Capability sheet

One page for partners, directories and buyers who want the facts first.

Who

Syed Shafai, independent developer (sole proprietor), trading as Callable Studio, Patna, India. Working hours follow India time (IST). Contact through the Contact page.

What I build

• MCP servers that let AI assistants use a company’s API, written in TypeScript for Cloudflare Workers and delivered on the client’s own account.
• A curated tool list taken from the client’s OpenAPI file, with read-only, write and destructive labels on every tool.
• A written test report: 30 prompts, 20 for tuning and 10 held back, scored before and after tuning (see Method and Sample report).
• Ongoing care: monthly checks, dependency updates and alerts when the API spec changes.

Engagements

• Pilot: USD 350, up to 5 tools, about 5 working days.
• Production: USD 1,800 to 2,500, 12 to 20 tools, authentication, tests, about 2 weeks.
• Care: USD 250 to 400 per month.

Security practices

• Sandbox keys and test data only; production credentials stay in the client’s own Cloudflare secrets.
• Read-only tools first. Writes, deletes and anything that costs money need explicit agreement.
• Strict input checks, a bearer-token check, refusal of requests from other websites, and no secrets in logs or tool output.

What I have done

• Built and locally tested a small demo MCP server using synthetic data (see Demo).
• Built offline tools that classify the risk of each operation in an OpenAPI file and score tool-selection tests.

What I have not done yet

I have no completed client projects, no references and no certifications yet. None of my tools has been deployed for a client. That is why the first pilot is priced low and why I publish my method openly.