Decionis is answering right now. Last checked 11 min ago. 86 installs a week from npm. Last commit 13 Oct 2026.
Authorize consequential AI agent actions before execution
What the code does
We read the source, 3 d ago · rules ccca72095570
What this server is able to do. For an MCP server this is often the job itself — a terminal server runs commands because that is what it is for. Listed so you know what you are plugging in, not as an accusation.
пакет @decionis/mcp ссылается на decionis/decionis
_, err := os.Stat(filepath.Join(dir, rel))
Is this your server and something here is wrong? Tell us — corrections are free and do not require a plan.
This code can reach further than it looks
We found places where it runs commands, builds paths or queries from values it is given. None of that is a flaw by itself — it becomes one when the code changes, and code changes quietly between releases. We re-read it on every one.
Connect this server
Endpoint below is the one we actually reach during checks — not the one copied from a README. Last verified 11 min ago.
claude mcp add mcp --transport http https://protocol.decionis.com/mcp{
"mcpServers": {
"mcp": {
"url": "https://protocol.decionis.com/mcp"
}
}
}[mcp_servers.mcp]
url = "https://protocol.decionis.com/mcp"{
"mcpServers": {
"mcp": {
"url": "https://protocol.decionis.com/mcp"
}
}
}{
"mcpServers": {
"mcp": {
"url": "https://protocol.decionis.com/mcp"
}
}
}This one needs environment variables set before it will start:
DECIONIS_POLICY_PATH (Optional path to the policy file; defaults to ./DECIONIS_POLICY.md in the working directory.), DECIONIS_PRESENCE_API_KEY (Optional Presence tenant API key. When set, decionis_request_presence_verification and decionis_get_presence_verification_status register and call presence.decionis.com; without it the server stays networkless.), DECIONIS_PRESENCE_API_URL (Optional Presence base URL (https only); defaults to https://presence.decionis.com.).
The author declared them in the registry entry; get the values from the project itself.
This endpoint answered with an authorization challenge. The server is running, and it signs you in through your browser: there is no API key to paste.
Endpoints
| URL | Transport | State | Latency | Checked |
|---|---|---|---|---|
| https://protocol.decionis.com/mcp | streamable-http | sign-in | 535 ms | 11 min ago |
Alternatives to Decionis
same job, measured the same wayVerify consequential AI actions before they execute.
AI Agent Firewall. Enforce signed authority before consequential actions. Free API key required.
MUJ428 verifies intent and evidence before consequential AI-agent actions.
Pre-execution policy gate for consequential agent actions with durable trust receipts.
Consequence evaluation for AI agents. Check recoverability before destructive actions.
Impact preview for AI agents - see what changes before any action executes.
Explainable ALLOW/WARN/BLOCK risk decisions for AI agent actions before execution, signed as OAA.
Independent effect verification and signed receipts for consequential AI agent actions.
Decionis — questions
Answers built from our own checks of this server.