| Project | What it is | Stack |
|---|---|---|
| 🚀 GageNichols | My atomic-age portfolio site, with a CI-gated PII scanner guarding every build. | React · Vite |
| 🚦 tollbooth | A security gateway for AI agents — a transparent MCP proxy that enforces policy, DLP, and a tamper-evident audit trail on every tool call and result. Fail-closed by default. | Python · MCP |
| 🔍 frisk | Vet a third-party MCP server before you trust it — a sandboxed scanner that catches tool poisoning, hidden-instruction injection, scope creep, and rug-pulls. | Python · MCP |
| 🛡️ claude-dlp-guard | Deterministic DLP guardrail that classifies files before Claude Code reads them — blocks PII, secrets, and payment cards. No LLM, all rules. | Python · Claude plugin |
| 🛰️ mission-control | A browser-based command center for launching, watching, and steering many Claude Code sessions at once. Loopback-only by design. | Python · FastAPI · WebSockets |
| 📶 splashpass | A privacy-first CLI that fills captive-portal Wi-Fi forms with throwaway identities — your real data never touches the form, and no submitted value is ever logged. | Python · Playwright · CLI |
| 🐬 clipper | An MCP server that lets an AI agent drive a Flipper Zero running Momentum firmware. | Python · MCP |
// secure by design · curious by default