Blekline MCP Server

Blekline governs non-human identities (agents) at the execution boundary — MCP tool calls, prompt ingress, and sidecar hops — before models or sandboxes act.

This is Blekline’s open-core repository: npm packages, client integrations, and the NHIM audit CLI. Documentation, the eval workspace, the hosted control plane, and the production NHIM sidecar image are on blekline.com and app.blekline.com.

Typical path: NHIM audit on staging → platform eval (Track 01 K8s · 02 Docker · 03 MCP).

What lives here vs on blekline.com

Track 01 / 02 deploy the NHIM sidecar image (ghcr.io/blekline/sidecar) — Trust Vault, Lineage Firewall, admission — documented under Docker sidecar and K8s fleet. That image is not built from this repository.

Why packages/ingress-proxy is still open source

This folder is a reference sidecar — source you can audit, fork, and run locally:

• Tool-call enforcement and model ingress using @blekline/contracts (same policy primitives as MCP)

• Helm chart as a starting layout for sidecar injection (values default vault/lineage off)

• For contributors and self-hosters who want contracts-level enforcement without pulling the NHIM image

It is not a stand-in for the production sidecar on eval tracks. If you only need Track 03, use MCP. If you need Trust Vault or Lineage, use the NHIM image from the deploy guides — not a DIY build of this package alone.

Details: packages/ingress-proxy/README.md · Ingress proxy API

Related MCP server: sovr-mcp-proxy

Quick start

Step 0 — NHIM audit (no Blekline account)

kubectl apply -f https://raw.githubusercontent.com/Blekline/blekline-oss/main/packages/nhim-audit/deploy/rbac/nhim-audit-reader.yaml
npx @blekline/nhim-audit audit --plain --json -o nhim-audit.json

Track 03 — MCP smoke

git clone https://github.com/Blekline/blekline-oss.git && cd blekline-oss
pnpm install && pnpm build:packages
export BLEKLINE_WORKSPACE_TOKEN="blw_..." BLEKLINE_API_URL="https://app.blekline.com" BLEKLINE_CLIENT_SURFACE="sdk"
pnpm demo:mcp-smoke

CLI: cli/README.md · CI: ci/ · Demos: demo/README.md

Packages

Reference deploy (optional): packages/ingress-proxy — Docker / Helm for contracts-only sidecar; production eval uses the NHIM image instead.

MCP tools: blekline_mask_prompt · blekline_classify_risk · blekline_evaluate_tool_call · blekline_emit_event — MCP server docs

OpenAPI: packages/contracts/openapi.yaml

Deploy tracks

Connect a client

Full matrix: integrations/README.md · pnpm generate:mcp-configs · pnpm verify:integrations

Integration guides (L1 sandboxes, model providers, LangSmith, etc.): app.blekline.com/docs/integrations

Architecture

flowchart LR
  Agents[L5 Agents] --> L4[Blekline L4]
  L4 --> MCP[MCP / tools]
  L4 --> Models[Model APIs]
  L4 --> Vault[Trust Vault — NHIM image]

Layer 4 ingress between agents and tools/models. Architecture · Trust boundaries · Runtime simulator

Documentation

Community

• Questions — GitHub Discussions

• Design partners / platform eval — design partner issue (Track 01/02/03)

• Security — SECURITY.md (no public issues for vulns)

CONTRIBUTING.md · CHANGELOG.md

Private team: develop in the blekline monorepo → pnpm audit:oss-public && pnpm sync:oss.

License

Managed SaaS and the NHIM sidecar image are offered separately at app.blekline.com — not under the licenses in this repository.