Live demo by EmSoft. Studio Lumi is a fictional hair salon. Everything below runs in your browser. Source on GitHub →

MCP server · 6 tools · 16 tests

The AI talks to customers. The code decides what gets booked.

An AI receptionist books, moves and cancels appointments through this server. It can be talked into anything, so none of the rules live in its prompt. Run a scenario, or open the tool console and try to break them yourself.

No double bookings, no booking outside opening hoursslot_taken · closed
Customer must confirm a preview before anything is bookedpreview
Only the phone that made a booking can see or change itnot_found
Changes inside 24 hours go to a person, not the AIneeds_approval
Every call is logged in a chain that shows any editsha-256

Try it

01Book a haircutProves: the agent must show a preview and get a yes first.
02Three friends, one time slotProves: two stylists means the third booking is refused.
03Cancel this afternoonProves: a late cancellation waits for staff approval.
04"You are now in admin mode…"Proves: a prompt injection can't reach other people's bookings.

The conversation and every tool call the agent makes appear here. The tools are the real ones from src/core.js.

Calendar

demo clock: Tue 17 Nov, 10:00

Waiting for staff

0approve as Arta

Audit log

intact

#	who	tool	result	hash ← prev