dsh-our-free-model

What it does

Our Free Model is a plugin for dsh (DeepSeek Harness) that adds a list of frontier models, including DeepSeek V4.1 Flash and Kimi K3, with no login, sign-up or API key. It reaches them through other companies' public gateways (OpenCode's inference endpoint and Kilo AI), shows a usage dashboard, and opens an OpenAI- and Anthropic-compatible port on your computer so tools such as Claude Code can use the same models. You can also add your own keys for 76 providers. A Windows desktop package and a community macOS build exist.

How easy it is to install

B · installer plus one simple step · Windows

• Windows B
• macOS C

Windows is a B: the project publishes a desktop package and the README says it 'bundles a Node runtime and the standalone service, usable right after installing, with no login and no API key', though you still pick channels in its settings. macOS is a C, because the .dmg is a community build with no Apple signature and the README's own instructions include Terminal steps such as 'sudo xattr -rd com.apple.quarantine' to open it. Installing it as a dsh plugin instead needs the dsh host and commands like 'dsh plugin --profile web add /path'.

Numbers on GitHub

Stars

54,362on Oct 31, 2026

Downloads

55,85938,106 this week

Growth

+11,276stars in 6 days

Stars over time

Facts

Runs on

Windows, macOS

You need to install

Node.js, Other tools

To build from source

Node.js

Disk space

25 MB–75 MB · from the installer

Accounts or keys

Optional: your own key for one of 76 providers (OpenRouter, Groq, Gemini, DeepSeek and others)

Cost

Free · No payment and no API key. The README says the EAC channel only answers after the server checks that you logged in with GitHub and starred this repository.

License

MIT (Permissive)

Can replace

OpenRouter, ChatGPT Plus

Last update

Oct 31, 2026

Risk signals (10)

• Highsends official client identity to the free gateway

  The free lane goes to pools that hand out models with no key and no charge: the README names 'OpenCode 的 Zen 网关' and 'Kilo AI 的公共网关', and says of the Kilo one '该池由上游免费提供' (the pool is provided free by the upstream). The README's own file map says what the plugin builds for each call: 'src/upstream.js 网关身份：凭据、session/request id 铸造、工具指纹' (gateway identity: credentials, session/request id minting, tool fingerprint). It also writes down what the OpenCode pool asks of a caller: '它要求每请求一枚铸造形状的会话 id、v2 客户端 User-Agent 与一组官方工具声明' (it requires a minted-shaped session id per request, a v2 client User-Agent and a set of official tool declarations). The four tool names the lane is forced to declare are called the '指纹诱饵四件套' (fingerprint decoy set of four) in the issue table, where a forwarding client that never registered them reports 'Unknown tool bash/read/grep'. These pools release the models to a caller that arrives with the client identity the service expects.

  AI review

• Highcredentials hidden inside the plugin

  README, 'EAC channel': 'credentials and endpoints never appear in readable form in the plugin — they exist only as AES-256-GCM ciphertext, and the decryption key is derived at unlock time from three mask shards spread across two files'. The file list also ships src/vault.js, src/vault-anchor.js and src/vault-data.js, plus vendor/channel-pack/qoder-auth-wasm.wasm.

  AI review

• Highcalls another companys gateway without an account

  README, "亮点": the free lane's source is "OpenCode 的 Zen 网关" and the Kilo channel's is "Kilo AI 的公共网关", reached "无需任何账号或 Key" (with no account or Key at all). The same README says what the plugin mints for each call to that gateway: "src/upstream.js 网关身份：凭据、session/request id 铸造、工具指纹", and that the gateway "要求每请求一枚铸造形状的会话 id、v2 客户端 User-Agent 与一组官方工具声明" (requires a minted-shaped session id per request, a v2 client User-Agent and a set of official tool declarations). Who may call a company's API, and how the client must identify itself, is normally set out in that company's terms of use; the README shows no permission from either gateway, and the project's own aggregate lane keeps the FleetRelay third-party pool disabled because it "尚未获分发授权" (has not yet obtained distribution authorisation).

  AI review

• AttentionVery new repository with many stars

  54372 stars in 37 days

  automatic check

• Attentionstars required to unlock a channel

  README: the EAC channel 'only allows conversations after the server side checks your GitHub authorisation (log in and star this repository)'. The deterministic check already notes 54372 stars in 37 days, and every settings page carries a Star button.

  AI review

• Attentionupstream may log your prompts

  README, Kilo channel: 'this pool is provided free by the upstream, and the upstream states on its model cards that prompts may be recorded to improve the service — please do not send sensitive content'.

  AI review

• Attentionlocal gateway keys readable by other programs

  README 'Known limits': in a composition without the connection service, 'any process on the machine can obtain the forwarding key and the LAN key with one request, and then consume this machine's free quota from another machine'. The LAN relay binds 0.0.0.0 by default when switched on.

  AI review

• Attentionmodified copy circulating under the same name

  README install warning: 'Do not install the bare-name dsh-our-free-model on npm. That package was not published by this repository... index.js and client.js are changed and it also contains src/channel-visibility.js, which this repository never had.'

  AI review

• Attentionself updating code and pushed announcements

  The plugin downloads and replaces its own files from a feed and hot-reloads them ('check for updates -> one-click upgrade', 'src/updater.js'), and maintainers push announcements that reach every install within one polling cycle, with 'urgent' showing a full-screen popup. The README adds that 'whoever holds the release private key can push any code'.

  AI review

• Infohost security scanner flagged the code

  README acceptance table: DSHEAC AIO's static scan 'records one report line for the env+URL adjacency pattern in src/upstream.js (TROJAN_EXFIL_ENV)', described as logging only. The README also notes the upstream vendor name appears only in repository documents and announcements, never in the model picker or settings text.

  AI review

Evidence is shown in its original language.

What Radar could not check

• Whether the free gateways keep working, or block this client at any time
• What the upstream services keep of the prompts you send
• What the encrypted credentials inside the plugin are and who they belong to
• Whether the Windows and macOS packages were built from the source in this repository
• The real speed and the point at which requests start coming back as 429

Similar projects

• REAEase D
• SuperpowersEase C
• Skills for Real EngineersEase C
• ECCEase D
• Agent SkillsEase B