
Security News
GPT-6 Astra Attempts Supply Chain Attacks Against Open Source Maintainers in Testing
GPT-6 Astra hits 100% on ExploitBench and finds zero-days autonomously, while independent tests reveal scope violations and monitoring gaps.
@volcengine/ark-managed-agents
Advanced tools
Volcengine Ark Managed Agents plugin for DeepSeek Harness (DSH): a Managed Agents settings tab plus tools to dispatch tasks to Ark cloud Managed Agents and retrieve their trajectory, result, and artifacts.
A DeepSeek Harness (DSH) plugin that integrates Volcengine Ark Managed Agents (AgentKit/Coze-style cloud agents) into the DSH chat UI. After install and an API key, you can browse your Ark managed agents and dispatch long-running agent tasks directly from DSH via MCP tools.
火山方舟 Managed Agents 插件。将方舟云端托管 Agent(AgentKit/Coze 风格)接入 DSH 对话界面;安装并配置 API Key 后,即可在 DSH 中浏览你的 Managed Agent、通过 MCP 工具派发长任务、取回执行轨迹与产物。
This package ships two runtime pieces:
本插件包含两部分:
mcp__ark_ma__*).
服务端:cordis 插件,启动本地 stdio MCP 服务,将 Ark Managed Agents 操作暴露为 MCP 工具(mcp__ark_ma__*)。npx -y @deepseek-ai/dsh plugin --profile web add @volcengine/ark-managed-agents
npx -y @deepseek-ai/dsh plugin --profile web add https://github.com/volcengine/ark-cli/releases/download/dsh-plugins%2Fv0.1.0/ark-managed-agents.tgz
npx -y @deepseek-ai/dsh plugin --profile web add volcengine/ark-cli#ark-managed-agents
npx -y @deepseek-ai/dsh plugin --profile web add ./dsh-plugins/ark-managed-agents
Restart DSH after install. The MCP server row carries a config: entry and only activates on the next host start. After restart, open Settings → Managed Agents to configure credentials.
安装后必须重启 DSH(MCP 服务在 config: 行注册,需重启生效)。重启后打开 Settings → Managed Agents 配置凭据。
Configure in the UI settings panel (preferred), or via environment variables (used as fallback):
在 UI 设置面板中配置(推荐),或通过环境变量配置(作为兜底):
| Setting / 设置项 | Env var / 环境变量 | Purpose / 说明 |
|---|---|---|
| API Key | ARK_MA_API_KEY / ARK_API_KEY | Volcengine Ark API key. ARK_API_KEY is used as a shared fallback. / 方舟 API Key;ARK_API_KEY 作为通用兜底。 |
| Base URL | ARK_MA_BASE_URL | API base URL. Default: https://ark.cn-beijing.volces.com/api/agentkit. / API 基础地址,默认指向 cn-beijing AgentKit。 |
| Default Model | ARK_MA_MODEL | Model ID used when an agent does not specify one. / Agent 未指定模型时使用的默认模型 ID。 |
After restart, the following tools (prefixed mcp__ark_ma__) are available to the model:
重启后模型可使用以下工具(前缀 mcp__ark_ma__):
| Tool / 工具 | Purpose / 用途 |
|---|---|
ma_list_agents | List agents in the configured Ark account / 列出账号下的 Agent |
ma_dispatch_task | Dispatch a task to a specified agent / 向指定 Agent 派发任务 |
ma_get_status | Poll a running task's status / 查询任务运行状态 |
ma_get_trajectory | Retrieve a task's execution trajectory (thoughts, tool calls) / 获取任务执行轨迹(思考、工具调用) |
ma_get_result | Retrieve a completed task's final result / 获取已完成任务的最终结果 |
ma_list_artifacts | List artifacts produced by a task / 列出任务产生的产物 |
ma_download_artifacts | Download task artifacts to local disk / 将任务产物下载到本地 |
toolCallTimeoutMs is set to 5 minutes (300000 ms) to accommodate long-running agent tasks.
工具调用超时设为 5 分钟(300000 ms),以适配长时间运行的 Agent 任务。
process.execPath with ELECTRON_RUN_AS_NODE=1, so it works under both the dsh CLI and the DSH desktop app.
MCP 服务以本地 Node.js 子进程运行(使用 process.execPath + ELECTRON_RUN_AS_NODE=1),同时兼容 dsh CLI 与桌面版 DSH。failOnStartupError: false is set so a misconfigured API key does not prevent DSH from starting; configure the key and restart when ready.
设置了 failOnStartupError: false,API Key 配置错误不会阻止 DSH 启动;填好后重启即可。Apache-2.0 © 2025-2026 Beijing Volcano Engine Technology Co., Ltd.
FAQs
Volcengine Ark Managed Agents plugin for DeepSeek Harness (DSH): a Managed Agents settings tab plus tools to dispatch tasks to Ark cloud Managed Agents and retrieve their trajectory, result, and artifacts.
The npm package @volcengine/ark-managed-agents receives a total of 73 weekly downloads. As such, @volcengine/ark-managed-agents popularity was classified as not popular.
We found that @volcengine/ark-managed-agents demonstrated a healthy version release cadence and project activity because the last version was released less than a year ago. It has 48 open source maintainers collaborating on the project.

Security News
GPT-6 Astra hits 100% on ExploitBench and finds zero-days autonomously, while independent tests reveal scope violations and monitoring gaps.

Product
Socket can now send alerts and supply chain attack notifications to Microsoft Teams, with filters that route the right updates to each channel.

Security News
pnpm 12 rewrites the package manager in Rust, cutting install times by up to 90% while preserving pnpm 11 workflows and lockfiles.