Virginia / Washington DC area | Senior Cybersecurity Operator, US Coast Guard | Owner at Blueforce Innovations
I build practical tools for real operators.
My work lives at the intersection of cybersecurity, automation, and AI agent infrastructure: MCP servers for real infrastructure, credential processing, DuckyScript tooling, memory systems, custom skills, and AI-ready crawling.
Docker-first FastMCP servers that connect AI agents to production systems — with guarded writes, read-only modes, and explicit confirmation gates.
- InfisicalMCP — Manage Infisical secrets, projects, environments, folders, identities, roles, and audit logs from an agent.
- proxmox-mcp — Read-only cluster inspection, VM/container lifecycle, snapshots, migration, and guarded Proxmox API access.
- odoo-mcp — Odoo 19 JSON-2 integrations with CRM tool packs, resources, and guarded write operations.
- technitium-dns-MCP — 116+ Technitium DNS tools with read-only deployment mode and tiered safety for mutations.
- EasyWebhook-MCP — Send webhooks to Discord, Slack, or any HTTP endpoint from MCP clients with
.env-backed aliases.
- InfiniMind — A Docker-first memory sidecar for OpenClaw with a dedicated memory service and bridge plugin.
- OpenClaw-Skills — Custom skills that extend OpenClaw with specialized commands and integrations.
- bluewebcrawler — A Node + TypeScript crawler that maps a site and exports AI-ready markdown.
- lobsterhook — Local-first email-to-webhook bridge built on Himalaya with SQLite state, retries, and dead-letter delivery.
- RustySymphony — Rust daemon that polls Linear, spins up per-issue workspaces, and runs Codex app-server sessions against them.
- CodexBarWindows — Native Windows system tray app for tracking AI provider usage limits and reset windows.
- CredForge — A credential processing and analysis toolkit for NTDS dumps, password files, and credential lists.
- Next-Gen-Rubber-Ducky-Ninja — A modern WinUI 3 and .NET 8 toolkit for testing, validating, and encoding DuckyScript payloads.
|
InfisicalMCP FastMCP server for managing self-hosted Infisical secrets, projects, environments, and admin operations from an agent. Python FastMCP Infisical Secrets
|
proxmox-mcp Docker-first MCP server for Proxmox VE with read-only inspection, lifecycle ops, and guarded mutation gates. Python Docker Proxmox MCP
|
|
CredForge A toolkit for processing and analyzing credential data from NTDS dumps, password files, and credential lists. Python Security Credential Analysis
|
Next-Gen-Rubber-Ducky-Ninja A modern WinUI 3 and .NET 8 toolkit for testing, validating, and encoding DuckyScript payloads. C# .NET 8 WinUI 3 DuckyScript
|
|
frozensapphire A modular CMS built on Next.js with admin shell, role-based users, and Prisma-backed content workflows. TypeScript Next.js CMS Prisma
|
lobsterhook Local-first email-to-webhook bridge with Himalaya polling, SQLite idempotency, and retry/dead-letter dispatch. Python Webhooks Email Automation
|
|
stelo_extractor Rust CLI that extracts Apple Health glucose records into clean JSON for downstream analysis. Rust CLI Data Extraction Health Data
|
ISP-Speed-Notifier Network watchdog that runs periodic speed checks and helps document ISP performance degradation over time. Python Networking Monitoring Automation
|
Security and infrastructure fixes I have pushed upstream:
- openclaw/openclaw — Stop default Claude CLI permission bypass
- openclaw/openclaw — Fail closed on Windows shell wrappers in exec allowlist mode
- plastic-labs/honcho — Expose runtime model and auth metadata in the API
- zeroclaw-labs/zeroclaw — Restrict outbound Matrix attachment uploads
- Offensive security workflows that are practical, repeatable, and operator-friendly
- AI agent tooling that is observable, composable, and useful outside of demos
- MCP servers that connect agents to real infrastructure with explicit safety gates
- Memory and context systems that make agents more reliable over time
- Tooling for small teams that need leverage, not extra complexity
Forks and upstream projects I am actively testing, hardening, or contributing around:
- openclaw (fork) — Personal AI assistant infrastructure across platforms
- zeroclaw (fork) — Fast, small, autonomous AI assistant infrastructure
- honcho (fork) — Memory library for building stateful agents
- mission-control (fork) — Open source dashboard for AI agent orchestration
- clawtelemetry (fork) — Real-time observability dashboard for OpenClaw AI agents
- Star-Office-UI (fork) — A pixel office for AI crews and agent status visualization
- LunaLighthouse (fork, active relaunch) — Mobile-first self-hosted software controller with Flutter iOS/Android focus
Security without execution is just theater. I prefer tools that earn their keep in the first five minutes.