000%
Ali Saad / Creative systems practiceSignal acquired
DestinationDestination
Destination / Destination11 / route handoff

Back to the archiveW—05 / 11
05
W—05 2026
AI-generated Portfolio Control Room topology connecting authenticated content, media, assistant, and agent operations around a protected core.
Personal PlatformSelected work05 / 11

Selected work / Product Designer & Full-Stack Engineer

PortfolioControlRoom

Product ArchitectureFull-Stack DevelopmentCMS EngineeringAI Integration
Scroll to enter
OverviewProject filmThe buildOutcome
01The project, in one breath
Role
Product Designer & Full-Stack Engineer
Client
Personal Platform
Year
2026

The main challenge was turning a portfolio CMS into a safe operational control plane without allowing public clients—or connected AI agents—to inherit administrator trust. Public content, private credentials, operator settings, assistant behavior, and agent permissions therefore…

A private AI-native CMS and secure MCP control plane for operating a living portfolio—content, projects, media, runtime settings, visitor-assistant behavior, scoped agent access, and security operations from one authenticated workspace.A private AI-native CMS and secure MCP control plane for operating a living portfolio—content, projects, media, runtime settings, visitor-assistant behavior, scoped agent access, and security operations from one authenticated workspace.

02 / Project film01020304—04
AI-generated content operations interface showing page, service, project, and runtime controls connected to a published case study.
AI-generated content operations interface showing page, service, project, and runtime controls connected to a published case study.
One canonical content contract coordinates portfolio pages, services, project narratives, media, and publication state.
AI-generated media intelligence interface showing a selected asset linked to hero, case study, social, and archive placements.
AI-generated media intelligence interface showing a selected asset linked to hero, case study, social, and archive placements.
The media library tracks where every asset is used before cleanup, turning storage into a protected operational system.
AI-generated assistant architecture showing approved portfolio knowledge and safety controls feeding a public guide.
AI-generated assistant architecture showing approved portfolio knowledge and safety controls feeding a public guide.
Published knowledge, routing rules, response limits, and abuse controls ground the public assistant before a visitor response is produced.
AI-generated agent operations interface showing an authorized request, scoped MCP tool calls, and a verified project-media update.
AI-generated agent operations interface showing an authorized request, scoped MCP tool calls, and a verified project-media update.
An OAuth-authorized AI client updates portfolio media metadata through scoped MCP tools.
One canonical content contract coordinates portfolio pages, services, project narratives, media, and publication state.The media library tracks where every asset is used before cleanup, turning storage into a protected operational system.Published knowledge, routing rules, response limits, and abuse controls ground the public assistant before a visitor response is produced.An OAuth-authorized AI client updates portfolio media metadata through scoped MCP tools.Scroll / cut
03The build, reduced to what mattered

Three decisions shaped the final experience.

03
01
CONTENT OPERATIONS

Single-Portfolio CMS

Authenticated editors manage page copy, projects, case studies, media, runtime settings, and publication state while the public portfolio consumes a narrow, presentation-safe content…

02
AGENT OPERATIONS

OAuth MCP Control Plane

Compatible AI clients can receive carefully scoped read or write capabilities through OAuth. Credentials can be reviewed and revoked, and every supported operation remains constrained by…

03
AI CONTROL

Assistant Operations

The dashboard manages the public portfolio assistant without exposing provider credentials to the browser. Published-only context, immutable identity rules, response limits, and safe…

OutcomeWhat remained after the build

The finished Control Room gives the portfolio one operational center for content, publishing, media, runtime behavior, assistant configuration, security controls, and authenticated agent access. The public site remains presentation-focused, while private operations stay behind authenticated boundaries. AI clients can perform approved work through scoped tools instead of receiving broad database access, and the operator can inspect activity or revoke access from the same interface. This turns the portfolio from a…The finished Control Room gives the portfolio one operational center for content, publishing, media, runtime behavior, assistant configuration, security controls, and authenticated agent access. The public site remains presentation-focused, while private operations stay behind authenticated boundaries. AI clients can perform approved work through scoped tools instead of receiving broad database access, and the operator can inspect activity or revoke access from the same interface. This turns the portfolio from a…

Private dashboard, public assistant, and scoped MCP toolsInterfaces
Authenticated operator with explicit OAuth scopesAccess Model
RLS, private secrets, validation, rate limits, and revocationSecurity
Next projectW—06 / 11
Continue the archive

Interior Design Portfolio

Enter project
Interior Design Portfolio
Have something worth building?Start a project
aliihsaad1@gmail.com
InstagramLinkedInGitHubFacebook
© 2026 Ali Saad