Skip to main content

Scion SDK

Scion SDK logo

Build secure connectors once. Serve, synchronize, and write back through one governed contract.
The typed source-integration boundary for MCP services and Medulla.

PyPI - Version Build Documentation GitHub Repo stars GitHub forks GitHub contributors GitHub license GitHub last commit (by committer) GitHub pull requests GitHub closed pull requests GitHub issues GitHub top language GitHub language count GitHub repo size GitHub repo file count (file type) PyPI - Downloads PyPI - License PyPI - Wheel PyPI - Implementation

Documentation · Capabilities · Interfaces · Status


Quick Start

Install Scion SDK as scion-sdk and import it as scion_sdk. The repository, package, CLI, and API identifiers all use the scion-sdk name.

Create a project and install the SDK:

uv init --bare demo-connector
cd demo-connector
uv add scion-sdk
uv sync
uv run connector-sync --help

The command prints the supervised synchronization options without opening a source session. Continue with the connector tutorial to build and run a one-file MCP connector, observe its health response, add declarative content, certify the live schema, and join source synchronization.

Overview

Scion SDK is the ecosystem's source-integration boundary. It turns vendor APIs and domain tools into secure MCP connectors, transports bounded source evidence into Medulla, indexes immutable repository snapshots, and applies authorized changes back to source systems.

Connector packages retain vendor behavior. The SDK owns transport, lifecycle, certification, and effect execution. Medulla owns durable graph records, checkpoints, content identity, and receipts.

Key Capabilities

  • Build FastMCP servers with authentication, safe exposure, health, visibility, rate limits, change subscriptions, and consistent tool surfaces.
  • Publish skills, prompts, ontologies, SHACL shapes, and connector manifests as typed MCP content.
  • Extract bounded source pages and advance checkpoints only from matching durable Medulla receipts.
  • Import deterministic ConnectorPack archives without copying graph types or digest algorithms into connector packages.
  • Stream authenticated immutable repository snapshots into the IndexRepository boundary without becoming a semantic writer.
  • Govern write-back through dry-run, authorization, source-version checks, idempotency, and uncertain-effect reconciliation.
  • Certify extension identity, live MCP schemas, pagination, and safety behavior before activation.

Documentation

Start with Build the operator's first connector, then choose the reference that matches the work:

Sibling authorities: Medulla owns durable graph state; Arbora is the one door for admission, auth, served operations, and MCP and A2A serving.

Architecture

Runtime architecture: people and clients enter through Arbora. Source systems flow through Scion SDK into Medulla.

Explore the live architecture

Boundary Owned here Owned elsewhere
Connector service MCP lifecycle, exposure policy, content capture, certification Vendor models and business semantics stay in the connector package.
Source ingest Discovery, bounded extraction, transport, receipt verification Medulla owns mapping, checkpoints, provenance, and commit receipts.
Repository ingest Authenticated snapshots, stable manifests, bounded object transport Medulla owns indexing, graph projection, and semantic interpretation.
Write-back Preview, source-version checks, apply, and reconciliation Medulla owns change sets, authorization decisions, and durable outcomes.
Runtime composition Typed ports and checked dependency requirements Arbora supplies authenticated identity, clients, and live authority.

The SDK depends directly on medulla. The Rust serde types in Medulla are the source of truth. The SDK holds hand-written SourceIngest, ConnectorPack, IndexRepository, and WriteBack clients, tested on round-trip vectors. The SDK adds no parallel graph contract. Spec IDs use the SCION- prefix.

Contributing

Issues and pull requests are welcome. Follow AGENTS.md for ownership, isolation, and validation rules, and run the affected tests and public-surface gates before submitting a change.

License

Scion SDK is released under the MIT License.

Metadata

Release files for scion-sdk 0.10.1

For a detailed explanation of source distributions (sdists) and built distributions (wheels), please see the package formats documentation.

Source distribution (sdist)

Source distribution for scion-sdk 0.10.1
File Size Uploaded Provenance Actions
scion_sdk-0.10.1.tar.gz 1.3 MB Without provenance Details for scion_sdk-0.10.1.tar.gz

Built distribution (wheel)

Table of built distributions (wheels) for scion-sdk 0.10.1
File Interpreter ABI Platform Actions
scion_sdk-0.10.1-py3-none-any.whl Python 3 none any Details for scion_sdk-0.10.1-py3-none-any.whl

Total release size: 2.5 MB

Release files / scion_sdk-0.10.1.tar.gz

Download URL scion_sdk-0.10.1.tar.gz
Size 1.3 MB
Tags Source
SHA-256 checksum
How to use checksums
72e51d440fd55e660ce537df436dde140724b79f96efef488d3df444471e0e1f
BLAKE2b-256 checksum
How to use checksums
a4afd9eb8f54d69fceb786519fe97f0e86465d7b06023a928dfe9f24976b2907
Upload date
Uploaded using Trusted Publishing?
What is trusted publishing?
No
Uploaded via twine/7.0.0 CPython/3.14.7

Release files / scion_sdk-0.10.1-py3-none-any.whl

Download URL scion_sdk-0.10.1-py3-none-any.whl
Size 1.2 MB
Tags Python 3
SHA-256 checksum
How to use checksums
8887292948874cdc634aeb58b421ef6a5eee1a0a62c5a3c716dba89f2d1b0120
BLAKE2b-256 checksum
How to use checksums
8866b46a5b67e4df01701a8e37940a593ffdca61c240ac6c10c45d39c2b3e65b
Upload date
Uploaded using Trusted Publishing?
What is trusted publishing?
No
Uploaded via twine/7.0.0 CPython/3.14.7

Security for scion-sdk 0.10.1

Provenance

Provenance describes where a file came from. On PyPI, provenance is shared via attestations, which provide a verifiable record of the build or publishing details. View details, limitations and caveats.

No provenance found

None of the files in this release were uploaded with provenance metadata.

A note on package security

PyPI is a repository for distributing packages, not a service for auditing them. While third-party security researchers and our staff do their best to detect and remove malicious packages, PyPI cannot guarantee the quality, security or suitability of any given package.

To learn more about protecting yourself from malicious actors, visit our package security documentation.

Anthropic, PBC Visionary sponsor Bloomberg Visionary sponsor Hudson River Trading Visionary sponsor Meta Visionary sponsor NVIDIA Visionary sponsor Microsoft Sustainability sponsor Depot Continuous Integration AWS Cloud computing and Security Sponsor Datadog Monitoring Fastly CDN Google Download Analytics Sentry Error logging StatusPage Status page