📍 Saint Petersburg, Russia | 🐍 Senior Python Developer & Tech Lead | 🔐 Security & MCP tooling

Senior Python Developer & Tech Lead — over a decade in software development, system integration, and IT consulting. Currently building hardened MCP servers, security tooling, and AI-agent infrastructure.

• 🆘 Supportal — Self-hosted support relay: web-chat user ⇄ operator in a Telegram group. FastAPI + aiogram, embeddable themed widget, offline demo, green CI, MIT — conversations never leave your Telegram workspace.
• 🎼 omr-notes — Optical Music Recognition for Claude Code, installable as a plugin: a photo of a score → editable MusicXML → offline piano audio. Two chained skills that split multi-piece pages before recognition. MIT.
• 🗺️ map-vectorize — Automatic vectorization of raster geological maps (ГГК-1000/3) into GeoJSON: georeferencing + colour segmentation of legend units, fully local and open-source. Working pilot over Leningrad Oblast quaternary-deposit sheets.
• 🔐 unix-pass-mcp — Hardened MCP server for the Unix pass password manager. Read-only by default; gated writes / git / destructive ops; 346 unit + 45 GPG integration tests.
• 💻 mcp-qemu-vm — MCP for QEMU virtual machines. Give an AI safe, fully-isolated computer access via a sandboxed VM.
• 🔍 security-audit — Local CVE / permissions / secrets scanner for developer workstations. CVSS-graded, audits OS + Python + Rust + Node deps, never uploads to the cloud.
• 💬 telegram-search — Read-only MCP exposing Telegram chat history to Claude or any MCP host. Keyword + global search, context-window expansion, no send capability.
• 🌐 whitelist-probe — Black-box reconstruction of an upstream/ISP domain whitelist by probing from a filtered mobile uplink.
• 📋 clipboard-relay — End-to-end-encrypted clipboard sync across machines via Git + GPG. Multi-key, auto-expiring, works on any Git host.
• 📍 users_geoposition — QR-based GPS capture for print-media analytics. FastAPI backend, XLSX output, no third-party tracking.
• 🧰 mcp-server-trello — MCP server for interacting with Trello boards from inside an AI agent.

A few I can't link publicly — AI for regulated and technical domains, in active development:

• dali — on-prem RAG for regulated industries: retrieval over internal engineering and regulatory corpora, nothing leaves the customer network.
• dali-drawing — turns engineering-drawing scans into structured records; offline OCR (RapidOCR / ONNX), Dockerised with CI/CD.
• Rubezh — self-hostable LLM guardrail for the Russian and technical domain, with script-aware de-obfuscation (leet / homoglyphs) against evasion.

📝 neanderthal.github.io — long-form posts on MCP architecture, security tooling, network reverse-engineering, and the occasional essay (English).

📡 Спазм мозга / @mind_cramp — Telegram channel since 2019. Daily-driver tool finds, AI/agents news, and rough-draft companions to the blog (Russian).

• Building MCP servers for everyday workflows — password store access, Telegram context, VM control
• Hardening agentic stacks — capability gates, path allowlists, audit logs, and sanitized errors so an LLM can touch real systems without becoming a foot-gun
• Leading engineering teams shipping Python in production — FastAPI backends, AWS / Azure infra, system integrations
• Working toward a Private Pilot License (PPL) — slow but coming

• unix-pass-mcp: Letting AI Agents Touch Your Password Store — Carefully — _2026-04-27
• Спазм мозга: My Telegram Channel for Tech Brain-Cramps — _2026-04-27
• I Spent a Weekend Reverse-Engineering My Mobile Carrier’s Whitelist — _2026-04-14
• Telegram-Search: Bringing Your Chat History to AI Agents — _2026-04-07