TalentFlow
Co-founder · ShippingAn entertainment SaaS I co-founded in November 2025. We are building the operational backbone for talent teams — the scheduling, routing, and payment plumbing that currently lives in spreadsheets and group chats.
David Fox
I build software. Right now that means co-founding TalentFlow, getting Health Harmony ready to launch, and writing the tooling behind Dorian Trader. This page is the index — what I'm working on, what I'm into, and where to find me.
Stuff I'm working on
Health Harmony
Launching soonA personal health management platform getting ready to launch. It pulls the records, labs, and appointments scattered across every portal you have ever been given a login for into one place you actually control.
Dorian Trader
I am a member of technical staff at Dorian Trader, where I build the tooling behind the community — the bots people talk to, the signals they act on, and the interfaces that connect it all to their brokerage.
Building
Discord bots
DiscordThe bots members interact with day to day: alerts, lookups, and the automation that keeps the community running without a human in the loop.
Trading signals
DataThe pipeline that turns market data into the signals members act on, and delivers them where people already are.
tastytrade MCP server
MCPA Model Context Protocol server for tastytrade, so an LLM agent can read positions and reason about a portfolio through a typed tool interface instead of scraping a UI.
HOPE 17
I went to HOPE 17 (Hackers On Planet Earth) this year. A few talks are still rattling around in my head:
My favorite of the weekend — cognitive security as the human-side twin of cybersecurity, and why our mental defenses need the same seriousness we give silicon.
Real onion circuits from a normal browser — Tor for people who cannot install privileged software, and the new risks that comes with.
A free offline Android IDE that turns a budget phone into a full workstation — coding without the laptop gatekeeping.
Links
Referrals
These are referral links — if you sign up through one, I may get credit for it.
Dorian TraderThe trading community I build for. Join through here and I get credit.tastytradeThe brokerage I use, and the one my MCP server talks to.TradingViewCharting I keep open all day.
Find me
Writing
- Hardening an MCP server: from a private allowlist to enterprise controls
A maturity spectrum for MCP server security: the email allowlist I shipped, OAuth 2.1 done properly, and what enterprise compliance demands.
- Your agent is reading a different web than you are
A gluetun and AirVPN compose file that fetches one URL from four egress points at once, and what the diffs mean for tools that read the web.
- Recruiter outreach is a threat model
A list of complaints about recruiter outreach turned into an argument about who absorbs the security risk and the time cost of someone else's hiring process.
- Putting a live options feed behind MCP
Grounding an LLM's options analysis in real quotes. The MCP server took an afternoon; auth, data, and deployment took the rest of the month.
- Git stash, pop, and apply in Visual Studio
Shelving half-finished work with git stash -- through Visual Studio's Team Explorer, and on the command line with interactive hunk selection.