MCP Surfaces

One protocol. Two different trust boundaries.

Use the public read-only Policy Notaries for source-backed support checks. Use Decision Runtime MCP only for authenticated operations on customer-owned Decision API records.

Connect Policy Notaries Policy Notaries guide Review Runtime MCP Developer hub

Select by data ownership

The public directory intentionally exposes only the read-only policy endpoint. The authenticated runtime remains a separate private preview.

Public and read-only

Decide Policy Notaries

Checks refund, cancellation, return, and trial policy across the supported vendor registry. No customer Decision Records are read or changed.

No authentication required
Read-only and idempotent tools
Fail-closed UNKNOWN when required facts or source confidence are missing
Canonical endpoint published in MCP manifests and directories

Connection details Server card

Private preview

Decision Runtime MCP

Operates on customer-owned Decision API records through authenticated transport and tenant-scoped access controls.

Requires a production Decision API identity
Private allowlist during preview
Not submitted to public MCP directories
No public endpoint is disclosed by the discoverability catalog

Review the boundary Request preview access

Public MCP

Policy Notaries connection

Configure one canonical Streamable HTTP server. Specialist subdomains remain compatibility surfaces; new integrations should use the unified endpoint.

MCP client entry

{
  "mcpServers": {
    "decide-policy": {
      "url": "https://policy.decide.fyi/api/mcp"
    }
  }
}

Canonical endpoint

https://policy.decide.fyi/api/mcp

No auth Read-only 4 tools

Refund

`refund_eligibility`

Allowed, denied, or unknown.

Cancel

`cancellation_penalty`

Free cancel, penalty, locked, or unknown.

Return

`return_eligibility`

Returnable, expired, non-returnable, or unknown.

Trial

`trial_terms`

Trial available, no trial, or unknown.

Tool contracts MCP server card Agent card UCP manifest

Authenticated MCP

Decision Runtime private preview

This surface is for customer-owned runtime records, not public policy lookups. It stays out of public directories until its authentication and general-availability contract are ready.

Boundary	Private-preview contract
Identity	Transport credentials map to a Decision API customer and tenant.
Authorization	Production access requires an explicit preview allowlist; cross-tenant records fail closed.
Tool arguments	Credentials never belong in prompts, tool arguments, or example payloads.
Discovery	No public endpoint, public directory submission, or broad authenticated-access claim during preview.
Access	Request API and preview access.

Machine-readable visibility

The public MCP directory preserves the same separation: an endpoint for Policy Notaries, status and access metadata for Runtime MCP, and no private endpoint leak.

Decide MCP directory Public catalog API Static public catalog