Writing

12 May 2026

Agentic MCP server testing

I needed the data behind a personalised MCP recommender, not just a static directory. So I dispatched a fleet of Claude sub-agents in parallel: each installed a server, used it for a real task, and wrote the discovery entry the CLI now matches against user prompts.

17 April 2026

The MCP security review most teams run is looking at the wrong layer

MCP setups concentrate long-lived credentials inside a steerable executor. The right question is not whether the model will ever do something wrong, but what becomes reachable when it does. This is one architecture that answers it.

15 April 2026

I turned 5 million Shopify stores into Claude apps

I built a Cloudflare Worker that turns any Shopify store into an in-chat shopfront for Claude. Product cards, variant pickers, cart handoff, all rendered inline via the new MCP Apps spec.

8 April 2026

A question that used to take an afternoon now takes six seconds

I built a Garmin MCP server that exposes exactly one tool: a code tool that runs JavaScript in a sandbox with typed calls back to Garmin. Cheaper queries, and a tighter security boundary than the tool-per-endpoint approach.