Back to MCP Trust Indexm8ven
B
Emerging
89/100
6 hours ago

dsh-chatgpt-bridge

MCP bridge enabling ChatGPT to create, view, and control DeepSeek Harness agent sessions, with session management, messaging, and approval tools.

→ jiezeng2004-design/dsh-chatgpt-bridge· npm: dsh-chatgpt-bridge· listed on glama

Emerging. No concerning findings. Grades remain capped until the project builds reputation through adoption. Grades reflect the full trust pyramid: code, verification depth, and reputation. New projects cap at C until adoption is earned.

How we verified

Code Verified⚡ Live Monitored

Monitored 1 day · every push re-verified

Who stands behind it

gmail.com (@jiezeng2004-design) · Ownership Verified

Source: Glama

Maintenance & responsiveness
as of 2026-08-19
Issue response: no maintainer replies in sample
Issues closed (90d): 0 · 1 open
Releases (90d): 3
Active contributors (6mo): 1

Install from

Glama

M8ven verifies MCPs across every public registry — install directly from whichever one you prefer.

// key findings
✅
No credential exfiltration, no sensitive file access, no obfuscation
Static analysis found nothing flowing your secrets to unexpected places.
✅
Open source with a license and README
Anyone can audit the code, the license is declared, and the publisher documents what it does.
Are you the publisher? Confirm or correct these findings.
// quality suggestions

Tool annotations

No tools have read-only/destructive annotations

Add readOnlyHint or destructiveHint annotations to every tool so hosts can warn users before invoking.

All four hints declared on every tool

15/15 tools missing one or more hints — dsh_health (missing: readOnlyHint, destructiveHint, idempotentHint, openWorldHint); dsh_list_workspaces (missing: readOnlyHint, destructiveHint, idempotentHint, openWorldHint); dsh_create_session (missing: readOnlyHint, destructiveHint, idempotentHint, openWorldHint), +12 more. OpenAI's directory rejects tools where any of the four hints are missing or non-boolean.

For every tool, set all four hints (readOnlyHint, destructiveHint, idempotentHint, openWorldHint) to explicit true/false values that match the handler’s actual behaviour.

Shell command execution

2 child_process/subprocess calls in production code — runs shell commands (lib/temp-resources.js:103, src/temp-resources.ts:144)

Prefer library functions over shell-outs. If you must shell out, ensure all inputs are properly escaped.

// embed badge in your README
[![M8ven Score](https://m8ven.ai/badge/mcp/jiezeng2004-design-dsh-chatgpt-bridge-14d0zo)](https://m8ven.ai/mcp/jiezeng2004-design-dsh-chatgpt-bridge-14d0zo)
Shows your grade and updates automatically. Prefer no grade? Append ?variant=verified to the badge URL.
commit: 53d1d1dda8240bf88b69292c471fd3f4c20b5504
code hash: b9bd6edf1e8a5cbafbb02a2203a35ea2e90688131a695cd2fd3ba33cfa62269b
verified: 8/19/2026, 11:22:29 AM
view raw JSON →
Check MCPs from inside your assistant
Tool Check · MCP

Vetting this one by hand? Tool Check is an MCP that scores other MCPs. Add it once and ask Claude, ChatGPT, or any MCP client to grade a server, surface CVEs, check the publisher, and suggest safer alternatives — before you install.

https://m8ven.ai/api/mcp/tool-check
check_toolsearch_toolscompare_toolsrecommend_alternativescheck_publisherreport_concern
How to add it →Free · no account needed · works in any MCP client