
Security News
Deno Goes the Way of the Dinosaur
Cloudflare is acquiring Deno’s team, which will provide another year of bug fixes and security updates before ending support for the runtime.
dsh-feishu-mcp
Advanced tools
Feishu (Lark) OpenAPI MCP connection for DeepSeek Harness: drives the official @larksuiteoapi/lark-mcp stdio server with your Feishu app credentials, exposes Feishu API tools (IM messages, Bitable, docs, calendar, drive) under mcp__feishu__*, and a web se
Connect DeepSeek Harness (DSH) to Feishu / Lark through the official @larksuiteoapi/lark-mcp server: the plugin spawns the official MCP server as a subprocess with your Feishu app credentials, discovers its tools, and registers them on the agent as mcp__feishu__* — so the DSH agent can send IM messages, read/write Bitable (multidimensional tables), manage docs, calendar, drive, and more, using your Feishu app's permissions.
A web settings panel (Settings → 飞书) configures the App ID / App Secret, shows connection status, and lists the discovered tools.
中文说明见 README.zh.md。
@larksuiteoapi/lark-mcp (Feishu OpenAPI MCP, Beta) over stdio — no reverse proxy, no public IP needed.-t presets) becomes an agent tool mcp__feishu__* — e.g. mcp__feishu__im_v1_message_create, mcp__feishu__bitable_v1_app_create.appId/appSecret (tenant identity) and optionally a userAccessToken (user identity for private resources).feishu_status / feishu_config / feishu_test / feishu_tools.Requires DeepSeek Harness ≥ 0.1.5-rc.1 (declared as dsh.engines.dsh in the package manifest, so the DSH plugin marketplace can report it) and is verified against 0.1.5-rc.1. This build carries the DSH 0.1.5 adaptations: the strict tool-result contract (lossless-JSON snapshot, additionalProperties: false schema validation, and output.render returning ContentBlock[]) plus executable resolution that survives a launchd-started host whose PATH is only /usr/bin:/bin. Since this version the peerDependencies range explicitly declares compatibility with DSH 0.2.0-rc.2 (^0.2.0-rc.2 is now included), so no compatibility warning appears on 0.2.0-rc.2. No functional change.
im:message, bitable:app, docx:document, calendar:calendar, drive:drive …) and publish a version.# from npm (published package)
dsh plugin --profile web add dsh-feishu-mcp
# or local development
dsh plugin --profile web add link:/path/to/dsh-feishu-mcp
# restart dsh web to activate
Via the web settings panel (Settings → 飞书), or the agent tool:
feishu_config appId=<cli_xxx> appSecret=<your_secret>
Optional user identity (for private resources):
feishu_config userAccessToken=<user_access_token>
After connecting, the agent sees the Feishu tools as mcp__feishu__*. Verify:
feishu_test
pnpm install
pnpm build && node tests/smoke.mjs
MIT
FAQs
Feishu (Lark) OpenAPI MCP connection for DeepSeek Harness: drives the official @larksuiteoapi/lark-mcp stdio server with your Feishu app credentials, exposes Feishu API tools (IM messages, Bitable, docs, calendar, drive) under mcp__feishu__*, and a web se
The npm package dsh-feishu-mcp receives a total of 88 weekly downloads. As such, dsh-feishu-mcp popularity was classified as not popular.
We found that dsh-feishu-mcp demonstrated a healthy version release cadence and project activity because the last version was released less than a year ago. It has 1 open source maintainer collaborating on the project.

Security News
Cloudflare is acquiring Deno’s team, which will provide another year of bug fixes and security updates before ending support for the runtime.

Security News
Anthropic’s free OSS Scanner uses Mythos and other Claude models to find open source vulnerabilities and send maintainers reports with proposed fixes.

Security News
On Front Lines’ Early Adopters: CISO podcast, Andrew Becherer shares lessons from Datadog, weighs the long-term costs of AI-built tools, and explains how founders can actually gain a CISO’s trust.