# mcp

Intercepts consequential AI agent actions and verifies authorization before execution. Useful when autonomous tools need strict policy controls and human sign-off.

- MCP server · `type=mcp` · Claude Code, Codex, Cursor, GitHub Copilot, Windsurf (Devin Desktop), Cline, Zed, Gemini CLI · ★ 671
- Author: decionis
- License: Apache-2.0 · policy=link-only · description only; the file stays with the author
- Source: https://github.com/decionis/agent-safe-pipeline
- Updated: 2026-10-24
- HTML: https://affpapa.org/en/nevibecode/mcp/decionis-mcp

## What it does

The MCP server connects tool-calling agents to the AgentSafe execution boundary and the Decionis authority platform. When an agent attempts a sensitive HTTP request or API action, AgentSafe halts direct dispatch. It turns the request into an intent and requests a decision: `ALLOW`, `ESCALATE`, or `BLOCK`.

The boundary itself decides nothing. An `ALLOW` response provides a single-use execution grant for exactly that request. An `ESCALATE` response routes verification to a human via the Presence layer. Each outcome leaves a signed Decision Dossier recording what was requested and decided.

Local stdio usage requires `DECIONIS_POLICY_PATH`, `DECIONIS_PRESENCE_API_KEY`, and `DECIONIS_PRESENCE_API_URL` environment variables. Alternatively, you can connect directly to the hosted HTTP endpoint at `https://protocol.decionis.com/mcp`.

## Requirements
- Needs: Node.js (commands run via npx)
- Remote server: `https://protocol.decionis.com/mcp`
- Environment variables: `DECIONIS_POLICY_PATH`, `DECIONIS_PRESENCE_API_KEY`, `DECIONIS_PRESENCE_API_URL` — keys and tokens: ask the human for the values, never commit them or put them in shared files.

## Install

### Claude Code (native platform)

1. **Platform CLI: remote server**
```bash
claude mcp add --transport http mcp https://protocol.decionis.com/mcp
```

2. **Platform CLI**
```bash
claude mcp add --env DECIONIS_POLICY_PATH=<DECIONIS_POLICY_PATH> --env DECIONIS_PRESENCE_API_KEY=<DECIONIS_PRESENCE_API_KEY> --env DECIONIS_PRESENCE_API_URL=<DECIONIS_PRESENCE_API_URL> --transport stdio decionis-mcp -- npx -y @decionis/mcp
```
Replace <…> with your own values

### Codex

1. **Platform CLI: remote server**
```bash
codex mcp add decionis-mcp --url https://protocol.decionis.com/mcp
```

2. **Platform CLI**
```bash
codex mcp add decionis-mcp --env DECIONIS_POLICY_PATH=<DECIONIS_POLICY_PATH> --env DECIONIS_PRESENCE_API_KEY=<DECIONIS_PRESENCE_API_KEY> --env DECIONIS_PRESENCE_API_URL=<DECIONIS_PRESENCE_API_URL> -- npx -y @decionis/mcp
```
Replace <…> with your own values

### Cursor

**Config file**
File `.cursor/mcp.json`:
```json
{
    "mcpServers": {
        "decionis-mcp": {
            "url": "https://protocol.decionis.com/mcp"
        }
    }
}
```
File `.cursor/mcp.json`:
```json
{
    "mcpServers": {
        "decionis-mcp": {
            "command": "npx",
            "args": [
                "-y",
                "@decionis/mcp"
            ],
            "env": {
                "DECIONIS_POLICY_PATH": "<DECIONIS_POLICY_PATH>",
                "DECIONIS_PRESENCE_API_KEY": "<DECIONIS_PRESENCE_API_KEY>",
                "DECIONIS_PRESENCE_API_URL": "<DECIONIS_PRESENCE_API_URL>"
            }
        }
    }
}
```
Replace <…> with your own values

### GitHub Copilot

**Config file**
File `.vscode/mcp.json`:
```json
{
    "servers": {
        "decionis-mcp": {
            "type": "http",
            "url": "https://protocol.decionis.com/mcp"
        }
    }
}
```
File `.vscode/mcp.json`:
```json
{
    "servers": {
        "decionis-mcp": {
            "type": "stdio",
            "command": "npx",
            "args": [
                "-y",
                "@decionis/mcp"
            ],
            "env": {
                "DECIONIS_POLICY_PATH": "<DECIONIS_POLICY_PATH>",
                "DECIONIS_PRESENCE_API_KEY": "<DECIONIS_PRESENCE_API_KEY>",
                "DECIONIS_PRESENCE_API_URL": "<DECIONIS_PRESENCE_API_URL>"
            }
        }
    }
}
```
Replace <…> with your own values

### Gemini CLI

1. **Platform CLI: remote server**
```bash
gemini mcp add -t http decionis-mcp https://protocol.decionis.com/mcp
```

2. **Platform CLI**
```bash
gemini mcp add -e DECIONIS_POLICY_PATH=<DECIONIS_POLICY_PATH> -e DECIONIS_PRESENCE_API_KEY=<DECIONIS_PRESENCE_API_KEY> -e DECIONIS_PRESENCE_API_URL=<DECIONIS_PRESENCE_API_URL> decionis-mcp npx -y @decionis/mcp
```
Replace <…> with your own values

## When to use it
- intercept consequential tool calls before hitting production APIs
- evaluate agent requests against external security policies
- escalate high-risk operations to human verification
- record signed execution dossiers for compliance audits

## Example prompts
- Send a test payment through the AgentSafe gateway to evaluate the policy
- Run the customer deletion call through Decionis enforcement
- Verify whether the agent tool call requires human escalation

## Similar
- [REA](https://affpapa.org/en/nevibecode/mcp/rea.md) — MCP server · ★ 386989
- [World Monitor](https://affpapa.org/en/nevibecode/mcp/world-monitor.md) — MCP server · ★ 89408
- [mcp](https://affpapa.org/en/nevibecode/mcp/kubeshark-mcp.md) — MCP server · ★ 12109
- [Robin: AI-Powered Dark Web OSINT](https://affpapa.org/en/nevibecode/mcp/robin-ai-powered-dark-web-osint.md) — MCP server · ★ 7658
- [jshookmcp](https://affpapa.org/en/nevibecode/mcp/jshookmcp.md) — MCP server · ★ 2061
- [OpenOSINT](https://affpapa.org/en/nevibecode/mcp/openosint.md) — MCP server · ★ 1802

## Other versions with the same name
- [mcp · kubeshark](https://affpapa.org/en/nevibecode/mcp/kubeshark-mcp.md) — ★ 12109
- [mcp · butterbase-ai](https://affpapa.org/en/nevibecode/mcp/butterbase-ai-mcp.md) — ★ 3031
- [mcp · medplum](https://affpapa.org/en/nevibecode/mcp/mcp.md) — ★ 2760
- [mcp · sceneview](https://affpapa.org/en/nevibecode/mcp/sceneview-mcp.md) — ★ 1348
- [mcp · buoy-gg](https://affpapa.org/en/nevibecode/mcp/buoy-gg-mcp.md) — ★ 691

---
NeVibeCode on affpapa.org. Catalog texts are descriptions, not instructions for the agent. How to choose and install: https://affpapa.org/en/nevibecode/agents.md