theBigGavin/marketingdashboard
Zero-key market data MCP server (dsh bundle): 5 MCP tools for A-share/HK/US quotes, sector rankings, futures, money flow and 7x24 news, with a three-tier upstream fallback.
Install
via GitHub · GitHub source
Installing from GitHub runs the project's build script, which pnpm blocks until you allowlist it — run the command once and pnpm prints the exact key to add under `allowBuilds` in ~/.dsh/profiles/web/pnpm-workspace.yaml.
The desktop app keeps its own profile, desktop, and only the dsh command it ships may change it — the npm-installed dsh refuses that profile. Install the command from the app menu (Manage dsh Command…), open Desktop once, quit it fully, run the line below, then reopen Desktop.
via GitHub · GitHub source
Installing from GitHub runs the project's build script, which pnpm blocks until you allowlist it — run the command once and pnpm prints the exact key to add under `allowBuilds` in ~/.dsh/profiles/desktop/pnpm-workspace.yaml.
Our install check ran in a web profile on npm's dsh, not in the desktop app.
What happened when we ran it
Installed cleanly when we ran it
Every command here is run in a throwaway container against a clean profile, and the result is whatever the harness recorded — not a guess from the source. Last run 8d agoon DeepSeek Harness 0.2.2-rc.1.
Show it in your README
For maintainers: the badge serves this listing's latest sandbox verdict, so a re-run updates it on its own — and it links readers to the full result here.
Due diligence
Security
No build script was blocked in our run.
Source: our sandbox install on DeepSeek Harness 0.2.2-rc.1, 8d ago.
package.json declares no preinstall, install or postinstall script.
Source: package.json on GitHub, read at our last sync. prepare is not recorded; it runs only on a GitHub install, and shows up under build scripts when pnpm blocks it.
shell commands (bash, exec, spawn …)
Source: a keyword match on the README — a hint about what the plugin touches, not an analysis of its code.
Not an audit. These are the record of one install and two text scans; nobody has read this plugin's code on your behalf. Plugins run with your agent's permissions.
What it is — Zero-key market data MCP server for A-share/HK/US quotes and news
Who it is for — In DeepSeek Harness profile when you need real-time A-share/HK/US quotes and sector rankings Not suitable for users who cannot execute shell commands
Watch out — Sandbox test passed: installed in a new profile and registered by harness. Installation from GitHub source involves shell command execution. No obvious issues found.
The verdict — I would install it if I need market data because of the three-tier upstream fallback.
Generated by grok-4.6, and a starting point rather than a verdict. Where it says a plugin installs or does not, that is from a real run in a clean profile — everything else is read off the repository. Trust the source over this.
marketingdashboard is a DeepSeek Harness plugin that provides five MCP tools for zero-key market research across A-share, Hong Kong and US quotes, sector rankings, futures, money flow and 7×24 news. DeepSeek Harness loads the dsh bundle, which uses a built-in Node.js data proxy to aggregate public upstream endpoints and expose the results through /api/*. The service keeps data in bounded in-memory caches, while the client quote hub in src/lib/market.ts polls every five seconds and shares one quote snapshot across panels. Spot prices are collected every four hours into local history files.
The plugin is intended for agents that need current market context without configuring API keys. Its upstream sources include Tencent Quotes, Sina Finance, Eastmoney, Wallstreetcn, CNBC, Binance and other sources named in the repository. When the proxy is unavailable, some Tencent and Wallstreetcn endpoints can fall back to direct browser connections. The service is single-process and requires Node.js 18 or later.
marketingdashboard is a poor fit where historical, audited or guaranteed-complete financial data is required, or where adding a market-data service duplicates an existing data integration. The listed terminal surface means the plugin can reach the agent's terminal to run its Node-based service and access the local history files it maintains; the README does not document a separate authentication or permission boundary for that service.
The README documents no user-facing configuration keys or required API-key variables. The service is designed to work without API keys and uses the bundled Node proxy by default. DeepSeek Harness installs marketingdashboard in the web profile, and the plugin is delivered as a dsh bundle.
DeepSeek Harness exposes five MCP tools supplied by marketingdashboard for A-share, Hong Kong and US quotes, sector rankings, futures, money flow and 7×24 news. The Node service aggregates public sources and serves application data under api routes, written in the README as /api/*. /api/stats reports request, upstream-fetch and 429 counters. The React frontend polls for updates, while src/lib/market.ts batch-fetches the watched codes every five seconds and distributes one quote snapshot.
The repository documents Node.js 18+ as a requirement. The service is single-process, uses no database or external storage, and keeps endpoint responses in bounded in-memory caches with LRU handling and periodic sweeps. Spot prices are collected by the server every four hours into local history files. The frontend is a React 19 application built with Vite 7 and can also run as a PWA.
Cache lifetimes vary by endpoint: quotes use five seconds, while sector membership can use up to 24 hours. In-flight request deduplication shares one upstream fetch across concurrent misses. Failure backoff applies negative caching from five seconds to two minutes, and browser-direct fallbacks are throttled per code. The upstream summary describes a three-tier fallback arrangement; the README specifically documents direct-browser fallback for some Tencent and Wallstreetcn endpoints.
The README does not specify additional command-line flags or configuration files.
Written from the project's own documentation and kept in sync with it. Where the two disagree, the source is authoritative — read the README on GitHub
Same category
Tencent
Four read-only tools over a WeKnora knowledge base: list knowledge bases, hybrid passage search, reassemble one document's chunks in order, and WeKnora's own cited RAG or ReAct-agent answer with a resumable session id.
No one-line install — this plugin lives inside a larger repository and publishes no npm package.
superdesigndev
Tool catalog for agents: search ~2,600 external endpoints (SEO and SERP, backlinks, social, people and company enrichment, ad libraries, scraping) by the task you want done, read each one's parameters and per-call price, then call it with the credential injected server-side. Ships the skill plus an MCP row that stays disabled until TREG_TOKEN is set.
Installed cleanly when we ran it
T-Auto
Provides bash, PowerShell 7, and high-performance Rust tools for DSH on Windows to reduce token usage.
DeepSeek Harness 0.2.2-rc.1 refuses the latest release
sixtysevenlf
Lets a DSH agent drive a local Blender over a direct TCP channel with 15 tools: viewport frames, custom-angle renders, Python execution, headless and job offload, transaction rollback, and a planning layer of 228 ops across 34 families.
Installs, but needs a build approved first
yjl9903
Anime Garden for DSH: search anime torrent resources from 動漫花園, 蜜柑计划, 萌番组 and ANi inside DSH — via chat, a sidebar panel with fansub and type filters, a seasonal calendar, and an in-app floating player.
No one-line install — this plugin lives inside a larger repository and publishes no npm package.
TencentCloudBase
Tencent CloudBase backend for DeepSeek Harness — scaffold and deploy full-stack apps from chat, render query results as table cards with paging, sorting and CSV export, preview a deployment on its domain, and call the CloudBase MCP toolset (`mcp__cloudbase__*`) with device-code login.
Installed cleanly when we ran it
