dsh-chatgpt-oauth：在 DSH Web 里用 ChatGPT 账号登录并查看 Codex 用量
dsh-chatgpt-oauth 是 zhangnan 维护的 DSH 社区插件，在 Web 模型设置的 ChatGPT（openai-codex）卡片中提供浏览器或设备码 OAuth 登录，将 grant 存入 DSH 凭据 llm-pi-ai/openai-codex 并在服务端刷新。用量经 chatgpt.com 后端接口解析后展示，令牌不返回浏览器。安装需 Node.js 22.19+ 与 web profile，命令为 dsh plugin --profile web add -w dsh-chatgpt-oauth。非官方插件，使用前请审阅源码与权限。
Read Moredsh-xai-oauth：用 SuperGrok / X 订阅 OAuth 登录 xAI，无需 API key
dsh-xai-oauth 是 DeepSeek Harness 的 web 侧插件，通过 RFC 8628 设备码向 xAI 完成 OAuth，将 access token 写入 XAI_OAUTH_TOKEN 并自动 refresh，配合 llm-pi-ai 的 xai 路由使用。本文基于官方 README 介绍安装命令、登录步骤、可选配置、Desktop 兼容性与本机控制服务的安全边界，适用于持有 SuperGrok 或 X Premium 订阅的开发者。
Read Moredsh-plugin-subscription-oauth：用已有订阅账号接入 DSH，无需 API Key
dsh-plugin-subscription-oauth 由 EricFL1998 维护，将 Kimi Code、Grok、Google Antigravity、GLM、火山 Ark、小米 MiMo、WorkBuddy 等订阅账号通过 OAuth 注册为 DeepSeek Harness 的 LLM Provider。在 Settings → Subscriptions 一次登录、查看套餐余量，模型进入会话选择器，支持 per-model 显隐与拖拽排序、多账号池化及 auto 跨 Provider 回退。凭据存本机 ~/.dsh，请求直连厂商 API。安装：dsh plugin --profile web add dsh-plugin-subscription-oauth。MIT 许可。
Read MoreB站三连广告-授权与主流程：三连 MAPI 的统一入口与 OAuth 调度
SkillHub 上的 B站三连广告-授权与主流程（bilibili-sanlian-ads，v3.0.4）是哔哩三连投放 MAPI 的 Start-here 入口：面向运营做意图澄清与分阶段写入确认，通过 scripts/mapi.sh 完成 OAuth 2.0、本地凭据管理与串行调用纪律，区分 v3 旧版与 v4 素材化 2.0，并路由到投放、素材、元数据、报表、财务、RTA 等子 Skill。文章说明安装依赖、典型授权命令与查数/创编工作流，适合需要 Agent 安全接三连 API 的团队。
Read MoreJWT/OAuth令牌攻击：为 Agent 准备的令牌安全测试技能
SkillHub 社区技能 JWT/OAuth令牌攻击（@user_3c6cb52e/jwt-oauth-token-attacks-lr-0xh6，v1.0.0，it-ops-security）面向 AI Agent，聚焦 JWT 与 OAuth 令牌相关安全任务，requires_api_key=false。文章说明其定位、已公开的元数据能力边界，并给出按 skillhub.cn/install/skillhub.md 安装 CLI、用 skillhub install 与 --dir 装入 Cursor/Claude Code/Codex 等 skills 目录的步骤。典型用法为加载 SKILL.md 后在授权范围内执行任务；强调合法授权与以本地技能正文为准。
Read Morecreate-auth: Scaffolding Authentication for TypeScript/JavaScript Projects with Better Auth
create-auth is an official Agent Skill provided by Better Auth, designed for TypeScript/JavaScript projects. It follows a two-stage process (planning is required, implementation is pending confirmation), automatically scans the framework and database, collects login methods and plugin requirements through structured questions, and then, based on a new-project, existing-integration, or migration path, installs better-auth, configures auth.ts and routes, runs CLI migrations, and generates an authentication UI. It supports extension packages such as OAuth, 2FA, and organizations. The installation command is npx skills add, which points to the official skills repository.
Read Moredsh-bundle-pi-ai-auth: DeepSeek Harness pi-ai OAuth Control and Fallback
The `dsh-bundle-pi-ai-auth` plugin provides an OAuth authentication management interface for pi-ai models in DeepSeek Harness (DSH). It supports provider activation, login (browser-based authorization), and logout (local credential cleanup) through the Provider-card control in the Web UI and command-line tools. This plugin depends on DSH version 0.1.x and related components. It serves solely as an interaction layer and does not handle low-level protocols or token refresh. After installation, the provider must be manually added in Settings before it can be used.
Read Moreyueyexiayu/dsh-oauth: DSH Official OAuth Login Plugin
The DSH OAuth plugin provides official sign-in capabilities for Grok and ChatGPT Codex in the DeepSeek Harness desktop client. By integrating the official OAuth flow, it enables device-code interaction and state management, with tokens securely stored in the host-side configuration file. It supports account switching, token refresh, and session routing management, and includes robust error handling. Installation requires placing the files in the specified directory and registering them in the configuration file; changes take effect only after the application is fully restarted. The plugin is available only to users with the corresponding membership permissions.
Read Moredsh-oauth-adapter: OAuth Account Page for the DSH Web Environment
`dsh-oauth-adapter` is a plugin that provides unified OAuth sign-in for the DeepSeek Harness (DSH) Web profile. It addresses DSH’s lack of native integration points for third-party services such as GitHub Copilot and Kimi, supports multi-provider authentication, and includes an authorization fallback mechanism. Installation requires the appropriate Node.js version and specific dependencies. Because the plugin runs with DSH process privileges and involves credential management, developers should pay close attention to version compatibility and source-code security.
Read MoreDeepSeek Harness Plugin: dsh-provider-login
The DeepSeek Harness plugin `dsh-provider-login` resolves the missing subscription login entry point in the framework. By mounting an authorization registry and registering commands, it enables users to perform OAuth authorization in a browser and use their ChatGPT Plus/Pro or Claude Pro/Max subscriptions instead of relying directly on API keys. Key features include the `/login` and `/logout` commands and automatic credential refresh. A process restart is required after installation, and note that Anthropic billing will be deducted from additional usage.
Read Moredsh-nous-portal-free-provider: DeepSeek Harness Plugin for the Nous Portal Free Tier
This plugin integrates the free models from Nous Portal into DeepSeek Harness (DSH). Core features include OAuth device-code login, dynamic model discovery, reasoning-level support, and an image Offload mechanism. The plugin supports single-use Refresh Tokens and provides concurrent-safe token refresh and retry strategies. Users need to install the plugin and log in via the CLI, noting the single-use nature of the token and the required DSH version.
Read Moredsh-llm-xai-oauth: Using a SuperGrok / X Premium Subscription in DeepSeek Harness
The DeepSeek Harness plugin integrates SuperGrok/X Premium subscriptions into DSH by reusing local tokens, supporting the Grok 4.x model series. Installation requires Node.js ≥ 22.19, can be completed via `dsh plugin add`, and includes OAuth device-code login. The plugin supports automatic token refresh, but a daemon or scheduled task is required to keep it running. To use it, simply specify `provider xai` and `model grok-4.7` in the configuration to invoke it.
Read Moredsh-ticktick: Bidirectional TickTick/Dida365 Task Sync Plugin for DeepSeek Harness
dsh-ticktick is an official plugin for DeepSeek Harness (DSH) that enables agents to synchronize tasks bidirectionally with TickTick. Based on the OAuth 2.0 authorization code flow, it supports fetching, creating, updating, and deduplicating tasks during synchronization, and provides a web dashboard for managing credentials. The plugin uses local encrypted storage to ensure security and is compatible with both the domestic and international versions. Users can install and configure it via commands, and after authorization, allow agents to manage TickTick tasks using natural language.
Read Moredsh-llm-grok: Grok Subscription Login and Configuration Plugin for DeepSeek Harness
The DeepSeek Harness (DSH) Grok plugin `dsh-llm-grok` provides an independent Grok subscription integration for DSH. It does not override native configuration; instead, it handles subscription authorization (using a Host-owned PKCE flow) and model catalog management through a Web interface. It supports the Grok-4.5/4.6 models, server-side search tools, and optional image generation. The plugin depends on `dsh-llm-providers-ui` for card display and has been verified for compatibility with the DSH 0.1.2 and 0.1.5 series.
Read MoreDeepSeek Harness Plugin: Using OpenAI Codex Subscription via OAuth
This document introduces the `dsh-codex-oauth` plugin in the DeepSeek Harness plugin system. It fills a gap in the upstream adapter by providing OAuth credential storage and login commands for Codex authentication. Installation requires addressing pnpm build limitations, and login supports both Web UI and CLI modes. The plugin registers the `codex` provider route, supports models such as `gpt-5.x-codex`, and allows transport and caching policies to be configured via a configuration file. Usage requires a ChatGPT Plus subscription and enforces strict file permissions.
Read Moredsh-llm-local-token: Using Local CLI OAuth Tokens for DSH Model Routing
The `dsh-llm-local-token` plugin resolves the issue where DeepSeek Harness (DSH) cannot use local Codex or Claude OAuth tokens. It reuses local subscriptions as DSH's model route (such as `openai-codex`) and displays real-time usage in the Composer toolbar. The plugin supports automatic token refresh and automatic configuration injection, as well as GLM quota display. Note that GLM quota display depends on the `sse` protocol and requires Node.js >= 22.13.0.
Read More@edge-sky/dsh-oauth-adapter: Add OAuth account page for DSH Web profile
`@edge-sky/dsh-oauth-adapter` is an MIT-licensed plugin providing OAuth account pages for the DSH Web profile. It exposes the existing provider login flow of pi-ai by manually mounting the DSH Authorization Service, supporting providers such as OpenAI Codex, GitHub Copilot, Anthropic, Kimi, OpenRouter, and xAI, and covering various login paths like browser callbacks and Device Code. This plugin is only responsible for providing login entry points and does not manage credentials or maintain login state. Users can install it to the web profile and start it via the `dsh plugin` command.
Read Moredsh-chatgpt-subscription: Bind ChatGPT subscription using official OAuth inside DSH
`dsh-chatgpt-subscription` is a DeepSeek Harness (DSH) plugin maintained by songao25, designed to enable users with ChatGPT Plus/Pro or Codex quotas to integrate ChatGPT into `dsh web` via official OAuth authorization. This plugin supports chatting directly with GPT series models (e.g., gpt-5.6-terra) within the DSH model switcher, consuming official subscription quotas. Core features include: strict official OAuth binding (without reusing existing CLI login), automatic maintenance of Access Token (checks and refreshes every 30 minutes), displaying binding status and Token remaining time on the settings page, and can be used with `Bo...
Read MoreIntegrate OAuth 2.1 MCP into DeepSeek Harness with dsh-oauth-mcp-client
`dsh-oauth-mcp-client` is a DeepSeek Harness community plugin maintained by Springbrand-lab. It adds OAuth 2.1 support (authorization code + PKCE, dynamic client registration, browser login and local callback) based on the native `dsh-mcp-client`. It connects to the Springbrand production MCP Gateway by default, and users can also add other services that support OAuth and Streamable HTTP via the web interface. Tokens are stored by the DSH credential service. It is licensed under MIT, and currently needs to be built locally before being installed into the web profile.
Read MoreManage MCP Servers in DeepSeek Harness Settings Page with dsh-mcp-manager
`dsh-mcp-manager` is a DeepSeek Harness community plugin maintained by hyqhyq3, which manages remote HTTP and local stdio servers in the web interface under **Settings → MCP**. It complements the missing features of the built-in `dsh-mcp-client`, including OAuth (authorization code + PKCE, RFC 7591 dynamic client registration) and stdio transport, with static tokens only referencing environment variable names. Tools are registered in the format `mcp__<name>__*`, optional on-demand broker support is available, and workspace isolation is supported. It is licensed under MIT and requires the web profile.
Read MoreConnect 1000+ External Apps to Agents with Composio Skill
Composio's official Skill teaches AI programming assistants to connect to 1000+ external applications such as Gmail, Slack, GitHub, Notion via a unified CLI and SDK. This article verifies the installation commands, the search→link→execute workflow, user-isolated sessions, as well as the usage boundaries of OAuth and Triggers based on SKILL.md, the repository README and docs.composio.dev.
Read MoreAdding Auth: Enabling AI Agents to Integrate with Auth.js Authentication via Standard Procedures
*adding-auth* has been included in awesome-cursor-skills. The integration of Auth.js v5 with Next.js App Router has been organized into an 8-step workflow: dependency installation, setting up AUTH_SECRET, auth.ts configuration, OAuth setup, Route Handler implementation, login UI and route protection, and optional database Adapter. Verified against the official SKILL.md and Auth.js documentation, this article introduces the installation method and typical usage, suitable for web developers who need to quickly integrate OAuth and sessions.
Read MoreCursor integrates Gmail/Drive/Calendar: Directly read and write Google Workspace within the IDE Agent
On August 3, 2026, Cursor officially released its Google Workspace plugin, allowing coding Agents to access Gmail, Drive and Calendar within the IDE via Google's remote MCP server. This article sorts out the three major plugin capabilities, OAuth installation path, typical scenarios, as well as permissions and security precautions during the preview period, based on the official Changelog, Marketplace and Google developer documentation.
Read MoreRemote MCP Goes Mainstream: Official Hosted Access for GitHub/Vercel/Supabase
In 2026, Remote MCP is becoming the default access method for Agent toolchains: vendors including GitHub, Vercel, Supabase, Linear, Notion, Stripe, and Figma have provided OAuth-protected Streamable HTTP endpoints, allowing developers to use clients such as Claude Code and Cursor to operate PRs, deployments, and databases without local installation. This paper compares the differences between local stdio and Remote MCP, summarizes official endpoints and configuration commands of each vendor, and interprets the stateless core, MRTR interaction and security practices of the MCP 2026-07-28 specification.
Read More