Skip to content
  • Home
  • Plugin manual
  • dsh-vault

Ox0400/dsh-vault

20Last commit Aug 15, 2026

dsh-vault DSH plugin

dsh-vault installs a DeepSeek Harness bundle that adds a vault plugin for encrypted local credential storage, retrieval, search, password generation, and TOTP generation. It includes seven vault tools and a browser-based Settings UI.

ui-productivitydeveloper-toolsbrowser-websecurity-policyskills-workflowsremote-executiondemo

How to install the dsh-vault DSH plugin

dsh plugin --profile demo add dsh-vault

Copying does not run this command. Review the repository and version before use.

Data source

Snapshot date: Aug 15, 2026

manifest-valid

What the dsh-vault DSH plugin can do

  • Stores login, SSH, API-key, secret, OAuth, custom, and TOTP credential records.
  • Encrypts vault entries at rest using Node.js crypto with scrypt-derived keys and AES-256-GCM, as described by the repository.
  • Provides vault_add, vault_get, vault_search, vault_update, vault_delete, vault_totp, and vault_generate_password tools.
  • Returns secret-free summaries from vault_search; full credential data is retrieved by explicit ID with vault_get.
  • Supports readonly, ask-before-write, and automatic read-write access modes.
  • Provides a Settings UI for configuration and access-mode selection.
  • Supports npm, GitHub, local-path, and tarball installation paths.

Where the dsh-vault DSH plugin fits

  • Keep SSH connection details available to DeepSeek Harness workflows.
  • Store API keys, OAuth tokens, and other developer credentials for explicit retrieval.
  • Generate TOTP codes from saved TOTP secrets.
  • Generate strong passwords and save account credentials locally.
  • Require approval for credential writes through the ask access mode.

Who the dsh-vault DSH plugin is for

  • DeepSeek Harness users managing personal credentials.
  • Developers who use SSH, API keys, OAuth tokens, or TOTP secrets.
  • Users who want model-accessible credential tools with configurable write access.

dsh-vault DSH plugin limitations

  • Vault security is bounded by the strength of the master password.
  • Forgetting the master password permanently prevents access to stored data, according to the README.
  • Secrets returned through vault_get enter the tool result and model context.
  • The project states it targets single-machine, personal deployments; team-shared vaults are out of scope.
  • GitHub-source installation may require allowing its prepare build script in pnpm.
  • The package requires Node.js 20 or later.

Objective checks

These signals come from public metadata scans. They are not a security certification.

  • dependency counts

    package.json declares 0 runtime, 14 development, 8 peer, and 0 optional dependencies.

    info

  • dsh bundle declared

    package.json declares DSH bundle metadata.

    info

  • license declared

    GitHub reports the repository license as MIT.

    info

  • package manifest available

    A root package.json was captured and can be inspected by the registry.

    info

  • prepare script detected

    package.json declares a prepare lifecycle script that may run during relevant package installation workflows.

    info

  • source available

    Public GitHub source metadata is available for this registry snapshot.

    info

dsh-vault DSH plugin alternatives

dsh-vision-router

77

DeepSeek Harness vision-routing plugin with provider fallback chains and pixel-level image tools.

dsh-automation

32

Schedule standalone coding tasks in fresh DeepSeek Harness Agent sessions, with workspace-scoped controls and durable run history.

dsh-robotic-harness

12

An installable DeepSeek Harness bundle for robotics and embodied-intelligence research workflows.

dsh-chat-import

30

Import, resume, export, and incrementally sync agent chat histories in DeepSeek Harness.

dsh-vault DSH plugin questions

What is the dsh-vault DSH plugin?

dsh-vault is a project included in the current DSH plugin snapshot. This page organizes repository metadata and reviewed notes, but you should still inspect the upstream repository before running it.

How do I install the dsh-vault DSH plugin?

The page shows the install command captured from the source record. Copying does not run it, so confirm the package, profile, and version against upstream documentation first.

Which DSH profile does dsh-vault use?

The snapshot records demo as the dsh-vault profile. DSH conventions can change quickly, so verify the manifest and README before installation.

Is dsh-vault compatible with the current DSH release?

The source data does not include a verified compatibility matrix. Check recent commits, releases, and DSH breaking changes, then test in a profile you can roll back.

What should I do if dsh-vault fails to load?

Check the install command, selected profile, dependency logs, and Cordis startup output first. Keep the exact error string, then compare it with this site's fix pages and upstream issues.

What are the closest alternatives to dsh-vault?

Related plugins on this page come from the current snapshot and are only candidates. Compare capabilities, maintenance activity, installation method, and limitations before choosing one.