# TaskWeaver Stack | Layer | Product | Role | |-------|---------|------| | **L4** | Blekline | Mask, enforce tool policy, audit | | **L2** | TaskWeaver | Framework / retrieval | ## Wiring 1. Add `@blekline/mcp-server` or `@blekline/client` to your agent pipeline 2. Pattern: **mcp-proxy for code-exec plugins** 3. Route tool calls through `@blekline/mcp-proxy` when agents invoke external tools **Flow:** Agent → L4 Blekline → L2 TaskWeaver → models / vector stores. ## Security - **Tool-arg governance** — Block PII in embedding queries via MCP tool policy. - **Tenant isolation** — You manage TaskWeaver credentials; Blekline does not store them. See [TaskWeaver documentation](https://microsoft.github.io/TaskWeaver/). --- **Next steps:** [Frameworks hub](/docs/integrations/frameworks-and-rag) · [MCP proxy](/docs/mcp/proxy) · [TypeScript SDK](/docs/sdk/typescript) · [Open workspace](https://app.blekline.com)