AI Engineer · Senior / Staff
I ship agents with real access and no credentials to leak.
I’ve had agents in production since LangChain was new. Operating them is mostly the same work I’d do for a new hire, except I onboard and offboard these ones many times a day. A person would get a laptop, a set of logins, a reviewer, and a number they’re judged on. Agents need them too.
Agents in production since 2023
Production agents at Cloaked, Ravi, and Block Party, and Managoat, the hosted agent platform I run.
At Cloaked I built LangChain agents that log in to users’ accounts, change their passwords, and swap the email on file. They shipped in product, became a core fundraising narrative, and powered an AI onboarding flow that lifted adoption and retention.
I cofounded Ravi, where AI agents manage their own accounts, secrets, and 2FA. The instrumented v1’s usage data carried the pitch to a $400K pre-seed from South Park Commons, and it grew to hundreds of users.
Managoat is my hosted platform for running fleets of sandboxed coding agents, and Fountain, the open-source server under it, is built by the agents it runs. I set the roadmap and review the work, and it ships under BinaryBourbon, the GitHub identity the fleet works as. Before that, at Block Party, I built the framework behind the company’s internal coding bots.
ai.jakegaylor.com serves an A2A agent card and an MCP server, so your screening agent can interview me directly. I sat on the MCP Hosting Working Group, publish MCP servers, and contributed to the Dart MCP SDK. Managoat answers ACP, AG-UI, and MCP in both directions, so any ACP client can drive the fleet, which is how it shows up in Buzz.
The sandbox boots holding one short-lived token its platform signed. A broker verifies the signature against the platform’s keys and checks the sandbox is allowed what it asks for before granting anything. Access arrives as a per-sandbox database user that dies at expiry. The inference key never enters the sandbox. A proxy injects it after the request leaves the machine and bills the call to the verified identity. Full design in The first credential can’t be a secret.
For the keyword scanners: LangChain, MCP, A2A, ACP, the Dart MCP SDK, Claude Code, Cursor, sandboxed execution, Python, TypeScript. Every one of them attached to shipped agent work above or on the resume.
The day-2 receipts
Each sandbox’s identity is created at boot and invalidated at teardown, which kills every token it held. Nothing needs rotating because no real secret ever entered the sandbox.
The inference proxy bills each request to the verified identity and enforces a budget where the open-ended bill used to be. A leaked key can’t spend invisibly, and I can see what each sandbox costs.
Ravi’s v1 was instrumented from day one and its usage data carried the fundraise. Cloaked’s agents were judged on their impact on onboarding retention, and retention went up.
“Fountain is dope. Jake built one of the most GOATed models for everyone wanting self sovereignty over agent compute while getting the GrokBot like experience using Buzz.”
Akeem Jenkins, Director of Product Engineering, Piedmont Global
Sound like the role you’re hiring for?
Email me and let’s find out. My resume digs into the details if you need more convincing.
Or browse my projects & ventures. Screening with an AI assistant? Point it at ai.jakegaylor.com.