arikusi/deepseek-mcp-server

Item: arikusi/deepseek-mcp-server
Rating: 74
Author: M8ven

MCP Server for DeepSeek API integration - enables Claude Code to use DeepSeek Chat and Reasoner models

→ arikusi/deepseek-mcp-server· npm: @arikusi/deepseek-mcp-server· listed on npm

Is this your MCP?

Claim it to get a verified publisher badge, a free copy of our full audit findings, and direct contact for any high-priority issues we find.

Install from

npm Glama PulseMCP

M8ven verifies MCPs across every public registry — install directly from whichever one you prefer.

// key findings

✅

3 tools verified — handlers match their declared behaviour

1 read-only tool verified — handlers contain no write/delete/exec

✅

No credential exfiltration, no sensitive file access, no obfuscation

Static analysis found nothing flowing your secrets to unexpected places.

✅

Open source with a license and README

Anyone can audit the code, the license is declared, and the publisher documents what it does.

🔐

You'll be asked for 2 credentials: DEEPSEEK_API_KEY, HTTP_AUTH_TOKEN

These are read from process.env at runtime. Make sure you trust where they’ll be sent.

// required environment variables

This server reads these from process.env. You'll be asked to provide them before it can run.

🔐 secretDEEPSEEK_API_KEY— "Authorization": "Bearer ${}"

configDEEPSEEK_BASE_URL

configDEFAULT_MODEL— deepseek-chat Default model for requests

configENABLE_MULTIMODAL— Multimodal Ready: Content part types for text + image input (enable with =true)

configFALLBACK_ENABLED— Fallback can be disabled with =false.

configHTTP_ALLOWED_HOSTS— _(unset)_ Comma-separated list of allowed Host headers for DNS rebinding protection when binding to 0.0.0.0 (e.g. mcp.example.com,localhost)

🔐 secretHTTP_AUTH_TOKEN— _(unset)_ When set, POST /mcp requires Authorization: Bearer <token>. /health stays open. Strongly recommended whenever the port is reachable beyond localhost

configHTTP_HOST— 127.0.0.1 Bind address for HTTP transport. Loopback by default so a fresh run is not exposed. Set to 0.0.0.0 to accept remote connections (do this only with auth or a proxy in front)

configHTTP_PORT— 3000 HTTP server port (when TRANSPORT=http)

configMAX_MESSAGE_LENGTH— 100000 Maximum message content length (characters)

configMAX_RETRIES— 2 Maximum retry count for failed requests

configMAX_SESSIONS— 100 Maximum number of concurrent sessions

configMAX_SESSION_MESSAGES— 200 Max messages per session (sliding window)

configREQUEST_TIMEOUT— 60000 Request timeout in milliseconds

configSESSION_TTL_MINUTES— 30 Session time-to-live in minutes

configSHOW_COST_INFO— true Show cost info in responses

configSKIP_CONNECTION_TEST— false Skip startup API connection test

configTRANSPORT— HTTP Transport: Self-hosted remote access via Streamable HTTP with =http

// full audit trail

The full breakdown of what we checked, the deductions that landed, the network hosts, the dependency advisories, and concrete fix guidance is available to verified publishers.

// improvement guidance — verified publishers only

We have 2 concrete improvements we can share with the publisher of this MCP. Each comes with specific guidance to raise the trust score.

// embed badge in your README

[![M8ven Score](https://m8ven.ai/badge/mcp/arikusi-deepseek-mcp-server-18z5cf)](https://m8ven.ai/mcp/arikusi-deepseek-mcp-server-18z5cf)

commit: 54f46dd56eecaac06cb6c56d85aaef0efcc739d5

code hash: 859c88c638ab038db79d09dac08aa5ef146c66b4a0bb0ac240a9c03636e0216d

verified: 6/22/2026, 12:07:01 PM

view raw JSON →