I am Saurabh, an AI engineer and full-stack developer based in Varanasi, India, with a bit over two years of experience. This is not a project announcement. It is a short, honest note on what the last week of building in public looked like.
What I shipped this month
Four things went out on DEV in five days:
-
mcp-notes-server, a small notes memory for Claude stored in one JSON file -
mcp-safe-actions, a TypeScript library that makes destructive MCP tools wait for a human - The Haunted Prompt, a game about breaking a prompt that guards a secret
- A 100-topic AI engineer roadmap that runs offline with no API key
None of them has any reactions yet, and each post has roughly ten views. I am writing that down because most "I shipped X" posts leave it out.
Three things I actually learned
1. My tests lied to me once. For mcp-safe-actions I added a mutation check that breaks the code on purpose in 10 ways. It caught a weak test I had written. Coverage said 100% and I still had a test that proved nothing. Coverage tells you a line ran. It does not tell you a test would notice if the line were wrong.
2. Writing the "what it does not do" section is the most useful part. When I listed the limits of token mode in the README, I found the limits I had been glossing over in my own head. A model can call twice without asking, so token mode is a speed bump, not a human gate. If I could not write that sentence, I did not understand my own design.
3. Automated dependency PRs need a human to read them. Dependabot opened a bump that moved TypeScript up two major versions. Green CI was not enough for me to merge it blind.
What I also run
I have a WordPress developer blog, mernstackdev.com, with 319 posts. Cleaning it up has taught me a different lesson from the projects: old content needs maintenance just like old code does.
Where I am now
I am looking for AI engineer and full-stack roles. I am posting here to build things people can read and run, not to collect stars.
A question for you
If you build with MCP or agents: what is one tool you would never let a model call without a human in the loop? I am collecting real examples to turn into tests.
Reply here, or open an issue on the repo: https://github.com/techsaurabh-394/mcp-safe-actions
Top comments (0)