# Quick Start

Blekline is **Layer 4 governance** in the [AI Enablement Stack](/docs/introduction/ai-enablement-stack) — mask, enforce, and audit agent traffic before it reaches models and [L1 sandboxes](/docs/integrations/sandbox-providers).

## 1. Workspace token

Create an API key in **Admin → API keys** (or **Operations → MCP**) with scopes `mask:write` and `events:write`.

## 2. Headless smoke (CLI first)

```bash
git clone https://github.com/Blekline/blekline-oss.git
cd blekline-oss
pnpm install && pnpm build:packages
export BLEKLINE_WORKSPACE_TOKEN="blw_..."
export BLEKLINE_API_URL="https://app.blekline.com"
export BLEKLINE_CLIENT_SURFACE="sdk"
pnpm demo:mcp-smoke
```

Or without clone: `npx -y @blekline/mcp-server` with the same env vars.

See [`cli/`](https://github.com/Blekline/blekline-oss/tree/main/cli) on blekline-oss.

## 3. CI verify (optional)

```bash
pnpm verify:integrations
```

Copy [`ci/github-actions/blekline-gate.yml.example`](https://github.com/Blekline/blekline-oss/tree/main/ci) for GitHub Actions. See [CI/CD](/docs/sdk/ci-cd).

## 4. Connect your agent client

Full matrix: [Integrations index](https://github.com/Blekline/blekline-oss/tree/main/integrations) · [Agent clients](/docs/integrations/agent-clients)

| Client | Repo path | Doc |
|--------|-----------|-----|
| Claude Code | `.claude/settings.json.example` | [Claude Code](/docs/mcp/claude-code) |
| Cursor | `.cursor/mcp.json.example` | [Cursor](/docs/mcp/cursor) |
| Claude Desktop | `config/claude_desktop_config.json.example` | [Claude Desktop](/docs/mcp/claude-desktop) |
| Codex | `.codex/config.toml.example` | [Codex](/docs/mcp/codex) |
| Continue / Copilot | `.vscode/` | [Continue](/docs/mcp/continue) · [Copilot](/docs/mcp/github-copilot) |

Generate examples: `pnpm generate:mcp-configs` — live configs: `pnpm generate:mcp-configs --local`

## 5. Verify in IDE

Reload your client and confirm MCP tools: `blekline_mask_prompt`, `blekline_evaluate_tool_call`, etc.

## Sandboxes and models

- L1 sandboxes: [Sandbox providers](/docs/integrations/sandbox-providers) + `@blekline/mcp-proxy`
- Model APIs: [Model providers](/docs/integrations/model-providers)

---

**Try the simulator:** [Runtime Enforcement Simulator](/docs/playground/runtime-enforcement) · [NHIM overview](/docs/introduction/nhim) · [Definitions](/docs/definitions)

**Next steps:** [AI Enablement Stack](/docs/introduction/ai-enablement-stack) · [Architecture](/docs/introduction/architecture) · [Open workspace](https://app.blekline.com)