TERM / MCP DEEPSEEK MISSION CONTROL
v1.0 · LOCAL / READY

Make terminal work legible before it runs.

An approval-first MCP control plane. See the command, risk, workspace, and hard limits before execution—then keep a signed receipt of what actually happened.

Get a result in 60 seconds Inspect the evidence
94
tests
2
MCP eras
0
mandatory telemetry
6
safe recipes
MCP 2026-07-28 DUAL ERA
INTENT / 01 $ pwd
POLICY / 02 LOW RISK read-only · no network
EXECUTION RECEIPT 14 ms
SUCCEEDED
MODE
inspect
EXIT
0
SIGNATURE
verified
9f1352c…d9be

INTENT → PLAN → POLICY → APPROVAL → PROCESS → RECEIPT

MODEL TEXT NEVER EXECUTES INSPECT MODE BY DEFAULT NO SHELL COMPOSITION WORKSPACE CONFINED SIGNED FINAL STATES
01 / BOUNDARY

A visible decision, not an opaque leap

The model advises.
The policy decides.

DeepSeek is optional and isolated. Every proposed command enters a deterministic path that resolves permissions, risk, workspace, network access, timeout, and output limits before execution is possible.

POLICY LAB / NO COMMANDS RUN HERE ENGINE READY

SELECT AN INTENT

POLICY DECISION / 1.0 ALLOWED
$ pwd
LOW RISK
MODE
inspect
NETWORK
denied
APPROVAL
not required
HARD LIMIT
20 sec / 1 MiB

Read-only command inside the selected workspace.

02 / MISSION CONTROL

One screen. The whole boundary.

Plan on the left.
Proof on the right.

The browser console keeps scope, risk, events, controls, output, and signed evidence in one inspectable surface. It works without a model key and loads no external UI assets.

127.0.0.1:8000 / LOCAL ONLY VERIFIED UI
Term MCP DeepSeek mission control showing an inspect-mode pwd plan, execution events, and a signed succeeded receipt
Real v1.0 interface · keyboard tested · responsive · no CDN · no DeepSeek key required
03 / PROOF

Final states that do not blur together

Every action leaves evidence.

Receipts separate status, policy, timing, exit code, signal, stdout, stderr, and signature. Sharing-safe exports remove command text, paths, arguments, and output, then sign the transformed artifact again.

RECEIPT / 00114 ms

SUCCEEDED

The bounded command reached exit code 0 and the signature validates.

EXIT
0
SIGNAL
—
Inspect JSON ↗
RECEIPT / 002480 ms

CANCELLED

An approved process was stopped deliberately and recorded with its signal.

EXIT
-15
SIGNAL
15
Inspect JSON ↗
RECEIPT / 0032,000 ms

TIMED_OUT

The process crossed its approved limit and ended as a distinct timeout state.

EXIT
-15
SIGNAL
15
Inspect JSON ↗

A receipt proves what this process recorded. It does not claim that an inspected repository or command was trustworthy. The distinction is part of the product—not a footnote.

Read the receipt model
04 / RECIPES

Useful on an unfamiliar repository

Six workflows.
Zero machine mutation.

Every public recipe is versioned, inspect-only, network-free, write-free, bounded, and executed by CI through the same production policy as MCP clients.

01Inspect repositoryMap top-level files and Git stateJSON ↗ 02Diagnose testsFind test files and configurationJSON ↗ 03Discover JavaScript testsMap test files without installing dependenciesJSON ↗ 04Analyze logsInventory local incident evidenceJSON ↗ 05Verify port configCompare service-port declarationsJSON ↗ 06Read-only boundaryProve no write or network permissionJSON ↗
05 / ARCHITECTURE

One engine across human and machine clients

The execution path has no shortcut.

  1. 01IntentHuman or MCP client
  2. 02PlanVersioned and session-bound
  3. 03PolicyWorkspace, risk, capabilities
  4. 04ApprovalExplicit when required
  5. 05ProcessArgv only, hard limits
  6. 06ReceiptSigned final evidence
TRANSPORT / A

STDIO

Protocol JSON on stdout, diagnostics on stderr, lifecycle tied to the parent.

TRANSPORT / B

HTTP

Bearer authentication, exact origin allowlist, rate and request limits.

CONTRACT / 01

MCP 2026-07-28

Primary stateless contract, tested with the official Python SDK.

CONTRACT / 02

MCP 2025-11-25

Legacy initialize and transport-session compatibility, explicitly tested.

06 / FIRST RESULT

No model key required

From clone to signed proof in under a minute.

Install the immutable v1.0 tag, point the server at a repository, and open the local mission control. Inspect mode denies network and writes by default.

Open full quick start Verify release assets ↗
QUICK_START.SH 
# Install the verified v1 release
pipx install "git+https://github.com/OthmaneBlial/term_mcp_deepseek.git@v1.0.0"

# Start inside the repository to inspect
cd /path/to/your/repository
term-mcp serve
OPEN 127.0.0.1:8000 · BUILD PLAN · EXECUTE
LOCAL / EXPLICIT / RECEIPTED

Let the model suggest.
Make the system prove.

View on GitHub ↗ Read the docs