SDKs

SDKs and packages

Grouped by what they are for. Each shows the license the package itself states and whether its source is public, because not everything Decionis publishes is open source.

Versions checked
2026-10-30

Build on the protocol

Open source: Apache-2.0, developed in public repositories.

@decionis/agent-safe-pipeline

TypeScript · npm 0.5.0 · Apache-2.0

Capture an intent, ask the authority, execute exactly what was authorized. Local test doubles for the authority and for Presence are in /testing.

npm install @decionis/agent-safe-pipeline

Source

@decionis/agentsafe

TypeScript (Node ≥ 22.14) · npm 0.7.0 · Apache-2.0

The AgentSafe gateway and its CLI. As a library it also exports McpGuard for MCP tools and the EffectAdapter contract.

npm install -g @decionis/agentsafe

Source

decionis/govern

GitHub Action · GitHub Marketplace v2 (2.0.0) · Apache-2.0

One Decionis verdict before a workflow step runs, such as a production deploy.

uses: decionis/govern@v2

Source

Verify and connect

Apache-2.0 on npm. Their source repository is not public.

@decionis/verify

Node CLI and library · npm 0.5.0 · Apache-2.0

Check a Decision Dossier's signatures offline, with no account, and check Agent-Safe Intent vectors independently of AgentSafe.

npx @decionis/verify <proof-bundle URL>

@decionis/mcp

Node (MCP server) · npm 0.4.0 · Apache-2.0

Decionis policy tools for MCP clients such as Claude Code, Codex and Copilot.

npm install -g @decionis/mcp

Python

MIT on PyPI. Their source repository is not public.

decionis

Python 3.10+ · PyPI 0.3.0 · MIT

The Python client for the Decionis API: claim the single-use grant before the action runs, and sign the request so the system of record can check it.

pip install decionis

decionis-autogen

Python 3.10+ · PyPI 0.2.0 · MIT

Gate AutoGen tool calls before they run.

pip install decionis-autogen

decionis-crewai

Python 3.10 to 3.13 · PyPI 0.2.0 · MIT

Gate CrewAI tool calls before they run.

pip install decionis-crewai

decionis-langchain

Python 3.10+ · PyPI 0.1.0 · MIT

Gate LangChain tools and LangGraph nodes before they run.

pip install decionis-langchain

TypeScript agent frameworks

MIT on npm. Its source repository is not public.

@decionis/langchain

TypeScript · npm 0.2.0 · MIT

Gate LangChain.js tools and LangGraph.js nodes before they run.

npm install @decionis/langchain @decionis/sdk @langchain/core

The hosted API

Proprietary license: free to install, not open source.

@decionis/sdk

TypeScript · npm 0.3.0 · Proprietary

The client the API quickstart uses. Every endpoint is also plain HTTPS.

npm install @decionis/sdk

Java and .NET

On Maven Central and NuGet, under the license each package states. Their source repositories are not public.

com.decionis:decionis-java

Java 17 · Maven Central 0.3.0 · MIT

The Java client for the Decionis API: claim the single-use grant before the action runs, and sign the request so the system of record can check it.

implementation("com.decionis:decionis-java:0.3.0")

com.decionis:decionis-spring-boot-starter

Java 17 (Spring Boot 3) · Maven Central 0.3.0 · MIT

@DecionisGate for Spring Boot 3: the method runs only after the verdict allows it. The execution-authority client comes configured as a bean.

implementation("com.decionis:decionis-spring-boot-starter:0.3.0")

Decionis

.NET 8 · NuGet 0.3.0 · MIT

The .NET client for the Decionis API: claim the single-use grant before the action runs, and sign the request so the system of record can check it.

dotnet add package Decionis --version 0.3.0

com.decionis.presence:presence-java

Java 17 · Maven Central 0.2.0 · Apache-2.0

Java SDK for Presence human-presence verification.

implementation("com.decionis.presence:presence-java:0.2.0")

Decionis.Presence

.NET 8 · NuGet 0.2.0 · Apache-2.0

.NET SDK for Presence human-presence verification.

dotnet add package Decionis.Presence --version 0.2.0

Embed the gate in your own service

Proprietary license: free to install, not open source.

@decionis/surface

TypeScript · npm 0.1.2 · Proprietary

The policy and inline guard engine the Decionis connectors run, to embed directly.

npm install @decionis/surface

@decionis/iso8583

TypeScript (Node ≥ 20) · npm 0.3.0 · Proprietary

Intercept ISO 8583 authorizations over TCP, tokenize the card in the bank's process, and match or evaluate each one before it settles.

npm install @decionis/iso8583

Other Decionis surfaces

Open source: Apache-2.0, developed in public repositories.

github.com/decionis/presence-go

Go · Go modules v0.2.0 · Apache-2.0

Go SDK and CLI for Presence human-presence verification.

go get github.com/decionis/presence-go@v0.2.0

Source

PresenceSDK

Swift · Swift Package Manager 0.2.0 · Apache-2.0

Swift SDK for Presence human-presence verification.

.package(url: "https://github.com/decionis/presence-swift", exact: "0.2.0")

Source

@decionis/shield

TypeScript · npm 0.1.1 · Apache-2.0

SDK for Shield, user-controlled spending authorization.

npm install @decionis/shield

Source

ShieldKit

Swift · Swift Package Manager 0.1.0 · Apache-2.0

Swift SDK for Shield spending authorization.

.package(url: "https://github.com/decionis/shield-swift", from: "0.1.0")

Source

CommerceGateApple

Swift (server) · Swift Package Manager 1.0.0 · Apache-2.0

Server-side guard for Apple Advanced Commerce transaction intents.

.package(url: "https://github.com/decionis/commercegate-apple-swift.git", from: "1.0.0")

Source

Previous package names

These still install at the version they were published at. For new work, install the package that replaced each.

  • @decionis/sdk-node 0.1.0, replaced by @decionis/sdk
  • @decionis/dossier-verify 0.1.0, replaced by @decionis/verify
  • @decionis/iso8583-interceptor 0.1.0, replaced by @decionis/iso8583

Or call the API directly

The hosted API is plain HTTPS. The API reference documents every endpoint, its request and response, and its errors. To generate a client in another language, start from the public OpenAPI contract.