$ which --all
The stack
Humbear Media is a healthcare agency, so compliance comes first, bar none — every vendor that touches PHI sits under a signed BAA, and anything without one is kept PHI-free by design. Everything here is connected and in use today, no affiliate placements. The verdict tags are honest: some are load-bearing, some are nice-to-have.
## the engine
Where the actual work happens.
Claude Code
Primary workhorseDesktop app on Windows. This is where I build apps, run audits, write content, and orchestrate everything else. Persistent memory means it knows my businesses across sessions. Most of what you see on this site was built inside it — including this site. Internal, non-PHI work only.
Claude (Opus 4.6) via AWS Bedrock
PHI-safe AI engineAny time client PHI is in play, Claude runs as Opus 4.6 through AWS Bedrock, under a signed BAA — never the consumer app, never the desktop app. Same model, the compliance footprint healthcare work actually requires.
Claude API
Powers my productsCareer That Lasts runs real Claude API calls for career analysis. When I ship AI features in my own products, this is the backend.
Claude in Chrome
Browser operatorClaude drives a real Chrome session for me — editing GitHub repos, changing DNS at my registrar, checking deploys — by operating the browser the way I would. Anything outward-facing, I confirm before it goes through.
MCP connectors
Claude's handsThe difference between Claude as a chatbot and Claude as an operator. Every connected service on this page reaches Claude through MCP — it reads my real data and drafts real actions, and I approve them before anything goes out.
## build & ship
From idea to live URL.
Next.js + Tailwind
Default app stackEvery product I've shipped with Claude Code uses this combo. Claude knows it cold, which matters more than your personal preference does.
Vercel
Hosting & deploysPush to GitHub, it's live. Career That Lasts and this site both run on it. Deploying on day one changes how you build — everything gets tested against a real URL.
GitHub
Source of truthClaude Code commits and pushes via the gh CLI. The commit history doubles as a build log — it's how I can tell you honestly how long things took.
Node.js
Local toolchainNode 24 is the runtime behind every Next.js build and script Claude Code runs here. It is pinned and kept off the system path so builds stay reproducible.
Python
Automation & the iMessage botThe AI Jeff iMessage bot is a Python process: launchd keeps it alive, it reads the Messages SQLite database read-only, sends through AppleScript, and reads its on/off Focus signal from iCloud. Claude Code wrote and maintains all of it.
## automation & agents
The backbone that runs client work — inside the compliance boundary.
n8n
AI agent workflowsSelf-hosted on Railway, on BAA-covered infrastructure. This is the agent backbone that orchestrates client work, and self-hosting it is exactly what keeps the automation inside our compliance boundary instead of on someone else's shared cloud.
Make.com
Non-AI plumbingWhen two apps just need data moved between them on a trigger, a Make scenario beats an AI agent. I design the scenarios with Claude, then Make runs them deterministically — on its enterprise BAA, so even the plumbing is covered for PHI.
Railway
Hosts the agent backboneWhere the self-hosted n8n lives, under BAA. The automation layer runs on infrastructure we hold an agreement for, not whatever was easiest to spin up.
Neon
Postgres for the agentsServerless Postgres behind the n8n agents — HIPAA-enabled, BAA signed. The database the automation reads and writes lives inside the boundary.
## communication & workspace
The inbox, calendar, and docs Claude reads and drafts into.
Gmail
EmailClaude reads threads and drafts replies through MCP. It does the triage and the first draft; I keep the send button.
Google Calendar
SchedulingClaude checks availability, suggests times, and drafts events through the connector, so scheduling is a sentence instead of a tab-switch.
Slack
Team commsClaude reads channels and threads and drafts messages through MCP — useful for catching up on a busy channel without scrolling it myself.
Notion
Docs & knowledge baseWhere longer-lived notes and project docs live. Claude reads and writes pages through the connector, so what it learns in a session lands somewhere I will actually find it again.
Google Drive
File storageConnected file storage Claude can search, read, and create files in, so documents move into and out of a session without a manual upload.
## business operations
The agency side — where automation pays rent, all under BAA.
GoHighLevel
CRM & funnelsThe white-labeled CRM where client relationships actually live — forms, booking, pipelines, email and SMS. It holds client PHI, so it runs under a signed BAA.
CallTrackingMetrics
Call trackingTracks, records, and routes inbound calls under a signed BAA, so call data — which absolutely can contain PHI — stays inside the compliance boundary.
Fireflies
Meeting memoryRecords and transcribes calls under a signed BAA. Through MCP, Claude pulls transcripts and turns them into summaries and action items without me re-listening to anything.
Easy VOB
Insurance verificationOur own verification-of-benefits tool for treatment-center clients. It is self-owned and it does handle PHI, so it sits fully inside the boundary.
## research & content
Research in, assets out — all non-PHI, kept outside the boundary.
Semrush
SEO dataConnected to Claude via MCP. Keyword research, competitor gaps, and site audit data flow straight into content briefs and audit reports instead of living in browser tabs.
Perplexity
Research & sourcingFast research and sourcing with citations. A non-PHI tool — it stays outside the compliance boundary, so client data never goes near it.
Apify
Web scrapingStructured web scraping for research and competitive data. Non-PHI work only, outside the boundary.
NotebookLM
Deep doc analysisFor chewing through long documents and research and asking questions across them. Non-PHI material only.
Canva
Design outputClaude can generate and edit designs through the connector. I use it for social assets where the content matters more than bespoke design.
Gamma
Decks & one-pagersClaude drafts the narrative, Gamma makes it presentable. Client-facing decks in a fraction of the time PowerPoint would take.
Descript
Video & audio editingEdits marketing video and podcast audio by editing the transcript. Non-PHI content only.
Cloudinary
Media CDNStores and serves marketing images and video. Non-PHI assets only.
## advertising
Paid acquisition for treatment-center clients — without raw PHI ever leaving the boundary.
Meta Ads
Paid socialCampaigns on Facebook and Instagram. Meta never receives raw PHI — everything we send, including Conversions API events for lead generation, is normalized and hashed into an irreversible match key first. The platform can match and measure without ever seeing a real identifier.
Google Ads
PPC, search & displaySearch, display, and programmatic for treatment-center clients, on a signed BAA for the ads and analytics products. Conversion measurement runs on the same hashed-data discipline as Meta.
## infrastructure & security
Where the sites and secrets live.
WordPress.com
Site hostingHosts humbearmedia.com, the agency site. Content, schema, and redirect snippets live here.
Namecheap
Domains & DNSRegistrar and DNS for my domains. When godofclaude.com needed to point at Vercel, the records changed here.
AWS
Cloud & AI engineCloud hosting, storage, and the Bedrock endpoint that serves Claude for PHI work — under a signed BAA. The compliant backbone the rest of the stack leans on.
Cloudflare
CDN & DNSCDN, DDoS protection, and DNS, under BAA. Keeps the edge fast and protected.
Bitwarden
Secrets managementStores credentials, keys, and secrets for the whole stack. Holds no PHI by design.
Tailscale
Remote access to the fleetA mesh VPN tying my machines together, so the team can reach the always-on office workstation — and the rest of the hardware fleet — from anywhere, as if we were all on the same LAN. It is how the big AI workstation gets used remotely without exposing anything to the open internet. Non-PHI infrastructure.
## physical machines
The hardware fleet — where local AI and everything else runs.
Local AI workstation
Image-to-video & local AICustom AM5 build: AMD Ryzen 9 7900X on a B850E ATX board, an NVIDIA RTX 4090 (24GB), 64GB of DDR5-6000 (G.Skill Trident Z5 RGB), and 4TB of NVMe (a Samsung 9100 Pro 2TB plus a 990 Pro 2TB with heatsink), on a 1000W Corsair PSU, water-cooled with several fans, in a white Fractal North case with tempered glass and wood. It mostly runs image-to-video for content generation.
The desktop fleet
Mixed GPU workloadsAbout six more desktops for different use cases, with GPUs spanning an NVIDIA RTX 5070 Ti (16GB), an RTX 5060 Ti (16GB), an RTX 4060 (8GB), and an AMD Radeon RX 6700 (10GB). Several run Windows, including the machine Claude Code and the browser operate from.
Mac minis
Always-on servicesThree Mac minis — two M4, one M1. One of the M4s runs the AI Jeff iMessage bot around the clock.
MacBooks
Mobile workSeven or eight MacBook Pro and Air, M4 and M5, for working from anywhere.
Raspberry Pi 5
KPI dashboardsA small always-on box that tracks social-media and internal KPIs.
$ follow --the-build
Watch it happen, don't take my word for it
Every build on this site gets documented as it happens — the prompts, the dead ends, the results. No course at the end of this funnel. There is no funnel.
follow on x →