At a glance
What it does
Read Xianyu listings, item details, and message history from DeepSeek Harness without registering write tools.
Web Profile
>=0.1.5-rc.1
Evidence-verified
Checked Sep 11, 2026, 2:24 PM UTC
Code-evidenced contributions
What it adds to DSH
Adds search, listing detail, account-listing, chat-history, category, location, and authentication-status tools under mcp__goofish__*.
Mechanism evidence ↗Before you choose it
This DeepSeek Harness bundle launches the goofish-cli MCP server as a local stdio subprocess and exposes its allowed capabilities as mcp__goofish__* tools. It supports searching Xianyu items, viewing item details, checking the current account’s active listings, reading chats and message history, and checking category, location, or authentication status. Publish, delete, upload, send-message, login, and other write-capable tools are filtered out.
Best for
DeepSeek Harness users who need to research Xianyu inventory or monitor an already authenticated account while keeping the Harness tool surface read-only.
Common tasks
- Search Xianyu listings and inspect individual item details.
- Review active listings for the authenticated Goofish account.
- Read chat lists and message history for monitoring or analysis.
- Check the Goofish CLI connection, authentication status, and available read-only tools.
Permissions and data
Uses a local goofish-cli subprocess and its existing authenticated session to retrieve Xianyu data; the bundle is configured to register only read-only tools.
Permissions- Runs the goofish-cli MCP server as a local stdio subprocess.
- Accesses read-only Xianyu search, listing, item, chat-history, category, location, and authentication-status operations.
- Plugin configuration is stored at ~/.dsh/dsh-xianyu.json with 0600 permissions.
- The plugin states that it does not read the login cookie; goofish-cli manages that cookie.
- Xianyu (Goofish) through goofish-cli.
- Install goofish-cli and authenticate it once using its login command or QR flow.
Limitations
- Requires DeepSeek Harness 0.1.5-rc.1 or newer and Node.js ^22.19.0 or >=24.0.0.
- Requires separately installed goofish-cli and a valid CLI-managed Xianyu login.
- Cannot publish, delete, upload media, send messages, change login state, watch messages, or install skills through this bundle.
- Registry package contents were not audited in the supplied evidence.
What DSHub checked
- The pinned commit contains a verified DSH bundle manifest and profile patch.
- The patch enables the plugin, announces it to the agent, and sets readOnly to true.
- The package manifest declares DSH >=0.1.5-rc.1, Node.js requirements, and an MIT license.
- An npm registry identity for version 0.1.2 was verified, though its contents were not audited.
What DSHub did not check
- Installation, restart, external CLI setup, authentication, and runtime behavior were not executed during this curation.
- The README’s claim of testing on DSH 0.1.5-rc.1 was not independently verified.
Pinned install
Install Goofish Read-Only Monitoring
This plugin bundle does not have a DSH Plugin install action. Use its source documentation for the delivery method.
Maintainer source
Project README
dsh-goofish-mcp (Xianyu read-only monitoring for DeepSeek Harness)
闲鱼 (Xianyu / Goofish) 只读数据监控 for DeepSeek Harness.
驱动 goofish-cli 的 MCP 服务器（stdio 子进程），把闲鱼只读数据能力封装为 mcp__goofish__* 工具。写操作工具一律不注册（只读边界，杜绝发布/下架/发消息/改登录态）。
能力
mcp__goofish__search_items— 搜索闲鱼商品（真实返回）mcp__goofish__item_get/item_view— 商品详情mcp__goofish__item_list— 当前账号在售mcp__goofish__message_list_chats/message_history— 会话/消息历史mcp__goofish__category_recommend/location_default/auth_status
本插件不暴露（只读过滤）
item_publish / item_delete / media_upload / message_send / auth_login / auth_reset_guard / message_watch / skills_install
兼容性
要求 DeepSeek Harness ≥ 0.1.5-rc.1（已在包清单的 dsh.engines.dsh 中声明，DSH 插件市场据此显示兼容版本），并已在 0.1.5-rc.1 上实测通过。本构建包含 DSH 0.1.5 的适配：工具结果的严格校验契约（lossless-JSON 快照、additionalProperties: false 的 schema 校验、output.render 必须返回 ContentBlock[]），以及不依赖宿主 PATH 的可执行文件解析（launchd 托管的宿主 PATH 只有 /usr/bin:/bin）。
前置
- 安装 goofish-cli：
uv tool install goofish-cli（提供goofish-mcp） - 登录一次（cookie/二维码）：
goofish auth login或goofish auth login --qr - 确认：
goofish auth status→valid: true
安装 / Install
# from npm (published package)
dsh plugin --profile web add dsh-goofish-mcp
# or local development
dsh plugin --profile web add link:/path/to/dsh-xianyu
# then restart dsh web to activate
Agent 工具
goofish_status— 连接/注册/只读状态goofish_config— 配置 stdio 命令/参数/只读开关goofish_test— 测试连接并列出只读工具goofish_tools— 列出只读工具
配置存 ~/.dsh/dsh-xianyu.json（0600）；登录 cookie 由 CLI 管理，本插件不读。
开发
pnpm install
pnpm typecheck
pnpm build # tsdown -> lib/index.mjs (host only)
Operate deliberately
Install and manage
Prerequisites and target Profile
Target： Web Profile
Delivery： Dsh Bundle Git — zhengjy01/dsh-goofish-mcp#fdb2079d8c99f2b71d797b5be0109053872b88d0。
Verify, update, and remove
Show lifecycle commands
dsh plugin --profile web listCompatibility and access
DeepSeek Harness plugin bundle; Node.js 22.19+ or 24+： >=0.1.5-rc.1。
Review compatibility evidence ↗
Risk facts
Write-capable Goofish tools are intentionally excluded
Evidence ↗Requires a separately installed and authenticated goofish-cli
Evidence ↗Plugin configuration is stored locally with 0600 permissions
Evidence ↗Evidence and editorial reviewManifest, Bundle patch, distribution and freshness
Immutable evidence
Review status and source activity
Use the pinned Git bundle source for the reviewed artifact. Treat Xianyu account and chat data as potentially sensitive.
AI reviewed Sep 11, 2026, 2:25 PM UTC。GitHub facts last checked Sep 11, 2026, 2:25 PM UTC。
No material source change has been recorded since this evidence baseline.