dsh-http-tools

Debugging REST APIs inside a DeepSeek Harness chat used to mean leaving the conversation, switching to a browser DevTools panel or a terminal, manually assembling headers, pasting tokens, and copying responses back and forth. dsh-http-tools collapses that loop into the chat itself: you can ask the agent to fire any HTTP method (GET/POST/PUT/PATCH/DELETE/HEAD) with custom headers, body, and Basic or Bearer auth; paste a curl command and have it parsed into structured fields or executed in one step; and later pull any two responses from session history for a field-by-field diff. The Link pagination header is surfaced to the model so it can follow rel="next" pages without parsing raw headers. Response bodies are capped at 512 KB and timeouts at 10 s by default, and credentials are redacted to *** in the generated equivalent curl, so secrets never leak into logs or history.

With the optional dsh-http-tools-ui companion, every http_request or curl_parse call renders as a branded card in the web interface: a method badge, a status dot that animates while the call is in flight, duration and size at a glance, a collapsible JSON tree for the body, and one-click copy buttons for both the body and the curl equivalent. On the security side, blockedHosts lets you deny exact hostnames and their subdomains before any network I/O (handy for cloud metadata endpoints), and a single localOnly flag switches the plugin into loopback-and-private-net debug mode. An X-DSH-Request audit header tags every call so server logs can distinguish agent traffic.

If your day-to-day in Harness involves iterating with third-party APIs—wiring up webhooks, validating gateway auth, or paging through large result sets—this plugin removes the back-and-forth between chat and browser tabs and keeps a full REST client experience right in the conversation flow.