I build MCP servers: the layer that lets AI agents (Claude, ChatGPT, Cursor and others) use your product, API or internal data — safely and reliably.

I’m the creator and solo maintainer of OpenOSINT, an MCP-native open-source framework with 1.8k stars on GitHub. Every package below follows the same process I use there: tools designed for agents (not just wrapped APIs), measured with tests, and checked for prompt injection.

Packages

I take one build at a time. Next available start: November 2026.

MCP Audit — $490

For teams that already have an MCP server.

  • Review of tool names, descriptions and schemas against agent-design best practices
  • Compatibility check against the current MCP specification (2026-07-28)
  • Security pass: prompt injection through tool results, tool poisoning, over-broad permissions
  • Written report with prioritized, concrete fixes

Delivery: 5 business days after you share access.

→ Buy the audit

Starter MCP Server — $1,900

Your existing API or database, usable by AI agents.

  • Up to 5 tools, designed for how agents actually use them
  • Local (stdio) or remote (Streamable HTTP) transport
  • API key / environment-based authentication
  • Tests, README and setup guide for Claude, ChatGPT and Cursor

Delivery: about 2 weeks after the written scope is agreed.

→ Pay the 50% deposit ($950)

Production MCP Server — $4,900

For products where agents need to reach real users’ data.

  • Up to 15 tools
  • Remote server with OAuth 2.1, following the 2026-07-28 specification
  • Eval suite measuring tool choice and answer accuracy
  • Security testing (prompt injection, tool poisoning) with a written report
  • Deployment on your infrastructure

Delivery: about 4–5 weeks after the written scope is agreed.

Coming soon. Ask about it

Maintenance — $390 / month

For servers I built or audited.

  • Updates when the MCP specification or SDKs change
  • Bug fixes and small tool additions (up to 4 hours per month)
  • Reply within 2 business days

Cancel anytime.

→ Subscribe

How it works

  1. Buy. The audit is paid in full; builds start with a 50% deposit.
  2. Written scope within 48 hours. I email you a short questionnaire, and we agree in writing on tools, data, access and deliverables. If it’s not a good fit, the deposit is refunded in full.
  3. Build. Weekly progress updates; you see the server working before delivery.
  4. Delivery. You get a short video of the working server, the code and documentation, then a Stripe invoice for the remaining 50%, due within 7 days. The code and repository are transferred once it’s paid.

You own all the code I write for you.

Not sure which package fits?

Email tommaso@tommasobertocchi.com with what you’d like AI agents to access (your product, API or data). I reply within one business day.

Services are for businesses only. Prices in USD. See the Terms.