Developers — SDKs

Four packages, one vocabulary.

All open source. The engine, the evidence store and the console are the product; the clients are not, because a governance client you cannot read is a governance client you cannot check.

rotascale — Python: The reference client. Witness, authorize, outcome, and the capability extra when a grant names a resource and you want the token verified.
@rotascale/sdk — TypeScript: The same vocabulary for Node and the edge.
rotascale-mcp — MCP server: Exposes governance as MCP tools, so an agent host can ask for authority without an SDK dependency.
rotascale-mcp-proxy — MCP proxy: Sits between the agent and its MCP server. It reads the tool name off the wire and the agent gets no vote — which is why its decisions record scope as observed rather than asserted, and why it is a genuine enforcement point rather than a convenience.

Published under the company namespace: rotascale on PyPI, @rotascale on npm. The product is RotaGrant; the packages are Rotascale's.