Blekline provides a workspace OAuth connector for Claude Desktop and Claude.ai remote MCP: mask PII and secrets, simulate policy, evaluate tool calls, and log metadata audit events — before content reaches Claude or downstream MCP tools.
Claude connectors directory listing is not live yet. Use workspace OAuth below (or manual stdio) until Partner Center submission is approved.
Connect today (workspace OAuth)
- Open Operations → MCP → Desktop / Connector.
- Click Connect Claude (OAuth) and sign in with your Blekline workspace.
OAuth scopes:
| Scope | Purpose |
|---|---|
mcp:mask | Mask prompts via cloud control plane |
mcp:policy:read | Read-only policy simulation |
mcp:enforce | Evaluate tool call policy |
mcp:events:write | Metadata governance events |
Requires Free plan or active tryout. Quick Start · Billing
When Blekline is listed in the Claude connectors directory, the same OAuth flow will also appear inside Claude Desktop settings.
Remote MCP URL
https://app.blekline.com/api/mcp/remote
Authenticate with Authorization: Bearer <access_token> from OAuth token exchange.
Tools
| Tool | Type | Purpose |
|---|---|---|
blekline_mask_prompt | Write | Mask PII/secrets in prompt text |
blekline_simulate_policy | Read | Policy simulation without masking |
blekline_evaluate_tool_call | Read | Tool allow/mask/block evaluation |
blekline_log_governance_event | Write | Metadata audit event |
Deprecated aliases blekline_classify_risk and blekline_emit_event remain supported.
Manual setup (stdio)
See Claude Desktop for local npx @blekline/mcp-server config with a workspace API key.
Privacy
- Masking calls process prompt text in transit; Blekline never stores raw prompts in the audit stream. See Trust boundaries.
- Governance events are metadata-only.
- Privacy policy: https://blekline.com/privacy
Revoke access
Workspace Operations → MCP → Claude Desktop connector → Revoke, or Admin → API keys (revokes connector token).
Next steps: Choose your path · Claude Desktop manual setup · MCP server · Open workspace