AI Agent Hub
Back to plugins
🧰

dsh-mcp-tunnel

Web Tools Updated 2026.08.25

Run the following command in DeepSeek Harness:

dsh plugin install 988hj7tczd-oss/dsh-mcp-tunnel

Paste the following prompt into your AI chat to install this plugin:

Run dsh plugin install 988hj7tczd-oss/dsh-mcp-tunnel inside DeepSeek Harness to install this plugin; the source lives at https://github.com/988hj7tczd-oss/dsh-mcp-tunnel.

About this plugin

A local MCP Server listens on 127.0.0.1 by default, so remote agents simply cannot reach it; exposing it usually means opening inbound ports or standing up a reverse proxy with TLS certificates - both tedious and a larger attack surface.

dsh-mcp-tunnel brings up a mcp-proxy + cloudflared Docker Compose stack with a single tool call, turning your local MCP endpoint into a reachable HTTPS URL through Cloudflare edge tunnels - outbound-only, zero inbound ports on the host. The default Cloudflare Quick Tunnel requires no account; you can also switch to a named tunnel. Bearer tokens are written only to a .env file (file mode 0600), and the plugin never rewrites any profile config automatically - it produces a pending snippet file that you paste in by hand.

Built for developers who build MCP Servers locally and want their remote DeepSeek Harness agents to call them securely - no tunnel-relay VM to babysit, no inbound firewall rules to reason about.

Use Cases

  • Developing an MCP Server locally and needing a remote agent to call it securely
  • Quickly exposing a local MCP endpoint for demos or debugging without inbound firewall rules
  • One-click conversion of a local HTTP MCP Server into a remotely reachable URL via free Quick Tunnel

Best For

  • Developers building MCP Servers locally who need remote agent access
  • Engineers using DeepSeek Harness to build remote agent workflows
  • Individual developers or small teams who do not want to maintain a separate tunnel relay