🎧 Listen
The Stack
Verifying Incoming Webhooks Correctly: HMAC, Timing-Safe Comparison, and Replay Windows
The number-one webhook bug is parsing the JSON before you verify it, which silently rewrites the exact bytes you were supposed to check.
🎧 Listen
The Stack
🎧 Listen
The Stack
Tool Highlight: LiteLLM — One OpenAI-Shaped Door to 100+ Models
What LiteLLM is, who it's for, how to start (SDK in one line, self-hosted gateway in two), what it costs, and the honest catch — the open-source LLM gateway that lets you swap providers with a string change instead of a rewrite.
🎧 Listen
The Stack
Tool Highlight: AgentPrizm — Governed Memory and Skills for Your Agents
A hosted memory-plus-skills layer for MCP agents that promises audit receipts and right-to-forget; free to start, but you're renting your agents' memory.
🎧 Listen
The Stack
Take Your First AI-Agent Payment: Stripe Shared Payment Tokens vs the Machine Payments Protocol
Stripe's Agentic Commerce Suite gives a solo builder two ways to get paid by software, not people. SPTs are for an agent buying from your store; MPP is for an agent paying your API. Here's which to pick, with the exact code.
🎧 Listen
The Stack
Rate Limiting Your Own API: Token Bucket vs Sliding Window vs Fixed Window
Four algorithms, one question — do you want to smooth traffic, count it fairly, or forgive a burst? Pick the one whose flaw you can live with.
🎧 Listen
The Stack
Pydantic AI CodeMode: Run Ten Tool Calls in One Model Turn
The Harness ships a capability that collapses a whole loop of tool calls into a single sandboxed Python script the model writes once. Here's the two-line change, what it actually does, and when it pays off.
🎧 Listen
The Stack
Parsing PDFs for RAG in 2026: PyMuPDF4LLM vs Docling vs Marker vs LlamaParse vs Mistral OCR
The comparison table asks 'which parser is best.' Wrong question. The right one is: how hard are your documents to read? Pick the cheapest tool that survives them — and only pay for a vision model when your PDFs actually earn it.
🎧 Listen
The Stack
Neon vs Supabase vs Turso: Picking a Serverless Database in 2026
The listicle treats these as three serverless databases to choose between. They aren't — two answer 'database or backend?' and the third answers a different question entirely: shared table or one database per user?
🎧 Listen
The Stack
How to Make Your MCP Server Stateless Before July 28: A Migration Walkthrough
The MCP spec drops sessions on 2026-07-28 — here's the actual code to delete, replace, and test before your server breaks behind a load balancer.
🎧 Listen
The Stack
How to Meter Usage-Based Pricing Without Overbilling Your Customers
You picked a usage or hybrid price. Now you have to count things accurately, survive retries, and produce an invoice a customer won't dispute. Here's the plumbing — with the idempotency bug that quietly double-charges everyone.
🎧 Listen
The Stack
How to Keep Your Source Code Out of AI Model Training
When your AI coding tool changes hands, 'we don't train on your code' becomes a promise made by a new owner. Here's the defense-in-depth version — the API-vs-chat distinction that decides everything, the zero-data-retention terms to demand, the gateway rule that enforces it, and when the only real answer is self-hosting.
🎧 Listen
The Stack
How to Give an AI Agent a Decision Audit Trail (Replayable, Regulator-Ready)
When an agent takes a consequential action, 'trust me' isn't an answer. Here's a copy-paste pattern for a decision record that captures inputs, the rules that fired, the model's rationale, and any human override — so you can replay any decision months later and prove exactly why.
🎧 Listen
The Stack
How to Cancel an LLM Request When the Client Disconnects — and Stop Paying for Tokens Nobody Reads
A user closes the tab mid-stream. Your server keeps generating to the last token, billing GPU time to output that reaches no one. Here's why abandoned streams keep running, and how to make the disconnect actually abort the request.
🎧 Listen
The Stack
Run GLM-5.2 Inside Claude Code: A 5-Minute, Flat-Rate Setup
Keep the Claude Code workflow you already know; swap the engine underneath for an open-weight model on a flat monthly plan. The whole trick is two environment variables and one endpoint — here's the copy-paste path, plus the three mistakes that send people to a 404.
🎧 Listen
The Stack
Hierarchical Subagents in the Claude Agent SDK: A Build Tutorial
Since Claude Code v2.1.172, a subagent can spawn its own subagents — up to five levels deep. The whole feature turns on a single field in your agent definition. Here's the copy-paste build.
🎧 Listen
The Stack
Bifrost vs LiteLLM vs Portkey: Picking an LLM Gateway After the 2026 Shakeout
TensorZero shut down, Helicone froze, Portkey got acquired, and LiteLLM shipped malware to PyPI. The gateway you pick in 2026 is a runtime and supply-chain decision — here's the one that changed the math, with the config to swap in.
🎧 Listen
The Stack
Tool Highlight: Wispr Flow — dictation that writes in your voice, in every app
What Wispr Flow is, who it's for, how to start in one download, what it costs (as of July 2026), and the honest catch — for founders who think faster than they type.
🎧 Listen
The Stack
Tool Highlight: uv — the Rust package manager that makes Python setup instant
What uv is, who it's for, how to start in one command, and what it costs (nothing) — the Astral tool that folds pip, pip-tools, pipx, virtualenv, and pyenv into a single binary that resolves and installs 10–100× faster.
🎧 Listen
The Stack
Tool Highlight: Trigger.dev — Durable Background Jobs and Agents That Don't Time Out
What Trigger.dev is, who it's for, how to start in minutes, what it costs (as of July 2026), and the honest catch — for founders whose agents and long jobs keep dying on serverless timeouts.
🎧 Listen
The Stack
Tool Highlight: Resend — Email Infrastructure Founders Don't Have to Fight
The developer-first email API for auth codes, receipts, and newsletters — send your first message with one curl call, then stop worrying about the SMTP plumbing.
🎧 Listen
The Stack
Tool Highlight: PostHog — One Platform for Analytics, Replays, Flags, and Now Your LLM Calls
Most early products end up wiring together an analytics tool, a session-replay tool, a feature-flag service, an A/B testing service, and — lately — something to watch their AI calls. PostHog is all of those in one open-source platform, free until you're big enough to notice.
🎧 Listen
The Stack
Tool Highlight: OpenRouter — One API Key for Every Model, with Fallbacks Built In
In a week when three vendors shipped new frontier models, the smartest move isn't picking one — it's staying swappable. OpenRouter puts 300+ models behind one OpenAI-compatible endpoint, so you change a model by editing a string.
🎧 Listen
The Stack
Tool Highlight: OpenCode — the Free, Model-Agnostic Coding Agent You Can Self-Host
What OpenCode is, who it's for, how to start in one command, what it costs (as of July 2026), and the honest catch — the terminal coding agent that refuses to lock you to a single model vendor, now at ~7.5M developers.
🎧 Listen
The Stack
Tool Highlight: Ollama — the OpenAI-Compatible Seam Between Your Laptop and the Cloud
It started as 'run Llama on your Mac.' In 2026 it's how a small team runs open-weight models — Kimi, GLM, DeepSeek, Qwen — locally or hosted, behind the same API your code already speaks. Fresh off a $65M round.
🎧 Listen
The Stack
Tool Highlight: Langfuse — see what your LLM is actually doing, and grade it
What Langfuse is, who it's for, how to start in one docker command or one free signup, what it costs (as of July 2026), and the honest catch — the open-source observability-and-evals layer for founders shipping AI features.
🎧 Listen
The Stack
Tool Highlight: Kamal — Deploy to Your Own Servers With One Command
What Kamal is, who it's for, how to start in minutes, what it costs (nothing, plus a server you rent), and the honest catch — the deploy tool from 37signals that put 'no PaaS required' within reach for solo founders.
🎧 Listen
The Stack
Tool Highlight: E2B — Where Your Agent Runs the Code It Just Wrote
Your agent generates Python; something has to run it without handing a stranger a shell on your server. E2B is an isolated cloud sandbox you spin up in one call, run untrusted code in, and throw away.
🎧 Listen
The Stack
Tool Highlight: Dub — the open-source link layer that turns short links into revenue attribution
What Dub is, who it's for, how to start in minutes, what it costs (as of July 2026), and the honest catch — for founders who'd rather ship than build this themselves.
🎧 Listen
The Stack
Tool Highlight: Cloudflare Drop — Ship a Live Site by Dragging a Folder, No Account
Drag a folder of static files into your browser and get a live URL on Cloudflare's edge in seconds — no login, no config, no CLI. It stays up for 60 minutes; claim it into an account to keep it. Here's what it is, who it's for, and the catch.
🎧 Listen
The Stack
Tool Highlight: Better Auth — the Auth You Own Instead of Rent
A framework-agnostic TypeScript library that puts login, 2FA, passkeys, and multi-tenant orgs in your codebase — with the user table in your own database. Working sign-in in about ten minutes, and no per-user bill ever.