deepseek-harness-mobile: A Secure Mobile Tunnel Plugin for DeepSeek Harness
frederico-kluser/deepseek-harness-mobile
A DSH plugin to securely access your DeepSeek Harness Web UI remotely via Telegram/Discord, with tunnel bound to loopback and key-based auth.
deepseek-harness-mobile is a mobile access plugin for DeepSeek Harness, letting you use the full Web UI for real coding from your phone while keeping the bind strictly on loopback and the tunnel terminating at 127.0.0.1, so only those with the key in the link can enter. It solves the problem of securely exposing a local agent, offering key/session-based authentication, rate limiting, and remote control. Core capabilities include a secure tunnel proxy, Telegram/Discord bot control, and a documented threat model.
How to Install
dsh plugin --profile web add github:frederico-kluser/deepseek-harness-mobile- Category
- Integrations & Connections
- Platform
- DSH Plugin
- Author
- frederico-kluser
- Distribution
- Plugin
deepseek-harness-mobile Key Features
deepseek-harness-mobile Repo Summary
What Does It Do?
dsh-guard-messenger is a DSH plugin for DeepSeek Harness that provides mobile access to the full Web UI for real coding, while keeping the bind strictly on loopback and the tunnel terminating at 127.0.0.1, so only those with the key in the link can enter. It solves the problem of securely exposing a local agent, offering key/session-based authentication, rate limiting, and remote control. Core capabilities include a secure tunnel proxy, Telegram/Discord bot control, and a documented threat model.
Core Features
- Secure tunnel proxy: refuses non-loopback binds, authenticates all tunnel requests via session or key, and returns 401 without challenge for unauthorized access.
- Key management: generates 256-bit CSPRNG keys, stores only SHA-256 digests, supports rotation that immediately terminates active connections.
- Rate limiting: delays after 5 failures, enters restricted mode after 100 failures, allowing only loopback access.
- Bot control: pair via Telegram or Discord, only the owner can command, with on/off tunnel access.
- Defense in depth: denies
danger-full-accesselevation, validates Host header against DNS rebinding, and uses timingSafeEqual for key comparison.
How to Use This Plugin?
After enabling it in DSH, send commands via the Telegram or Discord bot to turn tunnel access on or off. The bot sends a link with ?key=, and only those with the key can access the Web UI through the tunnel. To rotate the key, use the /rotacionar command, which generates a new key and terminates all active sessions.
This page is an independent rewrite of the plugin's official README — for authoritative documentation and the latest changes, refer to the source: frederico-kluser/deepseek-harness-mobile. The plugin is third-party code that runs on your machine once installed; inclusion does not imply endorsement — please review the source before installing.