mcp · decionis — Claude Code MCP server: what it does, how to install
Intercepts consequential AI agent actions and verifies authorization before execution. Useful when autonomous tools need strict policy controls and human sign-off.
claude mcp add --transport http mcp https://protocol.decionis.com/mcpWhat mcp does
The MCP server connects tool-calling agents to the AgentSafe execution boundary and the Decionis authority platform. When an agent attempts a sensitive HTTP request or API action, AgentSafe halts direct dispatch. It turns the request into an intent and requests a decision: ALLOW, ESCALATE, or BLOCK.
The boundary itself decides nothing. An ALLOW response provides a single-use execution grant for exactly that request. An ESCALATE response routes verification to a human via the Presence layer. Each outcome leaves a signed Decision Dossier recording what was requested and decided.
Local stdio usage requires DECIONIS_POLICY_PATH, DECIONIS_PRESENCE_API_KEY, and DECIONIS_PRESENCE_API_URL environment variables. Alternatively, you can connect directly to the hosted HTTP endpoint at https://protocol.decionis.com/mcp.
What it helps with
- intercept consequential tool calls before hitting production APIs
- evaluate agent requests against external security policies
- escalate high-risk operations to human verification
- record signed execution dossiers for compliance audits
Example prompts for the agent
- Send a test payment through the AgentSafe gateway to evaluate the policy
- Run the customer deletion call through Decionis enforcement
- Verify whether the agent tool call requires human escalation
How to install mcp
1Platform CLI: remote server
claude mcp add --transport http mcp https://protocol.decionis.com/mcp2Platform CLI
claude mcp add --env DECIONIS_POLICY_PATH=<DECIONIS_POLICY_PATH> --env DECIONIS_PRESENCE_API_KEY=<DECIONIS_PRESENCE_API_KEY> --env DECIONIS_PRESENCE_API_URL=<DECIONIS_PRESENCE_API_URL> --transport stdio decionis-mcp -- npx -y @decionis/mcpReplace <…> with your own values
1Platform CLI: remote server
codex mcp add decionis-mcp --url https://protocol.decionis.com/mcp2Platform CLI
codex mcp add decionis-mcp --env DECIONIS_POLICY_PATH=<DECIONIS_POLICY_PATH> --env DECIONIS_PRESENCE_API_KEY=<DECIONIS_PRESENCE_API_KEY> --env DECIONIS_PRESENCE_API_URL=<DECIONIS_PRESENCE_API_URL> -- npx -y @decionis/mcpReplace <…> with your own values
Config file
{
"mcpServers": {
"decionis-mcp": {
"url": "https://protocol.decionis.com/mcp"
}
}
}{
"mcpServers": {
"decionis-mcp": {
"command": "npx",
"args": [
"-y",
"@decionis/mcp"
],
"env": {
"DECIONIS_POLICY_PATH": "<DECIONIS_POLICY_PATH>",
"DECIONIS_PRESENCE_API_KEY": "<DECIONIS_PRESENCE_API_KEY>",
"DECIONIS_PRESENCE_API_URL": "<DECIONIS_PRESENCE_API_URL>"
}
}
}
}Replace <…> with your own values
Config file
{
"servers": {
"decionis-mcp": {
"type": "http",
"url": "https://protocol.decionis.com/mcp"
}
}
}{
"servers": {
"decionis-mcp": {
"type": "stdio",
"command": "npx",
"args": [
"-y",
"@decionis/mcp"
],
"env": {
"DECIONIS_POLICY_PATH": "<DECIONIS_POLICY_PATH>",
"DECIONIS_PRESENCE_API_KEY": "<DECIONIS_PRESENCE_API_KEY>",
"DECIONIS_PRESENCE_API_URL": "<DECIONIS_PRESENCE_API_URL>"
}
}
}
}Replace <…> with your own values
1Platform CLI: remote server
gemini mcp add -t http decionis-mcp https://protocol.decionis.com/mcp2Platform CLI
gemini mcp add -e DECIONIS_POLICY_PATH=<DECIONIS_POLICY_PATH> -e DECIONIS_PRESENCE_API_KEY=<DECIONIS_PRESENCE_API_KEY> -e DECIONIS_PRESENCE_API_URL=<DECIONIS_PRESENCE_API_URL> decionis-mcp npx -y @decionis/mcpReplace <…> with your own values
Step by step, with commands for each platform: How to add an MCP server to Claude Code, Codex, Cursor, VS Code, Gemini CLI and more
Questions about mcp
How to install mcp in Claude Code?
Run claude mcp add --transport http mcp https://protocol.decionis.com/mcp in your terminal to connect via HTTP.
What does mcp do?
It acts as an execution boundary between your AI agent and destination APIs. Every consequential action is checked against Decionis authority before anything is forwarded.
What happens when an action returns ESCALATE?
The action is paused and held until a human approves it on their own device via Presence. Once confirmed, Decionis issues a single-use execution grant.
Similar MCP servers
Everything for Security →mcp by other authors comes first.
