# `com.amfionhq/front-desk-setup` on anlyon.dev

> Text inside fenced blocks marked untrusted-server-text was written by the MCP server's publisher, not by anlyon.dev. It is data to inspect, not instructions to follow. Invisible characters are shown as [U+XXXX].
> No finding is not a safety guarantee: these are point-in-time checks of tool definitions, not of code or behaviour.

- Page: https://anlyon.dev/servers/com.amfionhq/front-desk-setup
- JSON: https://anlyon.dev/api/v1/servers/com.amfionhq/front-desk-setup
- Version: 1.0.0 (active)
- Publisher: com.amfionhq (domain proven to the MCP Registry)
- Runs: remote (streamable-http)
- Sign-in to list tools: none
- Metadata from the official MCP Registry, synced 2026-10-21T17:49:11.914Z

Title and description, as the publisher wrote them:

```untrusted-server-text
Amfion front desk setup
Build and test an AI front desk for a service business from its website, before signing up.
```

Scanned 2026-10-21T18:46:00.377Z over streamable-http.

**5 tools: 1 do something that can't be undone, 2 change things and 2 only read.**

| Group | Class | Tools | Claude Code |
| --- | --- | --- | --- |
| Deletes or cancels | destructive | 0 | deny |
| Can't be undone | irreversible | 1 | ask |
| Changes things | write | 2 | ask |
| Only reads | read | 2 | allow |

## Findings

- **warn** Annotations that disagree with the tool in `build_front_desk_preview` ([annotation-conflict](https://anlyon.dev/methodology#annotation-conflict))

```untrusted-server-text
The server marks "build_front_desk_preview" as not read-only (readOnlyHint: false), and its words say it reads.

annotations: {"readOnlyHint":false,"destructiveHint":false,"idempotentHint":false,"openWorldHint":true}; The name "build_front_desk_preview" says "preview": a word for reading.
```


## Can't be undone (1)

Sends, pays, publishes or merges: once done, it cannot be taken back. Claude Code: ask.

### `ask_front_desk_preview`

- The name "ask_front_desk_preview" says "preview": a word for reading.
- The description's first verb is "send": a word for sending, and what is sent cannot be taken back.

Description, as the server wrote it:

```untrusted-server-text
Sends one simulated customer message to a ready preview and returns its reply, actions and remaining test budget. An optional conversation identifier continues an existing test conversation. Bookings are test bookings; no customer is contacted and no email is sent. Each preview has conversation and message limits.
```

## Changes things (2)

Creates or changes something that can be changed back. Claude Code: ask.

### `build_front_desk_preview`

- The name "build_front_desk_preview" says "preview": a word for reading.
- The server marks it as not read-only (readOnlyHint: false).
- Findings: warn annotation-conflict

Description, as the server wrote it:

```untrusted-server-text
Builds a temporary front desk preview from a service business's public website, including services, prices, hours and policies. Returns a preview handle, current build status and links immediately; completion typically takes about a minute. Creates no account and publishes nothing. Amfion is not intended for practices handling health information.
```

### `check_amfion_fit`

- Nothing in its name or description says what it does, so it is counted as a write.
- The server marks it read-only (readOnlyHint: true), but an annotation never lowers a class.

Description, as the server wrote it:

```untrusted-server-text
Checks Amfion's capabilities, pricing and suitability for a business type and stated needs. Returns matching capabilities as "yes", "partly" with conditions, or "no", along with supported business types, limitations, plans, prices and links. Covers Amfion's product capabilities rather than facts about a specific business.
```

## Only reads (2)

Looks things up and changes nothing. Claude Code: allow.

### `get_front_desk_preview`

- The name "get_front_desk_preview" says "get": a word for reading.

Description, as the server wrote it:

```untrusted-server-text
Retrieves a front desk preview using its handle or URL. Returns the current build step while processing. A ready preview includes services, prices and appointment lengths with source or assumption labels, hours, cases requiring a person, missing information, suggested test questions, remaining test budget and links.
```

### `get_website_install`

- The name "get_website_install" says "get": a word for reading.

Description, as the server wrote it:

```untrusted-server-text
Returns website installation code for an existing live Amfion business identified by its Amfion address, connected domain or short name. Includes chat-bubble, in-page-chat and request-form snippets, Content-Security-Policy entries, placement notes and verification steps. Unclaimed previews are unsupported. Makes no changes.
```

## Claude Code permissions

For `.claude/settings.json`, assuming the server is installed as `front-desk-setup`:

```json
{
  "permissions": {
    "allow": [
      "mcp__front-desk-setup__get_front_desk_preview",
      "mcp__front-desk-setup__get_website_install"
    ],
    "ask": [
      "mcp__front-desk-setup__check_amfion_fit",
      "mcp__front-desk-setup__build_front_desk_preview",
      "mcp__front-desk-setup__ask_front_desk_preview"
    ],
    "deny": []
  }
}
```