Topic
Security
4 posts on this topic. All of them come out of work I have actually shipped.
-
Writing MCP tools an agent picks correctly
The tool name, description and schema are the interface. What the protocol guarantees, what it only hints at, and why the server still has to check everything.
Read it
-
What to do about a webhook that arrives twice
Duplicate deliveries, no ordering guarantee, and a signature you have to check yourself. The handler shape that survives all three.
Read it
-
Single sign-on between a custom app and a WordPress LMS
How to let one login carry a user into LearnDash without making WordPress the source of truth, and the mistakes to avoid on the way.
Read it
-
JWT and role-based access in FastAPI and React
Where to enforce permissions, what the UI is actually for, and the token-handling decisions that are easy to get wrong.
Read it
Next step
Looking for someone to own this end to end?
I am open to full-stack engineering roles and to contract builds. Tell me what you are trying to solve and I will tell you honestly whether I am the right person for it.
- Replies: Within two working days
- Based in: the United States
- Open to: full time, contract, remote or hybrid