# Creative Code

> Creative Code (creativecode.digital) is a software development company in Pittsburgh, Pennsylvania, USA that builds dealership and automotive retail software for car dealer groups and automotive software vendors: DMS and CRM integrations, inventory data products, AI agents and MCP servers for dealers. Forward deployed engineers embed with each client, a fleet of AI coding agents called the Farm builds and proves every change, and platforms already in production (live inventory for 2.98M vehicles, 59 registered dealer-system integrations, an MCP agent layer) mean projects start with the data and integrations done. It does not build in-vehicle or embedded automotive software.

- Who: Creative Code, LLC. Founded and run by Alexander Oleynik. 45 engineers, QA, designers and PMs. 15+ years shipping production software.
- For whom: dealer groups, automotive software vendors, and founders launching automotive companies. Some work outside automotive (advertising, home services, resale, healthcare web).
- Engagement: Discover (weeks 1 to 4), Deploy (weeks 5 to 8), Measure (months 3 and 6). Clients own the code built for them; shared platforms are licensed.
- Security: builds to SOC 2 controls and runs SOC 2 readiness for clients. Creative Code itself is not SOC 2 attested.
- Contact: info@creativecode.digital or https://creativecode.digital/contact
- Updated: October 2026

## Services
- [Dealership software development](https://creativecode.digital/dealership-software-development): custom software for dealer groups and automotive vendors, what we build, how an engagement works
- [Automotive AI agents](https://creativecode.digital/automotive-ai-agents): agents in production vs Foundry Labs prototypes, and guardrails (human approval, consent, TCPA opt-outs, pricing disclosures)
- [MCP server development](https://creativecode.digital/mcp-server-development): dealer MCP servers for Claude and ChatGPT, tool categories, auth, tenant isolation, consent gates
- [Integrations](https://creativecode.digital/integrations): the dealer systems Creative Code integrates with

## Core pages
- [Automotive Software Factory](https://creativecode.digital/automotive-software-factory): dealership and automotive retail software (not in-vehicle software); what an automotive software factory is, the stack a new product inherits, the four-station assembly line, who it is for
- [The Farm](https://creativecode.digital/farm): how the AI agent fleet works, the nine-step pipeline, guardrails, model routing
- [Forward Deployed Engineering](https://creativecode.digital/fde): the engagement model (Discover weeks 1-4, Deploy weeks 5-8, Measure at months 3 and 6) and the delete, code, agent, human method
- [Work](https://creativecode.digital/work): 20 systems in production plus 5 Foundry Labs prototypes
- [Security & SOC 2](https://creativecode.digital/security): how the agent fleet is locked down (scoped credentials, sandboxes, scans on every change, human merge, audit trail) and SOC 2 Type I and Type II readiness programs for clients. Creative Code itself is not SOC 2 attested
- [Security research](https://creativecode.digital/security/research): field notes from security sweeps, including Docker published ports bypassing UFW and GeoIP ipset truncation in CSF
- [Careers](https://creativecode.digital/careers): Forward Deployed Engineer and Farm roles
- [Contact](https://creativecode.digital/contact)

## Projects
- [Enterprise Automotive Platform & Framework](https://creativecode.digital/work/enterprise-automotive-platform): The shared infrastructure every automotive product runs on.
- [Real-Time Vehicle Inventory Graph](https://creativecode.digital/work/real-time-inventory-graph): Every VIN, every dealer, every price change. In real time.
- [Competitive Specials Intelligence](https://creativecode.digital/work/competitive-specials-intelligence): Stop guessing what your competitors are promoting.
- [Autonomous Software Engineering Pipeline](https://creativecode.digital/work/autonomous-engineering-pipeline): From task description to merged pull request.
- [AI Agent Storefront for Dealerships](https://creativecode.digital/work/ai-agent-storefront): When shoppers ask ChatGPT, the dealership answers.
- [Selling Platform for Car Salespeople](https://creativecode.digital/work/salesperson-selling-platform): A site, a CRM and a marketplace agent for every rep on the floor.
- [Identity & Multi-Touch Attribution Engine](https://creativecode.digital/work/identity-attribution-engine): Finally settle which vendor sold the car.
- [Autonomous Support Desk](https://creativecode.digital/work/autonomous-support-desk): One intake for every product. Agents do the work, a human approves.
- [Self-Measuring Outbound Engine](https://creativecode.digital/work/self-measuring-outbound): Every email cites the prospect's own number. With proof.
- [Dealer Group Operations Intelligence](https://creativecode.digital/work/dealer-group-operations): Every KPI, every rooftop, every alert. Before the morning meeting.
- [Vision AI Inventory & Listing Platform](https://creativecode.digital/work/vision-ai-listing): Snap a photo. Get a listing.
- [Real-Time Programmatic Bidding Engine](https://creativecode.digital/work/programmatic-bidding-engine): Millisecond decisions at bid-stream volume.
- [Dealer Analytics & AI Analyst](https://creativecode.digital/work/dealer-analytics-ai): One data model over sixty dealership systems. An analyst on top.
- [Conversational Marketing Analyst](https://creativecode.digital/work/conversational-marketing-analyst): Your data guy is fine. This one answers at 3am.
- [Search, Ads & Maps Intelligence](https://creativecode.digital/work/search-maps-intelligence): Who shows up when a shopper searches, and what they paid for it.
- [Marketplace for Dealer-Built Software](https://creativecode.digital/work/dealer-software-marketplace): Sell what you built to the dealer down the street.
- [Open Protocol for Dealership AI Agents](https://creativecode.digital/work/dealership-agent-protocol): One protocol instead of an integration per vendor pair.
- [Financial Aid Award Letter Platform](https://creativecode.digital/work/financial-aid-award-platform): What college actually costs, in plain language.
- [SOC 2 Readiness & Security Program](https://creativecode.digital/work/soc2-security-program): From draft policies to audit-ready evidence.
- [Infrastructure Security & Incident Response](https://creativecode.digital/work/infrastructure-security-incident-response): When a server gets compromised, we're the team that gets the call.
- [Service Lane Voice Agent](https://creativecode.digital/work/service-lane-voice-agent): Answers every call. Books the bay. Quotes the job. (Foundry Labs prototype)
- [Drive-Through Vision Inspection](https://creativecode.digital/work/drive-through-inspection): A condition report before the advisor walks out. (Foundry Labs prototype)
- [Trade-In Appraisal Agent](https://creativecode.digital/work/trade-in-appraisal-agent): A defensible number in ninety seconds. (Foundry Labs prototype)
- [Accounts Receivable Agent](https://creativecode.digital/work/receivables-agent): Reconciles every night. Chases politely. Escalates rarely. (Foundry Labs prototype)
- [Clinical Intake Agent](https://creativecode.digital/work/clinical-intake-agent): Check-in without the clipboard. (Foundry Labs prototype)

## Optional
- [Full text for agents](https://creativecode.digital/llms-full.txt)
- [Sitemap](https://creativecode.digital/sitemap.xml)

# Company facts
- 2.98M: Vehicles live in our inventory graph
- 6,704: Dealer websites crawled every day
- 59: Dealer-system integrations registered
- 10: Client programs running in parallel
- 45: Engineers, QA, designers and PMs
- 15+: Years shipping production software
- Model families used in the Farm: Claude, GPT, Gemini, Grok
- Headquarters: Pittsburgh, Pennsylvania, USA. Remote-first engineering team.

# What Creative Code is not
- Not an in-vehicle, embedded or software-defined-vehicle software company. "Automotive software factory" here means dealership and automotive retail software.
- Not SOC 2 attested. Creative Code does not hold a SOC 2 report of its own.

# Integrations
Creative Code integrates with the systems dealers already run. CDK and Reynolds and Reynolds are connected per project when needed.

- DMS and CRM: VinSolutions, eLead, DriveCentric, DealerSocket, Tekion, PBS
- Inventory: vAuto, HomeNet, VINCUE, Dealerslink, ACV MAX
- Call tracking: CallRail, CallSource, CallRevu, Car Wars, TotalCX
- Marketplaces: CarGurus, Cars.com
- Ads and analytics: Google Ads, Meta Ads, Google Analytics 4, Google Search Console, Google Sheets
- Dealer website platforms: DealerOn, Dealer Inspire, Dealer.com, Dealer eProcess, Team Velocity, Sincro, DealerFire, DealerVenom, fusionZONE, DriverSeat, eDealer
- AI assistants: Claude, ChatGPT, Any MCP client

# How Creative Code works
1. A Forward Deployed Engineer embeds with the client's operators, observes the real process in their systems, and sorts every step into delete, code, agent or human.
2. The Farm, a fleet of AI coding agents, builds each change at an isolated station (its own git worktree and sandbox).
3. Agents attach proof to every change: tests, evals, before-and-after measurements, and a review score from a different model family. An engineer merges.
4. Results are measured against the baseline at three and six months, and the Farm keeps improving what is live.

# Projects
Client names are withheld under NDA. Projects are named for what they do.

## Automotive platforms

### Enterprise Automotive Platform & Framework
The shared infrastructure every automotive product runs on.

Five offerings, one platform, infinite possibilities. A multi-tenant connector and queue layer that gives every rooftop one identity across DMS, CRM, inventory and media, so a new product inherits every integration instead of building its own.

- 59: integrations registered
- 47: wired to live connectors
- 1: store identity across every system
- DMS, CRM, inventory, call tracking and ad platforms behind one API
- Adding a source is a plugin, not a release
- Queue-driven harvesting with per-tenant isolation
- The framework new automotive companies launch on

Built with: TypeScript, Hono, BullMQ, Postgres, SSO
URL: https://creativecode.digital/work/enterprise-automotive-platform

### Real-Time Vehicle Inventory Graph
Every VIN, every dealer, every price change. In real time.

Live inventory from thousands of dealer websites, normalized into one schema and enriched with OEM offers, build data, price history and window stickers, then served over API and MCP.

- 2.98M: vehicles, live
- 6,704: dealer sites crawled
- 9M: price changes tracked
- 80M: vehicle photos
- 98% of inventory refreshed daily
- 186k OEM incentive offers matched to specific vehicles
- VIN decode on 99.9% and build data on 600k+ vehicles
- Finance, lease and trade math over API

Built with: Node, Postgres, Redis, RabbitMQ, MCP
URL: https://creativecode.digital/work/real-time-inventory-graph

### Open Protocol for Dealership AI Agents
One protocol instead of an integration per vendor pair.

A draft open standard that defines eight dealership domains over MCP, so any agent can talk to inventory, CRM, desking, service and parts without bespoke work.

- 8: standardized domains
- RFC 0.1: published
- Replaces N-by-M bespoke integrations
- Vendor directory
- Founding-partner program
- Open specification

Built with: MCP, JSON Schema
URL: https://creativecode.digital/work/dealership-agent-protocol

### SOC 2 Readiness & Security Program
From draft policies to audit-ready evidence.

We are taking an automotive analytics SaaS through SOC 2 Type I and Type II: policies written and published, controls wired into the engineering workflow, and evidence collected in a compliance platform for the auditor. Alongside it, we answer the security questionnaires enterprise dealer groups send before they sign.

- 25: policies written and published
- Type I + II: in progress
- Gap analysis against the trust services criteria
- Branch protection, CODEOWNERS and required checks on every repo
- Backup restore tests and network hardening, documented as evidence
- Enterprise security questionnaires answered from real controls

Built with: SOC 2, GitHub, Semgrep, Dependabot, Compliance platform
URL: https://creativecode.digital/work/soc2-security-program

### Infrastructure Security & Incident Response
When a server gets compromised, we're the team that gets the call.

Security sweeps across a fleet of self-hosted servers, every finding verified by a second model family before anyone acts, then remediation: firewalls, geo-fencing, SSH lockdown, exposed databases closed, and compromised boxes rebuilt on clean infrastructure.

- 19: servers in the last fleet sweep
- Read-only sweeps first, nothing changed without a plan
- Findings cross-checked by an independent model
- Clean-room migrations off compromised hosts
- Hardening tracked to closure, host by host

Built with: Linux, Cloudflare, CSF / firewalld, WireGuard
URL: https://creativecode.digital/work/infrastructure-security-incident-response

## Intelligence

### Competitive Specials Intelligence
Stop guessing what your competitors are promoting.

We monitor every dealer website and read every special with AI. OCR and vision models pull the real terms out of banner creative each morning and put the market's offers next to yours.

- 67: dealer groups monitored daily
- ~70k: dealer specials captured
- Reads lease, APR and cash-back terms out of images, not just text
- Your offer against the market, side by side
- FTC and OEM compliance checks on every counter-offer
- Generates the special that beats the one down the street

Built with: Python, Playwright, Vision models, BullMQ
URL: https://creativecode.digital/work/competitive-specials-intelligence

### Identity & Multi-Touch Attribution Engine
Finally settle which vendor sold the car.

A first-party tag and collector that resolves a shopper to one person across visits, credits every vendor that touched the deal, and holds the consent-gated record an AI agent reads and writes.

- 1,602: automated tests
- Edge: tag + collector
- Measures vendors without their cooperation
- Identity resolution with auditable merges
- Full participation credit, no forced split
- Consent table every agent message must pass

Built with: Edge workers, SQLite at the edge, TypeScript
URL: https://creativecode.digital/work/identity-attribution-engine

### Dealer Group Operations Intelligence
Every KPI, every rooftop, every alert. Before the morning meeting.

An operating system for a multi-rooftop dealer group: eleven services on a message bus, a data hub in the warehouse, a 24-KPI metric spec and an alert engine. We took it over mid-flight and shipped.

- 11: services on a message bus
- 24: KPIs specified
- 112: PRs merged after takeover
- Service, fixed-ops and inventory data flowing
- 10-type alert engine
- Five-agent orchestrator
- Infrastructure as code

Built with: NestJS, BigQuery, RabbitMQ, GCP
URL: https://creativecode.digital/work/dealer-group-operations

### Real-Time Programmatic Bidding Engine
Millisecond decisions at bid-stream volume.

A bidder, segmentation engine and audience import pipeline for a national ad network, built and run by an embedded engineering pod.

- 12: engineers embedded
- Go bidder on the hot path
- ClickHouse segmentation
- Audience import pipelines
- Shipped without slowing the live business

Built with: Go, ClickHouse, Kafka-style queues
URL: https://creativecode.digital/work/programmatic-bidding-engine

### Dealer Analytics & AI Analyst
One data model over sixty dealership systems. An analyst on top.

Every dealership system names the same sale differently. This normalizes them into one metric registry across hundreds of rooftops and lets an AI analyst answer questions with the numbers attached.

- ~60: source systems normalized
- 387: dealer domains
- Store-level comparisons
- Metric registry with definitions
- MCP server for AI analysts
- Runs white-label for an agency

Built with: Postgres, MCP, TypeScript
URL: https://creativecode.digital/work/dealer-analytics-ai

### Conversational Marketing Analyst
Your data guy is fine. This one answers at 3am.

Connects to GA4 and Search Console and runs a structured investigation behind every question, so a GM gets a defended answer in seconds instead of a spreadsheet.

- 130+: knowledge-base documents
- Plain-English questions
- Multi-property comparisons
- Read-only by design
- Drill-downs and exports

Built with: Vue, Express, LLM
URL: https://creativecode.digital/work/conversational-marketing-analyst

### Search, Ads & Maps Intelligence
Who shows up when a shopper searches, and what they paid for it.

Industrial-grade collection of search results, ads and map listings, structured and served over an API with an MCP server so agents can ask directly.

- 83+: API endpoints
- Search, ads and maps in one schema
- Scheduled collection
- MCP server for agents
- Market-level share of voice

Built with: Fastify, Postgres, MCP
URL: https://creativecode.digital/work/search-maps-intelligence

## AI agents

### Autonomous Software Engineering Pipeline
From task description to merged pull request.

The orchestration pipeline at the heart of the Farm. Nine deterministic steps take a scoped task through context, sandbox, implementation, validation and review, and nothing merges without passing the gate.

- 9: deterministic steps
- 14: MCP tools in the toolshed
- Isolated git-worktree sandbox per task
- Protected files and dangerous-command detection
- Cross-model review before a human sees the diff
- Slack and Telegram control

Built with: Python, FastAPI, Agent SDK, Postgres
URL: https://creativecode.digital/work/autonomous-engineering-pipeline

### AI Agent Storefront for Dealerships
When shoppers ask ChatGPT, the dealership answers.

An endpoint AI assistants query instead of crawling a website. Live inventory, offers and store data served in the shape an agent asks for, over MCP, at the edge.

- 18: tenants live
- Web MCP: native
- Agents query an endpoint built for them
- The dealer keeps the website they have
- Reports which assistants read the store and what they got
- Runs on edge workers

Built with: Edge workers, MCP, Postgres
URL: https://creativecode.digital/work/ai-agent-storefront

### Autonomous Support Desk
One intake for every product. Agents do the work, a human approves.

Email, chat and voice from every product land in one queue. An investigation agent looks into the problem, a response agent drafts the answer, and anything customer-facing passes an approval gate.

- 5: product queues live
- 95%: resolution target without a person
- Automatic triage to the right product
- Investigation and response agents
- What users struggle with becomes roadmap data
- A new product adds a knowledge folder, not a support team

Built with: Agents, Voice, Ticketing
URL: https://creativecode.digital/work/autonomous-support-desk

### Self-Measuring Outbound Engine
Every email cites the prospect's own number. With proof.

Measures one real fact about each prospect, writes an individual email citing it with a screenshot as evidence, and stops the moment someone replies. If the measurement fails, it sends nothing.

- A new campaign is a config file, not a hire
- Screenshot proof attached to every claim
- Stops on reply, never guesses
- Shared across every product in the portfolio

Built with: Agents, Headless browser, Config-driven
URL: https://creativecode.digital/work/self-measuring-outbound

## Retail & selling

### Selling Platform for Car Salespeople
A site, a CRM and a marketplace agent for every rep on the floor.

Every salesperson gets a fast personal site on live inventory, edits it by prompting, and has an agent that posts to Facebook Marketplace and pulls the listing the moment the car sells.

- 210: salesperson accounts
- 45: active rooftops
- Reps change their page by prompting, no design ticket
- Mini CRM with ADF leads forwarded to the store
- Marketplace posting and auto-removal on sale
- Runs white-label for an agency

Built with: Astro, Hono, Edge workers, Postgres
URL: https://creativecode.digital/work/salesperson-selling-platform

### Vision AI Inventory & Listing Platform
Snap a photo. Get a listing.

Mobile-first inventory for resale franchise crews. Two vision models read the item, write the listing and price it, and a light CRM and public marketplace sit on top.

- ~40: data models
- 415: commits to production
- Two vision models cross-checking
- Listing copy and pricing generated
- Built-in CRM
- Public marketplace

Built with: React, Cloud SQL, Object storage, Vision models
URL: https://creativecode.digital/work/vision-ai-listing

### Marketplace for Dealer-Built Software
Sell what you built to the dealer down the street.

Dealers list the tools they built, buyers get them scanned, licensed and delivered. Every upload passes a security pipeline before it can be listed.

- Malware, secrets, dependency and static-analysis scans on every upload
- Connected payouts
- Group checkout for dealer groups
- Review workflow

Built with: Next.js, Prisma, Stripe Connect
URL: https://creativecode.digital/work/dealer-software-marketplace

## Beyond automotive

### Financial Aid Award Letter Platform
What college actually costs, in plain language.

Turns FAFSA and SAI inputs into a personalized award letter priced off direct cost, not sticker price. Two brands on one codebase: one sells to students, one licenses to colleges.

- 2: brands, one codebase
- Personalized award letters
- Direct-cost pricing
- Student and institution products
- Built for equity, not hours

Built with: TypeScript, Postgres
URL: https://creativecode.digital/work/financial-aid-award-platform

## Foundry Labs

### Service Lane Voice Agent
Answers every call. Books the bay. Quotes the job.

A voice agent for the service desk that picks up on the first ring, books against the live scheduler, quotes from the parts catalog and texts the customer when the car is ready.

- Live scheduler read and write
- Parts-catalog quoting
- Hand-off to an advisor on request
- Every call transcribed and scored

Built with: Realtime voice, MCP, DMS connector
URL: https://creativecode.digital/work/service-lane-voice-agent
Status: Foundry Labs prototype, not client work.

### Drive-Through Vision Inspection
A condition report before the advisor walks out.

A car rolls through the service lane and vision models produce a dent, scratch and tire report from a camera arch, attached to the repair order automatically.

- Damage detection and severity
- Tire tread estimate
- Before-and-after evidence for disputes
- Upsell recommendations for the advisor

Built with: Vision models, Edge GPU, DMS connector
URL: https://creativecode.digital/work/drive-through-inspection
Status: Foundry Labs prototype, not client work.

### Trade-In Appraisal Agent
A defensible number in ninety seconds.

Reads the VIN, photos and market comps from the inventory graph and returns an appraisal with the reasoning attached, so the desk and the customer see the same evidence.

- Live market comps
- Reconditioning estimate from photos
- Explainable adjustments
- Pushes to the desking tool

Built with: Inventory graph, Vision models, LLM
URL: https://creativecode.digital/work/trade-in-appraisal-agent
Status: Foundry Labs prototype, not client work.

### Accounts Receivable Agent
Reconciles every night. Chases politely. Escalates rarely.

Matches invoices to bank activity, follows up on what is late in the customer's own tone, and only escalates what needs a human.

- Nightly reconciliation
- Tone-matched follow-ups
- Dispute detection
- Human approval on anything unusual

Built with: Banking APIs, LLM, Accounting connectors
URL: https://creativecode.digital/work/receivables-agent
Status: Foundry Labs prototype, not client work.

### Clinical Intake Agent
Check-in without the clipboard.

Patients check in on a tablet, the agent pre-fills intake from prior visits and flags insurance gaps before the appointment starts.

- Pre-filled intake
- Insurance eligibility checks
- Plain-language consent
- EHR write-back

Built with: FHIR, LLM, Tablet app
URL: https://creativecode.digital/work/clinical-intake-agent
Status: Foundry Labs prototype, not client work.

# Open roles
## Forward Deployed Engineer, AI Agents
Own one customer workflow from discovery to production, with the Farm doing the bulk of the implementation under your direction.
Apply: https://creativecode.digital/careers#fde-ai

## Forward Deployed Engineer, Automotive Data
Wire dealer groups into our platforms: DMS, CRM, inventory and ads data, normalized and exposed to agents.
Apply: https://creativecode.digital/careers#fde-data

## Lead Forward Deployed Engineer
Run a pod: one or two FDEs, a slice of the Farm, and a customer who expects production, not a pilot.
Apply: https://creativecode.digital/careers#fde-lead

## Agent Operations Engineer
Keep the Farm healthy: the queue, the sandboxes, the budgets, the gate, and the telemetry behind every agent run.
Apply: https://creativecode.digital/careers#agent-ops

## Evaluation Engineer
Decide what correct means for every agent we ship, and build the harnesses that catch them when they are not.
Apply: https://creativecode.digital/careers#eval-eng

# FAQ
## What is an AI software foundry?
A company that builds production software with a fleet of AI agents doing most of the implementation, engineers deciding what ships, and platforms already in production so no project starts from zero. Creative Code runs all three.

## What is a Forward Deployed Engineer?
An engineer who works inside your business rather than from a ticket queue. Our FDEs learn the workflow from the people who do it, define what done means, direct the Farm, and stay accountable for the result in production.

## What exactly is the Farm?
A managed fleet of agent workers. Each takes a scoped task from a queue, works in an isolated sandbox, runs tests and evals, and opens a pull request. A control plane handles credentials, budgets, retries and logs. An engineer approves every consequential change.

## Who owns the code you write for us?
You own everything we build specifically for you. Where we deploy one of our platforms underneath, you get a license to it, and we say which is which in the contract before work starts.

## Do you help with SOC 2?
Yes. We take companies through SOC 2 Type I and Type II: gap analysis, policies, controls wired into the engineering workflow, evidence collection and auditor handoff. We are running this program today for an automotive analytics SaaS, and the same controls apply to every agent run in the Farm. Creative Code itself is not SOC 2 attested: we do not hold a SOC 2 report of our own.

## Is our data used to train models?
No. We use model providers under terms that exclude training on customer data, scope agent credentials to the task, and keep customer work in isolated sandboxes.

## How do engagements start?
With Discover: four weeks in which an FDE maps the real process, measures the baseline, proves the hard parts with prototypes, and delivers an architecture and a scope you can take to anyone, including us.

## What is an automotive software factory?
A production line for dealership and automotive software: one normalized data layer, one set of dealer-system integrations, and a fleet of AI agents that build and prove every change while engineers decide what ships. Creative Code runs one in production.

## Which industries do you work in?
Automotive retail is where most of our platforms live. We also run deployments in programmatic advertising, home services, resale and healthcare web.

## Where is the team?
Headquartered in Pittsburgh, Pennsylvania, with engineers across several time zones and FDEs who travel to the customer when the work needs it.