dsh-git-credentials
Run the following command in DeepSeek Harness:
dsh plugin install revive/dsh-git-credentials
Paste the following prompt into your AI chat to install this plugin:
Run dsh plugin install revive/dsh-git-credentials in your terminal to install this plugin; the full source is available at https://github.com/revive/dsh-git-credentials .
About this plugin
Managing API tokens across multiple Git platforms in DeepSeek Harness has always been a pain. Throwing them into environment variables exposes plaintext to the model context, while the official MCP server covers only a single platform and leaves you without a unified encrypted store or a management UI. For teams juggling GitLab, GitHub, Gitee, Gitea, and Bitbucket simultaneously, fragmented token handling is both insecure and cumbersome.
dsh-git-credentials solves this with a single AES-256-GCM encrypted store that consolidates tokens for all five platforms. Model tools carry only a token reference name (e.g. GITLAB_TOKEN); the real value is decrypted at call time and written directly into the outgoing HTTP Authorization header, never crossing the model boundary. A built-in web settings panel lets you add, edit, and delete sites and token values, and no API response ever returns a token string. Provider-scoped tool sets (gitlab_projects, github_pull_requests, gitea_issues, and more) cover common operations on repositories, files, issues, pull requests, and releases, while hot loading ensures configuration changes take effect immediately without restarting the daemon.
This plugin is best suited for developers who work across multiple code-hosting platforms, especially those relying on Gitee or self-hosted Gitea and GitLab instances, and for users who want a higher security bar for secrets than environment variables or plaintext config files. If your workflow is GitHub-only with no special token-handling requirements, the official MCP server remains the simpler choice.
Use Cases
- Managing API tokens across GitLab, GitHub, Gitee, and other platforms in one place
- Keeping token values out of the model context and tool arguments
- Rotating or clearing platform tokens from a web panel without restarting
Best For
- Developers working across multiple code-hosting platforms
- Teams that refuse plaintext environment-variable token storage
- Users relying on self-hosted Gitea or GitLab without official MCP support
Related Plugins
Adds an Auto approval mode on the official workspace-write sandbox, classifying semantic risks, asking when ambiguous, and denying destructive operations.
Undo/rollback system for DSH: config & plugin snapshots, one-click undo/redo/restore, message-level revert, secret masking, safe mode, and offline WebUI/GUI/CLI rescue tools for when DSH won't start.
Packages all 87 SKILL.md files from upstream reverse-skill as a DeepSeek Harness plugin that auto-registers them for authorized reverse engineering, penetration testing, and security research.
Dockyard DSH is a native DeepSeek Harness plugin that unifies official OAuth/client sessions for Codex, Antigravity, Grok, Claude, and Cursor, providing account pool, model catalog, and quota status.