install

Additional install commands

Portable and language managers

npmverified · 100%

npm install -g decocms

local npm package metadata

overview

Package summary

Deco CMS — Self-hostable MCP Gateway for managing AI connections and tools

Project links

Commands and aliases

deco

security posture

No protected-tool coverage found yet

No matching local secret-handling manifest was found for decocms. Nucleus package metadata is still published here so future coverage has a stable package URL.

Install behavior

No npm postinstall script is recorded in package metadata.
No Homebrew bottle metadata was recorded.
Installs with 28 runtime dependencies.
Build metadata lists 97 build dependencies.

Recommended review

Before unattended agent use, check whether the tool reads plaintext credentials, writes remote state, publishes artifacts, or shells out to plugins.

executables

Installed executables

Command	Kind	Exposure	Note
`deco`	cli	global executable

freshness

Version and freshness

These signals separate page generation age, package-manager activity, and upstream release comparison. Version lag is warned only when an evidence URL and comparable versions are present.

page generated2026-07-07

manager version3.24.0

manager updated2026-06-20

local dataok

upstreamnot checked

latest detectednot detected

https://github.com/decocms/studio

infoNo cached GitHub release or tag data was available.https://github.com/decocms/studionone confidence

install metadata

Package metadata

Package key	npm:decocms
Version	3.24.0
Package manager	npm
Package manager page	https://www.npmjs.com/package/decocms
Homepage	https://github.com/decocms/studio
Repository	https://github.com/decocms/studio
Upstream docs	https://github.com/decocms/studio
License	MIT
Source archive	https://registry.npmjs.org/decocms/-/decocms-3.24.0.tgz
Issue tracker	https://github.com/decocms/studio/issues
Last updated	2026-06-20T13:32:02.203Z
Published	2026-06-16T02:55:16.733Z
Pulse	updated
Dependencies	@ai-sdk/anthropic, @ai-sdk/google, @ai-sdk/openai, @anthropic-ai/sdk, @aws-sdk/client-s3, @aws-sdk/lib-storage, @aws-sdk/s3-request-presigner, @clickhouse/client, @dbos-inc/dbos-sdk, @dnd-kit/core, @dnd-kit/sortable, @dnd-kit/utilities, @inkjs/ui, @modelcontextprotocol/ext-apps, @openrouter/ai-sdk-provider, @opentelemetry/core, @tanstack/react-virtual, @xterm/addon-fit, @xterm/xterm, embedded-postgres, ink, kysely, nats, node-pty, posthog-js, posthog-node, react, react-dom
Build dependencies	@ai-sdk/provider, @ai-sdk/react, @better-auth/sso, @daveyplate/better-auth-ui, @deco/ui, @decocms/better-auth, @decocms/bindings, @decocms/harness, @decocms/mcp-utils, @decocms/mesh-sdk, @decocms/runtime, @decocms/sandbox, @decocms/std, @floating-ui/react, @happy-dom/global-registrator, @hookform/resolvers, @jitl/quickjs-wasmfile-release-sync, @modelcontextprotocol/sdk, @monaco-editor/react, @opentelemetry/api, @opentelemetry/api-logs, @opentelemetry/exporter-logs-otlp-proto, @opentelemetry/exporter-prometheus, @opentelemetry/exporter-trace-otlp-proto, @opentelemetry/instrumentation-runtime-node, @opentelemetry/resources, @opentelemetry/sdk-logs, @opentelemetry/sdk-metrics, @opentelemetry/sdk-node, @opentelemetry/sdk-trace-base, @playwright/experimental-ct-react, @playwright/test, @radix-ui/react-avatar, @radix-ui/react-checkbox, @radix-ui/react-dialog, @radix-ui/react-dropdown-menu, @radix-ui/react-label, @radix-ui/react-select, @radix-ui/react-separator, @radix-ui/react-slot, @radix-ui/react-tabs, @rjsf/core, @rjsf/shadcn, @rjsf/utils, @rjsf/validator-ajv8, @tailwindcss/vite, @tanstack/react-query, @tanstack/react-router, @testing-library/jest-dom, @testing-library/react, @tiptap/core, @tiptap/extension-mention, @tiptap/extension-placeholder, @tiptap/pm, @tiptap/react, @tiptap/starter-kit, @tiptap/suggestion, @types/bun, @types/pg, @types/react-syntax-highlighter, @untitledui/icons, @vercel/nft, @vitejs/plugin-react, ai, babel-plugin-react-compiler, better-auth, class-variance-authority, clsx, concurrently, croner, date-fns, degit, hono, input-otp, jose, lucide-react, marked, mesh-plugin-workflows, nanoid, pg, prettier, react-hook-form, react-markdown, react-resizable-panels, react-syntax-highlighter, recharts, rehype-raw, remark-gfm, sass-embedded, sonner, tailwind-merge, tailwindcss, typescript, vite, vite-tsconfig-paths, zod, zustand
Bottle	not recorded
npm postinstall	not defined
Service	none declared
Keywords	mcp, model-context-protocol, ai, gateway, self-hosted, mesh, tools

registry facts

Source database details

Source Database	npm registry
Dist Tags	Latest 3.24.0 Next 2.281.4-alpha.1
Version Count	1,011
Maintainers	camudo
Author	Deco team
Publisher	GitHub Actions
Optional Dependencies	@anthropic-ai/claude-agent-sdk @duckdb/node-api
Integrity	sha512-aCLv6cn2Omw1j4gEDzR8FoM37zTEk62vLXmSlgo83RIxebXMQCCc2bSQVC70mnCKu6BO0t4PWKzPDKAmrBAWGg==
Shasum	eff54498d996726b3764d107abe3ffd89b64770e
Unpacked Size	94,063,386
File Count	0
Created At	2025-08-22T13:13:41.197Z
Latest Published At	2026-06-16T02:55:16.733Z
Modified At	2026-06-16T02:55:17.000Z

source database matches

Other package-manager records

Matches are pulled from external package-manager indexes and kept separate from local Automic Vault package links.

MacPorts94%

deco

sudo port install deco

installed executable or alias match
Matched by: Deco

MacPorts ports tree · api.github.com · MacPorts ports tree: archivers/deco/Portfile from https://api.github.com/repos/macports/macports-ports/git/trees/master?recursive=1

zypper92%

deco 1.6.4-1.22

Deco Archive File Extractor

https://github.com/peha/deco

sudo zypper install deco

License: GPL-3.0-only
Category: Unspecified
Architecture: x86_64
Source Package: deco
4 dependencies
1 provides
installed executable or alias match
Matched by: Deco

openSUSE Tumbleweed package metadata · download.opensuse.org · openSUSE Tumbleweed package metadata: deco from https://download.opensuse.org/tumbleweed/repo/oss/repodata/be8d3611d25469107f32075a1697e69ec57a2b850b42348a658cc671ad5ec2b50760d02c3e59524d50da9a11d5be799bdaffba2e166e8ca8858512e3c0bd665d-primary.xml.zst

package graph

Links come from deterministic package relationships, av.db category and tag curation, ecosystem matches, and package hub membership.

source trail

Generated from repository data

This page is generated by av-web from the private package SQLite artifact built by scripts/generate-pkg-sqlite.py.

Used sources

Nucleus package database
cross-ecosystem install command graph
external package-manager database matches
package relationship graph
package version freshness
package-page enrichment

Install decocms with npm