Se connecter
DeepSeek Harness logo

DeepSeek Harness

Bêta

DeepSeek's open-source, plugin-based harness for running AI coding agents locally

Visiter le site
Prudence

DeepSeek Harness is a free, MIT-licensed way to run a coding agent from a local web UI, reading and editing files and running commands with DeepSeek, Anthropic, OpenAI, Kimi, GLM or custom compatible models. Caution because DeepSeek's own safety notice calls it unaudited and not secure or production-ready, and a critical flaw, CVE-2026-82533, let a sandboxed agent switch off its own sandbox on unpatched installs. Right for experimenters in a disposable VM; wrong for machines holding credentials or production code.

IA native

An agent loop sends model requests and runs tool calls that read and edit workspace files and run commands in a sandbox.

Est-ce fait pour vous ?

Recommandé pour

  • Running a coding agent from a local browser UI: npx @deepseek-ai/dsh web starts it at http://127.0.0.1:3080, and the agent can read and edit workspace files, run commands, delegate work and keep a plan
  • Choosing your model: besides a DeepSeek API key, built-in provider ids include anthropic, openai, moonshotai for Kimi and zai for GLM, and custom providers can speak openai-completions, openai-responses or anthropic-messages
  • Developers who want to rework the agent itself, since everything is a plugin on the Cordis framework, including model adapters, tools, persistence, sandbox and approval policy
  • Zero software cost under the MIT licence

Déconseillé pour

  • Production or sensitive machines: DeepSeek's SAFETY.md says it has not undergone a security audit, must not be treated as secure or production-ready, and recommends a disposable virtual machine, container or dedicated environment
  • Stable integrations, since the README warns of compatibility-breaking changes in the developer preview
  • Agents that read untrusted content on unpatched installs: under CVE-2026-82533, attacker-supplied text the agent read could get it to disable its own sandbox with one shell command, on shipped defaults and with no network exposure
  • Trusting the CVE record's fix version on npm: The Hacker News reports 0.1.2-alpha.1 was fixed on GitHub only and never published to npm, so npm users need 0.1.2-alpha.2 or later

Notre expérience

We haven't tested DeepSeek Harness ourselves. This profile is based on public documentation, user reviews, and community feedback.

Tarifs

Open source
Open source (MIT)$0
  • MIT licensed harness
  • Requires a DeepSeek API key or another configured model provider
  • Custom OpenAI- or Anthropic-compatible endpoints supported
Voir tous les tarifs

Recettes de flux de travail

Try it in an isolated environment

Run the developer preview the way DeepSeek's safety notice recommends

  1. Start from a disposable virtual machine, container or dedicated environment with only the files the agent needs
  2. Install Node.js and run npx @deepseek-ai/dsh web
  3. Open http://127.0.0.1:3080 and enter a DeepSeek API key or configure another provider
  4. Choose the workspace directory where you started dsh
  5. Confirm the installed version is 0.1.2-alpha.2 or later before letting the agent read untrusted material

Aucun changement de verdict pour l’instant

L’horloge tourne dès le premier jour : les changements apparaîtront ici à mesure que notre verdict évolue.

Sources

Journal de vérification

  • Statut— Aucun changement

    Agent automatisé

  • Profil— Aucun changement

    Agent automatisé

Comment nous évaluons

Vous le voulez en marche dans votre entreprise ?

Nous avons testé cet outil et nous construisons avec des outils comme lui chaque jour. Dites-nous le flux de travail : nous l’installons, nous l’intégrons et nous vous le livrons fonctionnel.

Dites-nous ce qu’il vous faut (s’ouvre dans un nouvel onglet)Voir ce que nous construisons

La conversation tourne sur Gnosari, l’un des outils de ce répertoire. Une vraie conversation, pas un script de vente.