diff --git a/.circleci/config.yml b/.circleci/config.yml
index af5dbaae..952f5df5 100644
--- a/.circleci/config.yml
+++ b/.circleci/config.yml
@@ -16,6 +16,13 @@ jobs:
             - v1-dependencies-{{arch}}-{{ checksum "package.json" }}
             - v1-dependencies-{{arch}}-
 
+      - run:
+          name: Verify Socket Firewall registry is active
+          command: |
+            REGISTRY=$(npm config get registry)
+            echo "npm registry: $REGISTRY"
+            echo "$REGISTRY" | grep -q socket-firewall-registry || { echo "FAIL: npm not routed through Socket Firewall"; exit 1; }
+
       - run: yarn install
 
       - save_cache:
@@ -40,4 +47,6 @@ workflows:
 
   test:
     jobs:
-      - test
+      - test:
+          context:
+            - socket-firewall
diff --git a/.npmrc b/.npmrc
new file mode 100644
index 00000000..4e205ba5
--- /dev/null
+++ b/.npmrc
@@ -0,0 +1,4 @@
+# Route all npm/yarn installs through the Socket Firewall registry
+registry=https://socket-firewall-registry.corporate.intercom.io/npm
+//socket-firewall-registry.corporate.intercom.io/npm/:_authToken=${SOCKET_NPM_TOKEN}
+always-auth=true