Decionis products
AgentSafe protects your agents' API calls. Commerce Gate protects your store and marketplace orders. Both check the action before it commits, hold anything outside your policy for the person you name, and sign every decision so you can check it yourself.
Decionis products
Pick the product for the actions you want to stop first. AgentSafe checks your agents' API calls, MCP tools and deployments. Commerce Gate checks prices, orders, promotions and refunds on your store and marketplaces. Presence verifies a named human when policy requires approval. Both products use the same policy decisions and signed records.
One policy check before the action commits
Your policy → allow, escalate to a person, or block → a signed record you can check
For your agents, APIs and CI/CD
Stop agent API calls your policy doesn't allow.
Put the gateway in front of your agents. Every write is checked before it is sent: it goes through once, waits for your approval, or is refused.
Agent tool calls, API requests, MCP tools, deployments and infrastructure changes.
Start NowInstall AgentSafeInstall it yourself with Homebrew, Docker or Helm. Buy a plan direct; no marketplace needed. Plans
For your store and marketplace orders
Protect your margin before an order, price or refund commits.
Live on Walmart, Shopify and WooCommerce. Stop the discount, order or refund that breaks your margin rules before it commits.
Price changes, orders, promotions, fulfillment, inventory and refunds.
Start NowSee what Commerce Gate stopsBuy a plan direct, or install from the Shopify App Store, WordPress.org or the Walmart Marketplace App Store. Plans
Presence verifies the person who approves, when your policy asks for one, for that exact action.
Decision Dossier keeps the verdict, the policy in force and the signature, so you can check it without asking us.
AgentSafe is open source. It enforces the verdict of a Decionis authority: the hosted service, or one you run in your own cloud under a commercial licence (Private beta). The open-source gateway never decides policy by itself.
Execution Authority answers one question before an action commits: may this exact action run now, under your policy and the approvals it requires? Your identity system proves who is acting and your guardrails judge content and risk. Execution Authority decides whether the resulting payment, change or API call may commit, and leaves a signed record you can verify.
Your identity system, guardrails and downstream application retain their existing responsibilities.
One policy, one approval step and one signed record, whichever product you start with. Your systems keep running the actions; you connect only the ones you want to protect.
Each action runs, waits for the person you name, or stops, under the rules you set.
An approval covers that exact action once. It can't be replayed or moved to another.
Every decision is Ed25519-signed, so you verify it offline without asking us.
Updated · Published by Decionis, Inc. · Contact the team
