xiaohj233/dsh-credential-handoff

README excerpt

dsh-credential-handoff English 中文 Status: Feature Plugin. Tested with DeepSeek Harness 0.1.0-rc.6. dsh-credential-handoff lets an agent ask for a named credential without placing the secret in model context. The browser opens a conversation-local password dialog, writes the value through DSH's credential service, and returns only fixed status metadata to the tool call. Problem Agents can discover that a credential is missing, but asking the user to paste a key into normal chat exposes it to the transcript and model context. This plugin provides a write-only handoff path for that moment. Behavior The request credential tool accepts a credential reference such as TAVILY API KEY , an optional label, and a reason. One pending request is allowed per session. The dialog expires after ten minutes. The tool result reports only the reference and whether it was configured or replaced. On HTTPS, credential submission is allowed. On plaintext HTTP it is allowed only for exact loopback hosts ( localhost , 127.0.0.1 , and IPv6 loopback). Non-loopback plaintext HTTP is blocked in both the controls and the submit handler. Non-goals This package is not a vault, encryption provider, credential viewe…

Category