Claude Code-style declarative permission rules for DeepSeek Harness: ordered allow/deny/ask rules with tool-name, argument (glob/regex), and workspace-path matching on the tools/pre-execute waterfall, session-log audit, and HMR reload.

Grade Claude Code, Gemini CLI and Cursor configs for risky permissions; get public config stats.

DSH permission-gate for the DeepSeek Harness 0.1.5 line: a single self-sufficient, deterministic-first, fail-closed gate covering P0 hard-deny -> P1 session grant -> P2 static rule (allow/deny) chain -> P3 optional LLM semantic classifier -> P4 ask, with

Access gate for AI coding harnesses (DSH plugin + Claude Code hook): per-directory deny/read/full, roster groups, audit log, model-facing tools with owner-approved widening.

A Claude Code mod that puts a live agent dashboard in your terminal: context and cost, advisor timeline, every permission check, subagent cards and swimlanes.

Claude Code plugin: use ChatGPT (Codex), Cursor, OpenCode Zen, and Antigravity models inside one Claude Code session. Switch with /model, delegate to named native workers, keep each provider's own login and permissions.

Connects AI agents to a user's mailbox with OAuth-scoped permissions, enabling email sending, inbox management, verification-email capture for tests, and migration from Resend.

Provides a local MCP bridge to an end-to-end encrypted personal vault, enabling connected agents to search and save memories, manage accounts and credentials, access personal information and private addresses, and honor granular user permissions.

Enables agents to set up and manage named connections to a user's own machine, keeping credentials in private local files while requiring explicit permission review. Runs locally over stdio with no hosted endpoint and preserves existing manager state.

A free, read-only server that lets users diagnose production AI-agent risks: it flags over-privileged API keys from permission descriptions, scans code snippets for the signals that prevent duplicate execution, and explains guard patterns such as idempotency keys, approval gates, outboxes, and circuit breakers. It makes no network calls or writes, and rejects inputs that look like real secrets.

Agent plugin for major harnesses — DeepSeek Harness (DSH), OpenCode, Pi and Codex: define custom AI agent roles with per-role prompts, models, skills, permissions, memory and multi-agent orchestration.

One inbox for all your addresses: your AI agent reads, sorts, drafts and sends with your permission.

Open-source GrokBot alternative built on DeepSeek Harness. Build your personal bot team: multiple personal agents with persistent memory, identities and permissions, extensible through DSH plugins.｜基于 DeepSeek Harness 的开源 GrokBot 平替：有长期记忆的个人 AI Bot 团队，支持多 Bot 协作、身份权限与插件生态扩展。MIT.

为 DeepSeek Harness 提供电脑控制插件：新鲜 Accessibility 观测、过期状态拒绝、作用域权限与安全输入（目前支持macos）｜Accessibility-first macOS Computer Use bundle for DSH with fresh observations, stale-state rejection, scoped permissions, and safe input.

Permission-first rules, agents, skills and workflows for AI coding agents. One source → native CLAUDE.md, AGENTS.md and GEMINI.md for Claude Code, OpenAI Codex and Google Antigravity. Claude Code plugin + one-line install.

The open-source context layer for AI agents. PipesHub turns your company's knowledge (Slack, Drive, Jira, GitHub, Microsoft 365 and 40+ connectors) into a permission-aware workspace that agents can search, grep, navigate and cite. MCP, SDKs and built-in agents. Self-hosted.

Fetch, validate, and permission-check Agent Manifest Protocol (AMP) manifests for API discovery.

Enables MCP hosts to spawn, supervise, and collect results from parallel panels of pinned-model OpenCode v2 agents for delegated tasks, reviews, and cross-model comparisons. Supports per-member roles, models, permissions, follow-up prompts, cancellation, and persisted result retrieval.

Enables AI agents to read messages from user-approved WhatsApp chats via a blocking long-poll tool and send signed replies to chats where the user has explicitly allowed responses. Permissions, watch/reply switches, and a live feed of everything the agent sees and sends are managed through a local web UI.

The most powerful MCP Slack Server with no permission requirements, Apps support, GovSlack, DMs, Group DMs and smart history fetch logic.

Enables agents to retrieve permission-filtered document knowledge across organizations and knowledge bases, and to identify and expand business terms and typed object relationships through a unified MCP interface.

Gives AI agents read-only access to curated, deduplicated, and well-described data products, complete with source metadata, freshness tracking, and per-agent permissions that preserve the source's access rights. The server can also answer "I don't know" rather than guessing when the approved data doesn't cover a question.

Sovereign AI agents for business: answers from company data, each person's permissions, approvals.

Shared second brain for any AI with agent permissions