Skip to main content
Glama
DeepSeek Capability Hub

DeepSeek Capability Hub

by NeoXider

Capability Hub es un broker de MCP y habilidades con carga diferida para DeepSeek Harness y otros clientes MCP. El host ve una única herramienta compacta, capability_hub, en lugar de pagar el costo de contexto de cada esquema de herramienta de todos los servidores configurados.

El agente busca en un catálogo ligero, inspecciona los permisos, activa un servidor de confianza, lo invoca a través del hub y puede volver a apagarlo. El contenido de las habilidades solo se carga después de la selección.

Por qué existe

Las configuraciones MCP estáticas grandes desperdician contexto y hacen que la elección de herramientas sea más ruidosa. Capability Hub mantiene estable la superficie expuesta al modelo:

search → inspect → enable → tools → call → disable
  • Un esquema fijo permanece en el prompt de Harness.

  • Los esquemas de las herramientas hijas permanecen fuera del contexto del modelo hasta que se solicitan.

  • tools devuelve nombres y descripciones por defecto; los esquemas completos son opcionales.

  • Los procesos MCP se inician de forma diferida y viven solo mientras dura el proceso del hub.

  • Las habilidades se descubren mediante metadatos y se cargan una a una.

  • Las adiciones de terceros entran en una cola de aprobación humana; el modelo no puede aprobar código ejecutable por sí mismo.

Related MCP server: capability-router

Inicio rápido

Requisitos: Node.js 22.19+ y pnpm.

git clone https://github.com/NeoXider/deepseek-capability-hub.git
cd deepseek-capability-hub
pnpm install --frozen-lockfile
pnpm test
pnpm client -- --json '{"action":"search","query":"demo"}'

El catálogo predeterminado solo incluye un MCP echo integrado y una habilidad de ejemplo de ML. Las pruebas no descargan ni ejecutan paquetes de terceros.

Configuración de DeepSeek Harness

Compila el hub y luego fusiona examples/dsh/cordis.patch.yml en el perfil activo de Harness Web y ajusta la ruta absoluta del repositorio. Reinicia Harness.

pnpm build

Harness expondrá una herramienta orientada al modelo:

mcp__capability_hub__capability_hub

Para empezar:

{"action":"search","query":"web research"}

Contrato orientado al modelo

El esquema público es deliberadamente plano para que los motores de decodificación restringida, como LM Studio, puedan compilarlo de forma fiable. Los argumentos arbitrarios de las herramientas hijas viajan como cadenas JSON.

Descubre y llama a una herramienta:

{"action":"tools","name":"web-search-neo"}
{
  "action": "call",
  "name": "web-search-neo",
  "tool": "web_info",
  "argumentsJson": "{\"topic\":\"search_status\"}"
}

Acciones disponibles:

Action

Purpose

search

Buscar metadatos compactos de capacidades

inspect

Revisar una capacidad, sus permisos, su configuración y el estado del entorno

configure

Configurar valores no secretos permitidos mediante configJson

enable / disable

Iniciar o detener un MCP de confianza

tools

Listar las herramientas hijas; los esquemas siguen siendo opcionales

call

Hacer de proxy de una llamada a una herramienta hija mediante argumentsJson

skill.load

Cargar una habilidad local aprobada

propose

Almacenar una propuesta no confiable desde entryJson

proposals

Listar propuestas pendientes

catalog.reload

Recargar el estado del catálogo aprobado

Ejemplos reales de integración

Se incluyen propuestas listas para revisar:

  • Web Search Neo — búsqueda web dinámica y herramientas de navegador.

  • Unity CLI MCP — el transporte oficial de la CLI de Unity. Su lista de herramientas solo se llena mientras haya un Editor de Unity con Unity Pipelines conectado.

Estos archivos son ejemplos, no valores predeterminados en los que se confíe en silencio. Revisa rutas, versiones y permisos antes de aprobarlos.

Instalación con supervisión humana

Las propuestas creadas por el modelo se guardan en data/state/pending y no pueden ejecutarse. Aprueba desde un comando separado operado por una persona:

node dist/src/admin.js approve <proposal-id> --state .\data\state --yes

Después llama a catalog.reload y enable. Prefiere versiones de paquetes fijadas o revisiones de Git inmutables; evita instaladores flotantes de latest en las entradas aprobadas.

Catálogos, secretos y habilidades

  • Transportes MCP: stdio y streamable-http.

  • Plantillas: ${catalogDir}, ${packageDir} y valores ${config:key} explícitamente permitidos.

  • Secretos: solo referencias a variables de entorno. Las claves de configuración del modelo que parecen secretos se rechazan.

  • Habilidades: archivos Markdown locales aprobados, cargados bajo demanda, con un límite de 256 KiB.

  • Estado: el archivo de configuración de ejecución y las propuestas son ignorados por Git.

Consulta SECURITY.md para conocer el límite de confianza.

Alcance actual

  • Las llamadas a herramientas se transfieren por proxy; los recursos y prompts de los MCP secundarios aún no están integrados.

  • La reconexión es explícita: disable y después enable.

  • La descarga remota de habilidades, la verificación de firmas y los instaladores en entorno aislado son trabajo futuro.

  • Un modelo con acceso sin restricciones al shell del host puede evitar la política local del plugin; utiliza los permisos de Harness como límite principal.

Proyecto complementario

¿Quieres una vista compacta y animada de escritorio de agentes, contexto, modelos, razonamiento y chat? Consulta DeepSeek Harness Widget.

Contribuciones

Las issues y las pull requests específicas son bienvenidas. Las nuevas integraciones deben incluir un ejemplo fijado, una descripción de permisos restringida y una prueba de extremo a extremo.

MIT © NeoXider

Available Tools

1 tool
capability_hubLazy MCP and skill capability hubA

Search and inspect a compact catalog, enable a trusted MCP only when needed, list its tools, proxy a tool call, or load one skill body. Shortest path: action "call" with name, tool and arguments starts the server by itself; use action "tools" (optionally with a query) first only when you do not know the tool name, and "enable" only to start one deliberately. Long results arrive in pages: continue with action "page" and the cursor printed on the last line. Avoid includeSchema unless you need the argument shape. Third-party proposals require human approval outside this MCP. Available capabilities — demo-echo (mcp): Bundled local MCP used to verify dynamic discovery, enable, tool listing, calls, and disable. | ml-experiment-review (skill): Review an ML experiment as a falsifiable, reproducible evidence package.

NameRequiredDescriptionDefault
kindNoOptional capability type filter.
nameNoExact capability name.
toolNoRaw child MCP tool name for call.
queryNoSearch text. With action search it filters the catalog; with action tools it filters that server's tool names and descriptions.
actionYesOperation to perform.
cursorNoFor action page: the cursor from a paged result's last line.
argumentsNoCall arguments as an object (e.g. {"url":"https://example.com"}). Prefer this over payloadJson for action call; the two must not be combined.
payloadJsonNoJSON object for the action: arguments for call (e.g. {"url":"https://example.com"}), non-secret whitelisted configuration for configure and enable, or a capability proposal for propose.
includeSchemaNoInclude full child tool schemas. Leave false unless arguments cannot be inferred.

TDQS

A4/5.0
Behavior4/5

Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?

Annotations declare openWorldHint/readOnlyHint/destructiveHint, and the description adds real context beyond them: calls self-start the backing server (a side effect), results are paginated with a cursor printed on the last line, and third-party proposals need human approval outside this MCP. It does not say what enable/disable do to persistent state or how failures surface.

Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.

Conciseness4/5

Is the description appropriately sized, front-loaded, and free of redundancy?

The shortest-path instruction is front-loaded and each sentence carries distinct operational information (routing, pagination, schema flag, approval gate). The trailing capability listing is useful for discovery but is volatile content embedded in a definition, adding length that will date quickly.

Shorter descriptions cost fewer tokens and are easier for agents to parse. Every sentence should earn its place.

Completeness4/5

Given the tool's complexity, does the description cover enough for an agent to succeed on first attempt?

For a 13-action dispatcher with no output schema, the description covers the critical call/tools/enable/page flows plus the approval constraint well enough to act on. Completeness falls short on the secondary actions (status, configure, disable, propose, proposals, catalog.reload), which an agent must infer from enum names alone.

Complex tools with many parameters or behaviors need more documentation. Simple tools need less. This dimension scales expectations accordingly.

Parameters4/5

Does the description clarify parameter syntax, constraints, interactions, or defaults beyond what the schema provides?

Schema coverage is 100%, so the baseline is 3, but the description adds action-to-parameter coupling the schema does not express: name+tool+arguments for "call", query as an optional filter for "tools", cursor from the last line for "page". It does not clarify when payloadJson is required over arguments beyond the schema's own note.

Input schemas describe structure but not intent. Descriptions should explain non-obvious parameter relationships and valid value ranges.

Purpose4/5

Does the description clearly state what the tool does and how it differs from similar tools?

The description names specific verbs and resources — search/inspect a catalog, enable an MCP, list its tools, proxy a call, load a skill body — so the hub's role is unmistakable. It omits any explanation of several enum actions (status, configure, disable, propose, proposals, catalog.reload), leaving those to the bare enum labels.

Agents choose between tools based on descriptions. A clear purpose with a specific verb and resource helps agents select the right tool.

Usage Guidelines4/5

Does the description explain when to use this tool, when not to, or what alternatives exist?

It gives an explicit shortest path (action "call" with name/tool/arguments auto-starts the server), states when to use "tools" instead (only when the tool name is unknown), and when to use "enable" (only to start deliberately), plus "avoid includeSchema unless...". Guidance is absent for the remaining actions, including the easily confused propose vs. proposals and configure vs. enable pairs.

Agents often have multiple tools that could apply. Explicit usage guidance like "use X instead of Y when Z" prevents misuse.

Tool Schema Changelog

Recent tool additions, removals, and schema changes observed during successful MCP inspections.

  1. 1 tool updatev0.10.3
    • Changedcapability_hub8 fields changed
      • changedInput schema / properties / arguments / additionalProperties
        Previous value: -{}New value: +true
      • addedInput schema / properties / arguments / properties
        Added value: +{}
      • removedInput schema / properties / arguments / propertyNames
        Removed value: -{
        -  "type": "string"
        -}
      • removedInput schema / properties / cursor / maxLength
        Removed value: -80
      • removedInput schema / properties / name / maxLength
        Removed value: -80
      • removedInput schema / properties / payloadJson / maxLength
        Removed value: -200000
      • removedInput schema / properties / query / maxLength
        Removed value: -500
      • removedInput schema / properties / tool / maxLength
        Removed value: -500
  2. 1 tool updatev0.10.1
    • Changedcapability_hub2 fields changed
      • changedInput schema / properties / action / enum
        Previous value: -[
        -  "search",
        -  "inspect",
        -  "status",
        -  "configure",
        -  "enable",
        -  "disable",
        -  "tools",
        -  "call",
        -  "skill.load",
        -  "propose",
        -  "proposals",
        -  "catalog.reload"
        -]New value: +[
        +  "search",
        +  "inspect",
        +  "status",
        +  "configure",
        +  "enable",
        +  "disable",
        +  "tools",
        +  "call",
        +  "skill.load",
        +  "propose",
        +  "proposals",
        +  "catalog.reload",
        +  "page"
        +]
      • addedInput schema / properties / cursor
        Added value: +{
        +  "description": "For action page: the cursor from a paged result's last line.",
        +  "maxLength": 80,
        +  "type": "string"
        +}
  3. 1 tool updatev0.8.0
    • Changedcapability_hub1 field changed
      • addedInput schema / properties / arguments
        Added value: +{
        +  "additionalProperties": {},
        +  "description": "Call arguments as an object (e.g. {\"url\":\"https://example.com\"}). Prefer this over payloadJson for action call; the two must not be combined.",
        +  "propertyNames": {
        +    "type": "string"
        +  },
        +  "type": "object"
        +}
  4. 1 tool updatev0.3.1
    • Changedcapability_hub5 fields changed
      • removedInput schema / properties / argumentsJson
        Removed value: -{
        -  "description": "JSON object forwarded to the selected child MCP tool, for example {\"query\":\"MCP\"}.",
        -  "maxLength": 100000,
        -  "type": "string"
        -}
      • removedInput schema / properties / configJson
        Removed value: -{
        -  "description": "JSON object with non-secret configuration. Only catalog-whitelisted keys are accepted.",
        -  "maxLength": 100000,
        -  "type": "string"
        -}
      • removedInput schema / properties / entryJson
        Removed value: -{
        -  "description": "JSON capability proposal. It remains untrusted until a human approves it outside this MCP.",
        -  "maxLength": 200000,
        -  "type": "string"
        -}
      • addedInput schema / properties / payloadJson
        Added value: +{
        +  "description": "JSON object for the action: arguments for call (e.g. {\"url\":\"https://example.com\"}), non-secret whitelisted configuration for configure and enable, or a capability proposal for propose.",
        +  "maxLength": 200000,
        +  "type": "string"
        +}
      • changedInput schema / properties / query / description
        Previous value: -"Search text for names, descriptions, and tags."New value: +"Search text. With action search it filters the catalog; with action tools it filters that server's tool names and descriptions."
  5. 1 tool updatev0.1.0
    • First observedcapability_hub

TDQS

A3.9/5.0

Scored across 1 tool

Disambiguation3/5

There is only one tool, so there is no cross-tool misselection risk. However, capability_hub multiplexes many behaviors behind an action parameter, so the agent must distinguish search, enable, tools, call, page, and skill-loading modes internally.

Naming Consistency5/5

There is a single tool named capability_hub, using consistent snake_case, and its action values appear to follow a simple lowercase convention. With only one exposed tool, naming consistency is inherently strong.

Tool Count3/5

A one-tool gateway can be intentional for a capability hub that dynamically discovers and proxies other MCPs. Still, exposing all discovery, enablement, listing, invocation, paging, and skill loading through one polymorphic tool feels thin and pushes complexity into parameters.

Completeness4/5

The tool covers discovery, inspection, deliberate enablement, tool listing, proxied calls, pagination, and skill loading, which is broad lifecycle coverage for a hub. Minor gaps remain, such as no explicit disable action despite the demo-echo capability mentioning disable verification.

Maintenance

ActivityMaintained
ResponsivenessNo recent community issues

Related MCP Connectors

Related MCP Servers

  • F
    license
    Not graded
    quality
    C
    maintenance
    Enables agents to securely discover and invoke a centrally governed catalog of tools from distributed internal and external providers, with policy enforcement, quotas, inspection, and audit controls.
    -
  • A
    license
    Not graded
    quality
    C
    maintenance
    Enables agents to search a local catalog, load skills, inspect MCP tool schemas, and invoke selected tools through a single unified MCP tool, reducing per-request overhead.
    1
    MIT
  • F
    license
    Not graded
    quality
    B
    maintenance
    Gives AI agents a single MCP interface to discover, inspect, scope, and execute external capabilities—downstream MCP servers, HTTP APIs, and local tools—resolved on demand from a local index instead of preloaded catalogs. Enforces agent scopes, allow/ask/deny policies, health gates, and schema snapshots at execution time, with local execution traces.
    -
  • A
    license
    Not graded
    quality
    C
    maintenance
    Enables host agents to resolve tasks against a local library of reviewed Skills and Experts, then retrieve selected capabilities on demand through MCP tools without loading the full catalog into context.
    1
    MIT