# LlamaIndex Stack

| Layer | Product | Role |
|-------|---------|------|
| **L4** | Blekline | Mask, enforce tool policy, audit |
| **L2** | LlamaIndex | Framework / retrieval |

## Wiring

1. Add `@blekline/mcp-server` or `@blekline/client` to your agent pipeline
2. Pattern: **Callback / query-engine wrapper with mask**
3. Route tool calls through `@blekline/mcp-proxy` when agents invoke external tools

**Flow:** Agent → L4 Blekline → L2 LlamaIndex → models / vector stores.

## Security

- **Tool-arg governance** — Block PII in embedding queries via MCP tool policy.
- **Tenant isolation** — You manage LlamaIndex credentials; Blekline does not store them.

See [LlamaIndex documentation](https://docs.llamaindex.ai/).

---

**Next steps:** [Frameworks hub](/docs/integrations/frameworks-and-rag) · [MCP proxy](/docs/mcp/proxy) · [TypeScript SDK](/docs/sdk/typescript) · [Open workspace](https://app.blekline.com)