sorsama136Updated 3d ago
Authenticated remote access for a DeepSeek Harness web profile: TLS, QR/passcode device pairing, password sign-in, and per-device revocation in front of an untouched loopback harness.
Practical score
83 / 100
Setup
Ready to use
License
MIT
Language
TypeScript
Copy the command, or hand the whole task to your harness agent.
dsh plugin --profile web add dsh-relayPlease install the DeepSeek Harness plugin "deepseek-harness-relay" for me. - GitHub repository: sorsama/deepseek-harness-relay (https://github.com/sorsama/deepseek-harness-relay) - Type: a Cordis plugin (installed into a DSH profile) - The plugin declares a D…
A cleaned excerpt from the project's own documentation.
dsh-relay Use your DeepSeek Harness from your phone without opening it up to everyone on your Wi-Fi. dsh-relay is a plugin for the harness's web profile. It puts HTTPS, a password, and device pairing in front of the harness, so you can reach it from another device on your network, or from anywhere if you forward a port. It's built on DeepSeek Harness, but it isn't an official DeepSeek project. Why this exists The harness web app only listens on 127.0.0.1 , so only the computer running it can open it. That's deliberate. The harness is a coding agent that runs commands on your machine, and its authors refuse dsh web --host 0.0.0.0 because it "would expose remote code execution to the network". The common workaround is a config patch that binds the harness to 0.0.0.0 with no sign-in at all.…
Open on GitHubSimilar tools from the same corner of the ecosystem.
dingminhua
Expose any local service on a random cloudflared domain with one password — QR code for LAN, QR + password for public, per-node routing managed in the DSH settings panel.
saya-ch
DeepSeek Harness 的安全移动访问插件与 Android App，支持局域网和多种远程通道、iPhone/iPad 主屏幕 Web App 与网页推送，并提供移动界面适配、设备管理和自定义扩展。
mrRisega
Reverse-proxy gateway to control the DSH Web UI from a phone browser with full feature coverage (incl. privileged methods): loopback masquerading, WebSocket passthrough, login rate limiting, optional TLS, LAN or public reverse-proxy deployment.