$ which --all

The stack

Humbear Media is a healthcare agency, so compliance comes first, bar none — every vendor that touches PHI sits under a signed BAA, and anything without one is kept PHI-free by design. Everything here is connected and in use today, no affiliate placements. The verdict tags are honest: some are load-bearing, some are nice-to-have.

## the engine

Where the actual work happens.

Claude Code

Primary workhorse
core

Desktop app on Windows. This is where I build apps, run audits, write content, and orchestrate everything else. Persistent memory means it knows my businesses across sessions. Most of what you see on this site was built inside it — including this site. Internal, non-PHI work only.

Claude (Opus 4.6) via AWS Bedrock

PHI-safe AI engine
core

Any time client PHI is in play, Claude runs as Opus 4.6 through AWS Bedrock, under a signed BAA — never the consumer app, never the desktop app. Same model, the compliance footprint healthcare work actually requires.

Claude API

Powers my products
core

Career That Lasts runs real Claude API calls for career analysis. When I ship AI features in my own products, this is the backend.

Claude in Chrome

Browser operator
core

Claude drives a real Chrome session for me — editing GitHub repos, changing DNS at my registrar, checking deploys — by operating the browser the way I would. Anything outward-facing, I confirm before it goes through.

MCP connectors

Claude's hands
core

The difference between Claude as a chatbot and Claude as an operator. Every connected service on this page reaches Claude through MCP — it reads my real data and drafts real actions, and I approve them before anything goes out.

## build & ship

From idea to live URL.

Next.js + Tailwind

Default app stack
core

Every product I've shipped with Claude Code uses this combo. Claude knows it cold, which matters more than your personal preference does.

Vercel

Hosting & deploys
core

Push to GitHub, it's live. Career That Lasts and this site both run on it. Deploying on day one changes how you build — everything gets tested against a real URL.

GitHub

Source of truth
core

Claude Code commits and pushes via the gh CLI. The commit history doubles as a build log — it's how I can tell you honestly how long things took.

Node.js

Local toolchain
core

Node 24 is the runtime behind every Next.js build and script Claude Code runs here. It is pinned and kept off the system path so builds stay reproducible.

Python

Automation & the iMessage bot
worth it

The AI Jeff iMessage bot is a Python process: launchd keeps it alive, it reads the Messages SQLite database read-only, sends through AppleScript, and reads its on/off Focus signal from iCloud. Claude Code wrote and maintains all of it.

## automation & agents

The backbone that runs client work — inside the compliance boundary.

n8n

AI agent workflows
core

Self-hosted on Railway, on BAA-covered infrastructure. This is the agent backbone that orchestrates client work, and self-hosting it is exactly what keeps the automation inside our compliance boundary instead of on someone else's shared cloud.

Make.com

Non-AI plumbing
worth it

When two apps just need data moved between them on a trigger, a Make scenario beats an AI agent. I design the scenarios with Claude, then Make runs them deterministically — on its enterprise BAA, so even the plumbing is covered for PHI.

Railway

Hosts the agent backbone
worth it

Where the self-hosted n8n lives, under BAA. The automation layer runs on infrastructure we hold an agreement for, not whatever was easiest to spin up.

Neon

Postgres for the agents
worth it

Serverless Postgres behind the n8n agents — HIPAA-enabled, BAA signed. The database the automation reads and writes lives inside the boundary.

## communication & workspace

The inbox, calendar, and docs Claude reads and drafts into.

Gmail

Email
core

Claude reads threads and drafts replies through MCP. It does the triage and the first draft; I keep the send button.

Google Calendar

Scheduling
worth it

Claude checks availability, suggests times, and drafts events through the connector, so scheduling is a sentence instead of a tab-switch.

Slack

Team comms
worth it

Claude reads channels and threads and drafts messages through MCP — useful for catching up on a busy channel without scrolling it myself.

Notion

Docs & knowledge base
worth it

Where longer-lived notes and project docs live. Claude reads and writes pages through the connector, so what it learns in a session lands somewhere I will actually find it again.

Google Drive

File storage
situational

Connected file storage Claude can search, read, and create files in, so documents move into and out of a session without a manual upload.

## business operations

The agency side — where automation pays rent, all under BAA.

GoHighLevel

CRM & funnels
core

The white-labeled CRM where client relationships actually live — forms, booking, pipelines, email and SMS. It holds client PHI, so it runs under a signed BAA.

CallTrackingMetrics

Call tracking
worth it

Tracks, records, and routes inbound calls under a signed BAA, so call data — which absolutely can contain PHI — stays inside the compliance boundary.

Fireflies

Meeting memory
worth it

Records and transcribes calls under a signed BAA. Through MCP, Claude pulls transcripts and turns them into summaries and action items without me re-listening to anything.

Easy VOB

Insurance verification
worth it

Our own verification-of-benefits tool for treatment-center clients. It is self-owned and it does handle PHI, so it sits fully inside the boundary.

## research & content

Research in, assets out — all non-PHI, kept outside the boundary.

Semrush

SEO data
worth it

Connected to Claude via MCP. Keyword research, competitor gaps, and site audit data flow straight into content briefs and audit reports instead of living in browser tabs.

Perplexity

Research & sourcing
worth it

Fast research and sourcing with citations. A non-PHI tool — it stays outside the compliance boundary, so client data never goes near it.

Apify

Web scraping
situational

Structured web scraping for research and competitive data. Non-PHI work only, outside the boundary.

NotebookLM

Deep doc analysis
situational

For chewing through long documents and research and asking questions across them. Non-PHI material only.

Canva

Design output
situational

Claude can generate and edit designs through the connector. I use it for social assets where the content matters more than bespoke design.

Gamma

Decks & one-pagers
situational

Claude drafts the narrative, Gamma makes it presentable. Client-facing decks in a fraction of the time PowerPoint would take.

Descript

Video & audio editing
situational

Edits marketing video and podcast audio by editing the transcript. Non-PHI content only.

Cloudinary

Media CDN
situational

Stores and serves marketing images and video. Non-PHI assets only.

## advertising

Paid acquisition for treatment-center clients — without raw PHI ever leaving the boundary.

Meta Ads

Paid social
worth it

Campaigns on Facebook and Instagram. Meta never receives raw PHI — everything we send, including Conversions API events for lead generation, is normalized and hashed into an irreversible match key first. The platform can match and measure without ever seeing a real identifier.

Google Ads

PPC, search & display
worth it

Search, display, and programmatic for treatment-center clients, on a signed BAA for the ads and analytics products. Conversion measurement runs on the same hashed-data discipline as Meta.

## infrastructure & security

Where the sites and secrets live.

WordPress.com

Site hosting
worth it

Hosts humbearmedia.com, the agency site. Content, schema, and redirect snippets live here.

Namecheap

Domains & DNS
worth it

Registrar and DNS for my domains. When godofclaude.com needed to point at Vercel, the records changed here.

AWS

Cloud & AI engine
worth it

Cloud hosting, storage, and the Bedrock endpoint that serves Claude for PHI work — under a signed BAA. The compliant backbone the rest of the stack leans on.

Cloudflare

CDN & DNS
worth it

CDN, DDoS protection, and DNS, under BAA. Keeps the edge fast and protected.

Bitwarden

Secrets management
situational

Stores credentials, keys, and secrets for the whole stack. Holds no PHI by design.

Tailscale

Remote access to the fleet
core

A mesh VPN tying my machines together, so the team can reach the always-on office workstation — and the rest of the hardware fleet — from anywhere, as if we were all on the same LAN. It is how the big AI workstation gets used remotely without exposing anything to the open internet. Non-PHI infrastructure.

## physical machines

The hardware fleet — where local AI and everything else runs.

Local AI workstation

Image-to-video & local AI
core

Custom AM5 build: AMD Ryzen 9 7900X on a B850E ATX board, an NVIDIA RTX 4090 (24GB), 64GB of DDR5-6000 (G.Skill Trident Z5 RGB), and 4TB of NVMe (a Samsung 9100 Pro 2TB plus a 990 Pro 2TB with heatsink), on a 1000W Corsair PSU, water-cooled with several fans, in a white Fractal North case with tempered glass and wood. It mostly runs image-to-video for content generation.

The desktop fleet

Mixed GPU workloads
worth it

About six more desktops for different use cases, with GPUs spanning an NVIDIA RTX 5070 Ti (16GB), an RTX 5060 Ti (16GB), an RTX 4060 (8GB), and an AMD Radeon RX 6700 (10GB). Several run Windows, including the machine Claude Code and the browser operate from.

Mac minis

Always-on services
core

Three Mac minis — two M4, one M1. One of the M4s runs the AI Jeff iMessage bot around the clock.

MacBooks

Mobile work
worth it

Seven or eight MacBook Pro and Air, M4 and M5, for working from anywhere.

Raspberry Pi 5

KPI dashboards
situational

A small always-on box that tracks social-media and internal KPIs.

$ follow --the-build

Watch it happen, don't take my word for it

Every build on this site gets documented as it happens — the prompts, the dead ends, the results. No course at the end of this funnel. There is no funnel.

follow on x →