Decionis MCP Server
Let agents propose. Let policy decide. Agent-Safe Pipeline is a reference architecture for executing AI-agent actions through an independent authorization boundary.
People connecting security tools to Claude, Cursor, VS Code, or another MCP client. The project is written in TypeScript.
VERIFIED ACTIVE
LAST COMMIT 2026-08-24 · ★ 533 · #7 OF 182 MAINTAINED SECURITY · VERIFIED 2026-08-25
Apache-2.0 · TypeScript servers · how we verify → /methodology
01 · Install Decionis MCP Server
Claude Code
claude mcp add decionis-agent-safe-pipeline --transport http https://protocol.decionis.com/mcp Claude Desktop / Cursor / VS Code - add to config
{
"mcpServers": {
"decionis-agent-safe-pipeline": {
"url": "https://protocol.decionis.com/mcp"
}
}
} Same JSON for Cursor. For VS Code, rename the top-level key from `mcpServers` to `servers`.
Using another client? Same JSON, different key
Claude Desktop · mcpServers
Cursor · mcpServers
VS Code · servers
Windsurf · mcpServers
Zed · context_servers
Cline · mcpServers
Roo Code · mcpServers
Continue · mcpServers
LibreChat · mcpServers
Gemini CLI · mcpServers
Codex CLI · mcp_servers
Full setup guides: every client.
02 · Evidence
https://protocol.decionis.com/mcp
transport: streamable-http
endpoint alive - authentication required · probed 2026-08-25
Security posture
What to check before giving this server access to your agent - from the registry, GitHub, and our own probes. We don't score safety; we show what's verifiable.
runs as local process (stdio) - runs on your machine with your user's permissions · remote - your agent's requests go to protocol.decionis.com
endpoint auth requires authentication - rejected our unauthenticated MCP initialize
repo age created 2026-08-13 - young repo, little track record yet
license Apache-2.0 - declared in the repository
npm package @decionis/mcp - published under the repo owner's npm scope (@decionis)
registry vendor namespace com.decionis - domain-verified with the official MCP registry
03 · What Decionis MCP Server can do
Prose above is summarized from the project's README and registry record - no invented capabilities.
Latest releases
v0.1.2 · 2026-08-15
Verifiable artifacts · npm publication was not enabled for this release. · sh · shasum -a 256 -c SHA256SUMS · gh attestation verify decionis-agent-safe-pipeline-0.1.2.tgz \ · --repo decionis/agent-safe-pipeline \…
v0.1.1 · 2026-08-15
Verifiable artifacts · npm publication was not enabled for this release. · sh · shasum -a 256 -c SHA256SUMS · gh attestation verify decionis-agent-safe-pipeline-0.1.1.tgz \ · --repo decionis/agent-safe-pipeline \…
v0.1.0 · 2026-08-15
Add agent-safe execution pipeline · Fix critical Vitest and Vite vulnerabilities · Fix CodeQL ReDoS findings and add repository guardrails · Harden public repository security posture · New Contributors · @ocularminds…
04 · Who maintains Decionis MCP Server
mcp is maintained by decionis. It's the only MCP server we track from this author; the repo dates to Aug 2026.
05 · Facts
- repository
- github.com/decionis/agent-safe-pipeline
- category
- security - ranked #7 of 182 actively-maintained security servers as of 2026-08-25.
- release cadence
- 3 releases in the last 90 days (latest 2026-08-15)
- registry
- com.decionis/mcp (active, first published 2026-08-15 · 2 versions)
- packages
- npm:@decionis/mcp
06 · Decionis MCP Server FAQ
What is Decionis MCP Server?
Let agents propose. Let policy decide. Agent-Safe Pipeline is a reference architecture for executing AI-agent actions through an independent authorization boundary.
Is Decionis MCP Server still maintained?
Yes - as of 2026-08-25, its last commit was 2026-08-24 and it shipped 3 releases in the last 90 days. We re-verify nightly.
How do I install Decionis MCP Server?
Run `npx -y @decionis/mcp`. You can also paste the ready-made client config above.
Does Decionis MCP Server require authentication?
Yes - when we probed the endpoint on 2026-08-25, it rejected an unauthenticated MCP initialize; you'll need credentials to connect.
07 · Alternatives to Decionis MCP Server
Alternatives to Decionis MCP Server
Maintained security servers if Decionis MCP Server isn't the fit.
- SafeDep Vet MCP Protect your AI agents and IDEs from malicious open-source packages. ★ 1,102 · 2026-08-24
- SonarQube MCP Server Analyze code quality and security with SonarQube Server or Cloud directly in AI assistants. ★ 632 · 2026-08-24
- HOL Guard Local-first AI agent security evidence and approval workflows through HOL Guard's stdio MCP server. ★ 470 · 2026-08-25
- Emisar Let AI operate servers without SSH. Choose actions, approve risky changes, and audit every step. ★ 409 · 2026-08-23
- Bradesco MCP server for Bradesco - Pix, Cobrança (boleto), Arrecadação, Extrato (OAuth2 + mTLS) ★ 269 · 2026-08-12
- CrowdStrike Falcon MCP Server Connects AI agents with CrowdStrike Falcon for security analysis and automation. ★ 239 · 2026-08-24
Pairs well with
Servers that cover what Decionis MCP Server doesn't - only shown when the pairing reason fits the companion.
More security MCP servers · Delego · Gradus Notation · Open Work Proof · Dep Diff MCP · Screenshot
More TypeScript MCP servers · Lucairn MCP Server · Decodo MCP Server · Jira Scoped · DDC/CI Control Bridge · Server Trello · see all