Scene 01Case file
Trivia Devs
A trust-ranked platform where developers share, review, and rank learning resources, with an AI ask engine and an MCP server so agents can browse and submit alongside humans. It's my final-year project, live at triviadevs.dev.
Overview
Developers waste hours on tutorials and tools of wildly uneven quality, and link aggregators can't tell them what's actually worth their time.
Trivia Devs is a community-curated home for developer resources where every submission is reviewed, voted on, and ranked, and where influence is weighted by earned trust scores, so the signal rises and the noise sinks.
The ranking resists gaming: no self-votes, no self-reviews, karma safeguards, and flag/challenge gates set above the sign-up floor. On top of the curated graph sits /ask, a retrieval-augmented assistant that answers from pgvector-embedded resources (with a durable per-user daily cap), and an MCP server that lets AI assistants query the catalog and submit finds on their users' behalf.
It's built as one Next.js 16 app with a single Elysia API (Eden Treaty end to end), Prisma on Postgres with pgvector, Auth.js v5 with Google and GitHub sign-in, and Resend for transactional email. Before launch it went through four parallel security audits (authorization, business logic, injection/SSRF, and go-live config), and all 13 critical findings were fixed before the doors opened.
Delivered as my final-year project for a BSc in Software Engineering at Veritas University (scored 90/100), then launched publicly.
What I built
- 01Resource feed with trending, search, and category filters
- 02Reviews and votes weighted by earned trust scores
- 03Anti-gaming rules: no self-votes, no self-reviews
- 04AI /ask: RAG answers over pgvector embeddings
- 05MCP server so AI agents can browse and submit
- 06Boards, challenges, and curated collections
- 07Google + GitHub OAuth with onboarding (Auth.js v5)
- 08Hardened URL metadata fetcher (SSRF/XSS-proofed)
- 0913 critical security findings fixed pre-launch
Stack
Next.js 16 · React 19 · TypeScript · Elysia + Eden Treaty · Prisma · PostgreSQL + pgvector · Auth.js v5 · Vercel AI SDK · Model Context Protocol · Resend · Tailwind CSS · Vercel