| Layer | Product | Role |
|---|---|---|
| L4 | Blekline | Mask, enforce tool policy, audit |
| L2 | Contextual AI | Framework / retrieval |
Wiring
- Add
@blekline/mcp-serveror@blekline/clientto your agent pipeline - Pattern: Mask queries before RAG pipeline
- Route tool calls through
@blekline/mcp-proxywhen agents invoke external tools
Flow: Agent → L4 Blekline → L2 Contextual AI → models / vector stores.
Security
- Tool-arg governance — Block PII in embedding queries via MCP tool policy.
- Tenant isolation — You manage Contextual AI credentials; Blekline does not store them.
See Contextual AI documentation.
Next steps: Frameworks hub · MCP proxy · TypeScript SDK · Open workspace