ID and Secret. Optionally, set the upstream endpoint: for the China region, use https://api.aliyun.com/mcp; for the international region, use https://api.alibabacloud.com/mcp; leave it blank for auto-discovery.
  • Agent tools: Use the following commands to interact with the plugin:
# 查看或修改配置
aliyun_mcp_config

# 查看状态
aliyun_mcp_status

# 测试连通性
aliyun_mcp_test

# 清除配置
aliyun_mcp_clear

Use Cases and Considerations

  • Security policy: You must use an AccessKey belonging to a RAM sub-account. It is recommended to attach the AliyunOpenAPIMCPServerStaticCredentialAccess policy. Never use keys from the root account.
  • Runtime environment: The plugin runs with the permissions of the current DSH process. Before installation, review the source code and license (MIT).
  • Dependencies: uv must be installed locally; otherwise, the Proxy cannot start.

Summary

dsh-aliyun-mcp provides a standardized path for accessing Alibaba Cloud resources through the official MCP protocol. For more details and source code, refer to its directory page or GitHub repository.