# Daytona Stack

In the [AI Enablement Stack](/docs/introduction/ai-enablement-stack), **Blekline is Layer 4** (observability and governance) and **Daytona is Layer 1** (infrastructure / AI workspaces).

| Layer | Product | Role |
|-------|---------|------|
| **L4** | Blekline | Mask prompts, classify risk, govern MCP tool calls, audit |
| **L1** | Daytona | Isolated sandbox, code execution, MCP agent tools |

## Wiring

1. Connect `@blekline/mcp-proxy` in Cursor / Claude / Codex — [MCP proxy](/docs/mcp/proxy)
2. Set `BLEKLINE_DOWNSTREAM_MCP_COMMAND` to Daytona MCP server
3. Provide `DAYTONA_API_KEY`

**Flow:** L5 Agent → L4 Blekline proxy (scan / mask / block) → L1 Daytona MCP → sandbox.

See [Daytona documentation](https://www.daytona.io/docs/en/) for sandbox SDK and MCP server setup.

---

**Next steps:** [AI Enablement Stack](/docs/introduction/ai-enablement-stack) · [Architecture](/docs/introduction/architecture) · [MCP Cursor setup](/docs/mcp/cursor) · [Open workspace](https://app.blekline.com)