Skip to main content

Scion SDK

Scion SDK logo

Build secure connectors once. Serve, synchronize, and write back through one governed contract.
The typed source-integration boundary for MCP services and Medulla.

PyPI - Version Build Documentation GitHub Repo stars GitHub forks GitHub contributors GitHub license GitHub last commit (by committer) GitHub pull requests GitHub closed pull requests GitHub issues GitHub top language GitHub language count GitHub repo size GitHub repo file count (file type) PyPI - Downloads PyPI - License PyPI - Wheel PyPI - Implementation

Documentation · Capabilities · Interfaces · Status


Quick Start

Install Scion SDK as scion-sdk and import it as scion_sdk. The repository, package, CLI, and API identifiers all use the scion-sdk name.

Create a project and install the SDK:

uv init --bare demo-connector
cd demo-connector
uv add scion-sdk
uv sync
uv run connector-sync --help

The command prints the supervised synchronization options without opening a source session. Continue with the connector tutorial to build and run a one-file MCP connector, observe its health response, add declarative content, certify the live schema, and join source synchronization.

Overview

Scion SDK is the ecosystem's source-integration boundary. It turns vendor APIs and domain tools into secure MCP connectors, transports bounded source evidence into Medulla, indexes immutable repository snapshots, and applies authorized changes back to source systems.

Connector packages retain vendor behavior. The SDK owns transport, lifecycle, certification, and effect execution. Medulla owns durable graph records, checkpoints, content identity, and receipts.

Key Capabilities

  • Build FastMCP servers with authentication, safe exposure, health, visibility, rate limits, change subscriptions, and consistent tool surfaces.
  • Publish skills, prompts, ontologies, SHACL shapes, and connector manifests as typed MCP content.
  • Extract bounded source pages and advance checkpoints only from matching durable Medulla receipts.
  • Import deterministic ConnectorPack archives without copying graph types or digest algorithms into connector packages.
  • Stream authenticated immutable repository snapshots into the IndexRepository boundary without becoming a semantic writer.
  • Govern write-back through dry-run, authorization, source-version checks, idempotency, and uncertain-effect reconciliation.
  • Certify extension identity, live MCP schemas, pagination, and safety behavior before activation.

Documentation

Start with Build the operator's first connector, then choose the reference that matches the work:

Sibling authorities: Medulla owns durable graph state; Arbora is the one door for admission, auth, served operations, and MCP and A2A serving.

Architecture

Runtime architecture: people and clients enter through Arbora. Source systems flow through Scion SDK into Medulla.

Explore the live architecture

Boundary Owned here Owned elsewhere
Connector service MCP lifecycle, exposure policy, content capture, certification Vendor models and business semantics stay in the connector package.
Source ingest Discovery, bounded extraction, transport, receipt verification Medulla owns mapping, checkpoints, provenance, and commit receipts.
Repository ingest Authenticated snapshots, stable manifests, bounded object transport Medulla owns indexing, graph projection, and semantic interpretation.
Write-back Preview, source-version checks, apply, and reconciliation Medulla owns change sets, authorization decisions, and durable outcomes.
Runtime composition Typed ports and checked dependency requirements Arbora supplies authenticated identity, clients, and live authority.

The SDK depends directly on medulla. The Rust serde types in Medulla are the source of truth. The SDK holds hand-written SourceIngest, ConnectorPack, IndexRepository, and WriteBack clients, tested on round-trip vectors. The SDK adds no parallel graph contract. Spec IDs use the SCION- prefix.

Contributing

Issues and pull requests are welcome. Follow AGENTS.md for ownership, isolation, and validation rules, and run the affected tests and public-surface gates before submitting a change.

License

Scion SDK is released under the MIT License.

Metadata

Release files for scion-sdk 0.10.0

For a detailed explanation of source distributions (sdists) and built distributions (wheels), please see the package formats documentation.

Source distribution (sdist)

Source distribution for scion-sdk 0.10.0
File Size Uploaded Provenance Actions
scion_sdk-0.10.0.tar.gz 1.3 MB Without provenance Details for scion_sdk-0.10.0.tar.gz

Built distribution (wheel)

Table of built distributions (wheels) for scion-sdk 0.10.0
File Interpreter ABI Platform Actions
scion_sdk-0.10.0-py3-none-any.whl Python 3 none any Details for scion_sdk-0.10.0-py3-none-any.whl

Total release size: 2.5 MB

Release files / scion_sdk-0.10.0.tar.gz

Download URL scion_sdk-0.10.0.tar.gz
Size 1.3 MB
Tags Source
SHA-256 checksum
How to use checksums
a9738606058ac7eff44c520924082cf0be52d0902bbdb4841d40eb43a3082700
BLAKE2b-256 checksum
How to use checksums
5a6025535b683e1512bb2484d6603e67386f9552cefc718e6c2546a8d7470a72
Upload date
Uploaded using Trusted Publishing?
What is trusted publishing?
No
Uploaded via twine/7.0.0 CPython/3.14.7

Release files / scion_sdk-0.10.0-py3-none-any.whl

Download URL scion_sdk-0.10.0-py3-none-any.whl
Size 1.2 MB
Tags Python 3
SHA-256 checksum
How to use checksums
002ca9030a2d9280006b9c44952f6ab88e7a685f26a83a71b9af3783d6e5673f
BLAKE2b-256 checksum
How to use checksums
36f1856bb74329e783ac8ec376a221977929368e475be247f173df131e637ced
Upload date
Uploaded using Trusted Publishing?
What is trusted publishing?
No
Uploaded via twine/7.0.0 CPython/3.14.7

Security for scion-sdk 0.10.0

Provenance

Provenance describes where a file came from. On PyPI, provenance is shared via attestations, which provide a verifiable record of the build or publishing details. View details, limitations and caveats.

No provenance found

None of the files in this release were uploaded with provenance metadata.

A note on package security

PyPI is a repository for distributing packages, not a service for auditing them. While third-party security researchers and our staff do their best to detect and remove malicious packages, PyPI cannot guarantee the quality, security or suitability of any given package.

To learn more about protecting yourself from malicious actors, visit our package security documentation.

Anthropic, PBC Visionary sponsor Bloomberg Visionary sponsor Hudson River Trading Visionary sponsor Meta Visionary sponsor NVIDIA Visionary sponsor Microsoft Sustainability sponsor Depot Continuous Integration AWS Cloud computing and Security Sponsor Datadog Monitoring Fastly CDN Google Download Analytics Sentry Error logging StatusPage Status page