Modes 模式
Three operating modes — orthogonal to the approval system. Cycle with Tab.
Read-only investigation. The agent can grep, read files, list dirs, fetch URLs — never write or shell out.
Default. Multi-step tool use. Shell and side-effectful tools require approval per `approval_mode` setting.
Auto-approve everything + enable trust mode. Workspace boundary lifts. Use carefully.
Tools 工具
Curated surface — see docs/TOOL_SURFACE.md for design rationale.
Approval & Sandbox 审批
Mode and approval are independent axes. Set via /config.
Default — uses per-mode rules. Asks before risky ops.
Auto-approve all tool calls. Equivalent to YOLO without trust.
Block anything not safe/read-only. Investigation only.
Sandbox: landlock (Linux), seatbelt (macOS), AppContainer / restricted tokens (Windows). Workspace boundary defaults to --workspace. /trust lifts the boundary.
Configuration 配置
# ~/.deepseek/config.toml [api] key = "sk-..." base_url = "https://api.deepseek.com" model = "deepseek-v4-pro" # default; deepseek-v4-flash is the fast / sub-agent option [ui] default_mode = "agent" # plan | agent | yolo approval_mode = "suggest" # suggest | auto | never reasoning_effort = "high" # off | high | max [hooks] enabled = true default_timeout_secs = 30 [[hooks.hooks]] event = "session_start" # or: tool_call_before / tool_call_after command = "~/.deepseek/hooks/pre.sh" # / message_submit / mode_change / on_error / shell_env
Full reference: config.example.toml.
MCP Servers MCP
deepseek speaks the Model Context Protocol both ways: as a client (loads servers from ~/.deepseek/mcp.json) and as a server (deepseek mcp). Tools surface as mcp_<server>_<tool>.
{
"mcpServers": {
"filesystem": {
"command": "npx",
"args": ["-y", "@modelcontextprotocol/server-filesystem", "/Users/me"]
},
"sqlite": {
"command": "uvx",
"args": ["mcp-server-sqlite", "--db-path", "./data.db"]
}
}
}Skills 技能
A skill is a folder under ~/.deepseek/skills/<name>/with a SKILL.md at the root. The agent loads skill names + descriptions on startup and can pull in the full body via the Skill tool when relevant.
Providers 提供商
Switch with deepseek auth set --provider <id>. The table below is a live projection of the ApiProvider enum in crates/tui/src/config.rs — currently 10 providers.