Nick Taylor is a Montréal-based software engineer and developer advocate at Pomerium who builds security infrastructure and open-source tools for AI-assisted development. His contributions include trusted-proxy authentication for OpenClaw, templates for Model Context Protocol applications, and browser-based tools for working with personal AI agents.
From frontend engineering to agent security
Taylor began his career working primarily with Microsoft and .NET technologies before shifting toward frontend development in 2016. Learning Node.js and React led him into open source, where an early contribution to React Slingshot developed into maintaining the project.
In January 2020, he joined DEV and Forem, working on the open-source platform behind the developer community. He moved to Netlify in April 2022, joining its ecosystem and frameworks team and tackling compatibility issues involving Next.js, Remix, Astro, and edge infrastructure. One investigation traced a Remix failure on Netlify Edge Functions to differences between Deno’s standards-compliant behavior and a Node.js polyfill.
Taylor joined OpenSauced in 2023, contributing to developer onboarding, open-source analytics, the AI-powered StarSearch feature, and software-bill-of-materials support. After the Linux Foundation acquired OpenSauced in late 2024, he joined Pomerium as a developer advocate in January 2025. There, his focus shifted toward Zero Trust security, identity-aware proxies, and protecting applications and tools exposed to AI agents.
Defining projects and technical ideas
Trusted-proxy authentication for OpenClaw: Taylor contributed an authentication mode that allows OpenClaw to trust an identity-aware proxy protecting its gateway. Configurable proxy addresses, authenticated-user headers, and access policies eliminate redundant WebSocket tokens and device pairing while keeping authorization at the proxy. His AI Engineer Europe demonstration also illustrated how other contributors caught and repaired an edge case his local testing missed.
Secure, interactive MCP applications: Taylor combines protected public endpoints, OAuth, React, and Vite to develop interactive Model Context Protocol applications inside ChatGPT. One application searched public conference-speaker data, filtered results, and triggered model-generated responses from its interface. His writing on MCP application security emphasizes building access controls into these systems from the outset.
MCP TypeScript Template: His open-source MCP server starter packages TypeScript development with Vite, Vitest, Pino logging, and Docker, giving developers established foundations for testing, logging, and deployment.
Clawspace: Taylor’s browser-based OpenClaw workspace editor makes agent-managed files accessible without opening an SSH session. He developed it through Discord and OpenClaw, including from his phone, while identifying a practical hazard of excessive agent permissions: unrestricted GitHub access can allow an agent to publish a pull request before its operator has reviewed the change.
