dsh-oauth-mcp-client

When using the MCP client in DeepSeek Harness, many production MCP gateways require OAuth 2.1 authorization, which the native client does not fully support. dsh-oauth-mcp-client fills this gap by adding the OAuth 2.1 authorization code flow with PKCE on top of the native dsh-mcp-client, enabling Harness to securely connect to protected MCP services such as Springbrand's production MCP gateway.

The plugin covers the entire chain from authentication to tool invocation. It supports dynamic OAuth client registration, browser login with a loopback callback, and securely stores tokens and client metadata in the DSH credential service. The connection layer uses Streamable HTTP transport with automatic reconnects; the plugin also automatically discovers, registers, and executes MCP tools, and provides a DSH Web connection management page to view live status and registered capabilities.

For developers and teams who need to integrate enterprise MCP services into DeepSeek Harness, especially those looking to use the Springbrand capability marketplace, this plugin greatly simplifies onboarding. After a one-time browser authorization on first startup, users can ask the agent to search and invoke Springbrand capabilities in natural language without manual tool selection.