snowmountain-market

DSH's security model strips credential-shaped environment variables from model-visible shell processes, which means even if WIND_API_KEY is set on the host, the Agent's Bash tool cannot invoke the official Wind CLI. Copying the key into a workspace file, on the other hand, would defeat the very boundary DSH is designed to enforce. snowmountain-market bridges this gap: it resolves the credential inside the trusted host process, injects the Bearer token through a random, loopback-only adapter bound to 127.0.0.1, and lets Wind traffic flow into DSH's toolchain as standard MCP calls. The key is never returned to the model, stored in plugin configuration, or exposed to ordinary shell commands.

The plugin registers all seven of Wind's official Streamable HTTP MCP domains—stocks, funds and ETFs, indices and sectors, bonds, filings and financial news, macro and industry indicators, and cross-asset analytics—as native DSH tools, and brings in Wind Alice for professional workflows spanning fact-checking, company one-pagers, earnings reviews, screening, macro analysis, credit assessment, fund research, market sizing, and comparable-company analysis. Two runtime Skills route each user request to the appropriate tool without ever surfacing an API key or shell command in the prompt.

If you rely on DeepSeek Harness for investment research, risk analysis, or strategy work and want seamless access to Wind's full data suite without compromising DSH's security model, this plugin is a drop-in adapter. It suits individual quant researchers, institutional research teams, and any developer building Agent workflows that depend on Wind data.