Grouped by what they are for. Each shows the license the package itself states and whether its source is public, because not everything Decionis publishes is open source.
Open source: Apache-2.0, developed in public repositories.
TypeScript · npm 0.3.5 · Apache-2.0
Capture an intent, ask the authority, execute exactly what was authorized. Local test doubles for the authority and for Presence are in /testing.
npm install @decionis/agent-safe-pipelineTypeScript (Node ≥ 22.14) · npm 0.2.5 · Apache-2.0
The AgentSafe gateway and its CLI. As a library it also exports McpGuard for MCP tools and the EffectAdapter contract.
npm install -g @decionis/agentsafeGitHub Action · GitHub Marketplace v2 (2.0.0) · Apache-2.0
One Decionis verdict before a workflow step runs, such as a production deploy.
uses: decionis/govern@v2Apache-2.0 on npm. Their source repository is not public.
Node CLI and library · npm 0.4.0 · Apache-2.0
Check a Decision Dossier's signatures offline, with no account, and check Agent-Safe Intent vectors independently of AgentSafe.
npx @decionis/verify <proof-bundle URL>Source not public
Node (MCP server) · npm 0.3.0 · Apache-2.0
Decionis policy tools for MCP clients such as Claude Code, Codex and Copilot.
npm install -g @decionis/mcpSource not public
MIT on PyPI. Their source repository is not public.
Python 3.10+ · PyPI 0.2.0 · MIT
The Python client for the Decionis API: evaluate a decision and act on the signed verdict.
pip install decionisSource not public
Python 3.10+ · PyPI 0.2.0 · MIT
Gate AutoGen tool calls before they run.
pip install decionis-autogenSource not public
Python 3.10 to 3.13 · PyPI 0.2.0 · MIT
Gate CrewAI tool calls before they run.
pip install decionis-crewaiSource not public
Python 3.10+ · PyPI 0.1.0 · MIT
Gate LangChain tools and LangGraph nodes before they run.
pip install decionis-langchainSource not public
MIT on npm. Its source repository is not public.
TypeScript · npm 0.2.0 · MIT
Gate LangChain.js tools and LangGraph.js nodes before they run.
npm install @decionis/langchain @decionis/sdk @langchain/coreSource not public
Proprietary license: free to install, not open source.
TypeScript · npm 0.3.0 · Proprietary
The client the API quickstart uses. Every endpoint is also plain HTTPS.
npm install @decionis/sdkSource not public
Proprietary license: free to install, not open source.
TypeScript · npm 0.1.2 · Proprietary
The policy and inline guard engine the Decionis connectors run, to embed directly.
npm install @decionis/surfaceSource not public
TypeScript (Node ≥ 20) · npm 0.3.0 · Proprietary
Intercept ISO 8583 authorizations over TCP, tokenize the card in the bank's process, and match or evaluate each one before it settles.
npm install @decionis/iso8583Source not public
Open source: Apache-2.0, developed in public repositories.
Go · Go modules v0.2.0 · Apache-2.0
Go SDK and CLI for Presence human-presence verification.
go get github.com/decionis/presence-go@v0.2.0Swift · Swift Package Manager 0.2.0 · Apache-2.0
Swift SDK for Presence human-presence verification.
.package(url: "https://github.com/decionis/presence-swift", exact: "0.2.0")TypeScript · npm 0.1.1 · Apache-2.0
SDK for Shield, user-controlled spending authorization.
npm install @decionis/shieldSwift · Swift Package Manager 0.1.0 · Apache-2.0
Swift SDK for Shield spending authorization.
.package(url: "https://github.com/decionis/shield-swift", from: "0.1.0")Swift (server) · Swift Package Manager 1.0.0 · Apache-2.0
Server-side guard for Apple Advanced Commerce transaction intents.
.package(url: "https://github.com/decionis/commercegate-apple-swift.git", from: "1.0.0")These still install at the version they were published at. For new work, install the package that replaced each.
@decionis/sdk-node 0.1.0, replaced by @decionis/sdk@decionis/dossier-verify 0.1.0, replaced by @decionis/verify@decionis/iso8583-interceptor 0.1.0, replaced by @decionis/iso8583The hosted API is plain HTTPS. The API reference documents every endpoint, its request and response, and its errors.