decionis/mcp repository overview

⁠decionis/mcp — Decionis execution authority, local MCP evaluator

A stdio Model Context Protocol⁠ server that lets AI coding agents (Claude Code, Cursor, Codex, OpenHands, …) read a repository's DECIONIS_POLICY.md and evaluate candidate actions before they commit, deploy, or migrate anything.

This image wraps the published npm package @decionis/mcp⁠ at an exact pinned version — packaging only, no fork. The evaluator boots the real Decionis protocol service in-process: the verdict an agent sees locally is the verdict the platform would produce — with zero network, zero database, zero credentials, and nothing recorded.

⁠Run

Mount your policy read-only; the evaluator needs no network and writes no state:

docker run -i --rm \
  --network none --read-only \
  -v "$PWD/DECIONIS_POLICY.md:/work/DECIONIS_POLICY.md:ro" \
  decionis/mcp

⁠Wire it up (any stdio MCP client)

Claude Code (.mcp.json at the repo root), Cursor, and other stdio MCP clients use the same shape — replace the absolute path with your repo's:

{
  "mcpServers": {
    "decionis": {
      "command": "docker",
      "args": [
        "run", "-i", "--rm", "--network", "none", "--read-only",
        "-v", "/absolute/path/to/your/repo/DECIONIS_POLICY.md:/work/DECIONIS_POLICY.md:ro",
        "decionis/mcp"
      ]
    }
  }
}

⁠Tools

⁠Verdicts and outcomes

From the server's own decionis_verdict_help:

Agent behavior on each verdict: allow → proceed; block → do not proceed; review/escalate → stop and involve a human.

⁠Configuration

No credentials are required.

⁠Image

• Wraps @decionis/mcp at an exact, lockfile-pinned version; the image version tracks the wrapped package version.
• Runs as a non-root user on a digest-pinned base; release images publish SBOM and provenance attestations and are signed.

⁠Support & license

• Documentation: https://decionis.com/docs/protocol-mcp⁠
• Issues: https://github.com/decionis/docker/issues⁠
• License: Apache-2.0