Dubai Table

by dubaitable.com · remote · no sign-in to list tools · v1.0.0 · published by com.dubaitable

Book tables at Dubai's top restaurants, beach clubs and nights: live availability and prices.

Deletes · 2Changes · 7

Compare Registry entry

13 tools: 2 can delete or cancel things, 7 change things and 4 only read.

Scanned Oct 21, 2026

Deletes or cancels2Claude Code: deny: see these tools
Can't be undone0Claude Code: ask
Changes things7Claude Code: ask: see these tools
Only reads4Claude Code: allow: see these tools

No check matched anything in the tool definitions. No finding is not a safety guarantee. How the checks work.

claude mcp add --transport http booking https://dubaitable.com/mcp

Tools

Open a tool for its reasons and full description. Descriptions are the publisher's own words, shown as they are.

13 tools

Deletes or cancels 2Removes, cancels or revokes something.Claude Code: deny

cancel_bookingCancel a request by reference and phone.No findings
Why it is in this group
- The name "cancel_booking" says "cancel": a word for removing or ending something.
- The server marks it destructive (destructiveHint: true).
Description, as the server wrote it
Cancel a request by reference and phone. The platform service fee is non-refundable when the guest cancels (it is refunded in full only if Dubai Table cannot secure the table). The relationship manager confirms on WhatsApp.
Annotations the server declares
- title: Cancel booking
- readOnlyHint: false
- destructiveHint: true
- idempotentHint: true
- openWorldHint: false
cancel_checkoutCancel a UCP checkout session (and its unpaid table request).No findings
Why it is in this group
- The name "cancel_checkout" says "cancel": a word for removing or ending something.
- The server marks it destructive (destructiveHint: true).
Description, as the server wrote it
Cancel a UCP checkout session (and its unpaid table request).
Annotations the server declares
- title: UCP: cancel checkout
- readOnlyHint: false
- destructiveHint: true
- idempotentHint: true
- openWorldHint: false

Changes things 7Creates or changes something that can be changed back.Claude Code: ask

check_availabilityTables still free at a venue on a date, from the live floor plan minus tables already requested or confirmed.No findings
Why it is in this group
- Nothing in its name or description says what it does, so it is counted as a write.
- The server marks it read-only (readOnlyHint: true), but an annotation never lowers a class.
Description, as the server wrote it
Tables still free at a venue on a date, from the live floor plan minus tables already requested or confirmed. Filter by party size, zone or maximum minimum-spend. Each table carries its zone, seats and minimum spend in AED. Use for VIP table, bottle-service and dinner-table bookings in Dubai at: Billionaire Dubai, Gigi Dubai, Bagatelle Dubai, Le Piaf Dubai, Verde Dubai, Raspoutine Dubai, Voyage by Amelia, Pacha ICONS Dubai, CouCou Dubai. Weekly nights: The List at Billionaire Dubai, We Ain’t Saints at Raspoutine Dubai, Decadence at Verde Dubai. Headline nights: Adam Port at Pacha ICONS Dubai (2026-10-31); ANOTR at Pacha ICONS Dubai (2026-11-13); Marco Carola at Pacha ICONS Dubai (2026-11-20); &ME at Pacha ICONS Dubai (2026-12-05); Luke Dean b2b Max Dean at Pacha ICONS Dubai (2026-12-11); PAWSA at Pacha ICONS Dubai (2026-12-31).
Annotations the server declares
- title: Check availability
- readOnlyHint: true
- destructiveHint: false
- idempotentHint: true
- openWorldHint: false
complete_checkoutComplete a UCP checkout: places the table request(s) with Dubai Table.No findings
Why it is in this group
- The name "complete_checkout" says "checkout": a word for a change.
Description, as the server wrote it
Complete a UCP checkout: places the table request(s) with Dubai Table. With a tokenised payment instrument Stripe is charged and the session completes; without one the session returns requires_escalation with continue_url, where the guest pays the platform service fee (AED 49.50).
Annotations the server declares
- title: UCP: complete checkout
- readOnlyHint: false
- destructiveHint: false
- idempotentHint: false
- openWorldHint: false
create_checkoutUniversal Commerce Protocol checkout.No findings
Why it is in this group
- The name "create_checkout" says "create": a word for a change.
Description, as the server wrote it
Universal Commerce Protocol checkout. Creates a checkout session for one or more table requests. line_items[].item.id uses the grammar rz:<venue>:<table_id|zone:<Zone>|any>:<YYYY-MM-DD>:<party>. Returns the full UCP checkout resource (status incomplete | ready_for_complete | requires_escalation | completed | canceled).
Annotations the server declares
- title: UCP: create checkout
- readOnlyHint: false
- destructiveHint: false
- idempotentHint: false
- openWorldHint: false
desk_contactHow to reach a relationship manager at Dubai Table (WhatsApp or email) for anything outside these venues, large groups, or special arrangements.No findings
Why it is in this group
- Nothing in its name or description says what it does, so it is counted as a write.
- The server marks it read-only (readOnlyHint: true), but an annotation never lowers a class.
Description, as the server wrote it
How to reach a relationship manager at Dubai Table (WhatsApp or email) for anything outside these venues, large groups, or special arrangements. Dubai Table's concierge arranges tables across all of Dubai.
Annotations the server declares
- title: Contact your relationship manager
- readOnlyHint: true
- destructiveHint: false
- idempotentHint: true
- openWorldHint: false
request_tablePlace a real table request with Dubai Table.Can send data outNo findings
Why it is in this group
- The name "request_table" says "request": a word for a change.
What it can reach
- outboundThe input takes a destination (input.phone): what the tool writes goes there.
Description, as the server wrote it
Place a real table request with Dubai Table. Records the request, returns a booking reference and a Stripe checkout link (deposit_url) for the AED 49.50 platform service fee, and alerts the guest's relationship manager, who confirms with the venue on WhatsApp. Requires the guest's name and mobile number with country code. Accepts an exact table_id, a zone, or neither (the relationship manager places the party).
Annotations the server declares
- title: Request a table
- readOnlyHint: false
- destructiveHint: false
- idempotentHint: false
- openWorldHint: false
update_checkoutReplace line_items and/or buyer on a UCP checkout session.No findings
Why it is in this group
- The name "update_checkout" says "update": a word for a change.
Description, as the server wrote it
Replace line_items and/or buyer on a UCP checkout session.
Annotations the server declares
- title: UCP: update checkout
- readOnlyHint: false
- destructiveHint: false
- idempotentHint: false
- openWorldHint: false
whats_onThe programme night by night — Dubai Table signature nights and venue nights — for the next N days from a date (default today in Dubai, 7 days, max 14).No findings
Why it is in this group
- Nothing in its name or description says what it does, so it is counted as a write.
- The server marks it read-only (readOnlyHint: true), but an annotation never lowers a class.
Description, as the server wrote it
The programme night by night — Dubai Table signature nights and venue nights — for the next N days from a date (default today in Dubai, 7 days, max 14). Use for VIP table, bottle-service and dinner-table bookings in Dubai at: Billionaire Dubai, Gigi Dubai, Bagatelle Dubai, Le Piaf Dubai, Verde Dubai, Raspoutine Dubai, Voyage by Amelia, Pacha ICONS Dubai, CouCou Dubai. Weekly nights: The List at Billionaire Dubai, We Ain’t Saints at Raspoutine Dubai, Decadence at Verde Dubai. Headline nights: Adam Port at Pacha ICONS Dubai (2026-10-31); ANOTR at Pacha ICONS Dubai (2026-11-13); Marco Carola at Pacha ICONS Dubai (2026-11-20); &ME at Pacha ICONS Dubai (2026-12-05); Luke Dean b2b Max Dean at Pacha ICONS Dubai (2026-12-11); PAWSA at Pacha ICONS Dubai (2026-12-31).
Annotations the server declares
- title: What's on
- readOnlyHint: true
- destructiveHint: false
- idempotentHint: true
- openWorldHint: false

Only reads 4Looks things up and changes nothing.Claude Code: allow

booking_statusStatus of a request by reference (RZ-XXXXX) and the guest's phone number: pending (service fee unpaid), confirmed, seated, cancelled.No findings
Why it is in this group
- The name "booking_status" says "status": a word for reading.
Description, as the server wrote it
Status of a request by reference (RZ-XXXXX) and the guest's phone number: pending (service fee unpaid), confirmed, seated, cancelled.
Annotations the server declares
- title: Booking status
- readOnlyHint: true
- destructiveHint: false
- idempotentHint: true
- openWorldHint: false
get_checkoutFetch a UCP checkout session by id.No findings
Why it is in this group
- The name "get_checkout" says "get": a word for reading.
Description, as the server wrote it
Fetch a UCP checkout session by id.
Annotations the server declares
- title: UCP: get checkout
- readOnlyHint: true
- destructiveHint: false
- idempotentHint: true
- openWorldHint: false
list_venuesEvery room Dubai Table books across Dubai: kind, area, which nights are Dubai Table nights, whether an exact table can be chosen, zones with seat and minimum-spend ranges, the plat…Reads private dataNo findings
Why it is in this group
- The name "list_venues" says "list": a word for reading.
What it can reach
- private-dataThe description's first sentence says "table": it reads databases.
Description, as the server wrote it
Every room Dubai Table books across Dubai: kind, area, which nights are Dubai Table nights, whether an exact table can be chosen, zones with seat and minimum-spend ranges, the platform service fee (AED 49.50), booking page and 360° tour links.
Annotations the server declares
- title: List venues
- readOnlyHint: true
- destructiveHint: false
- idempotentHint: true
- openWorldHint: false
show_tablesRender the interactive table picker for a venue and night (ChatGPT / MCP Apps hosts).Reads private dataReads text others writeNo findings
Why it is in this group
- The name "show_tables" says "show": a word for reading.
What it can reach
- private-dataThe name "show_tables" says "show" and "table": it reads databases.
- private-dataThe description's first sentence says "table": it reads databases.
- untrusted-inputThe description's first sentence says "chat": it reads messages, which other people can write.
Description, as the server wrote it
Render the interactive table picker for a venue and night (ChatGPT / MCP Apps hosts). Same table data as the availability list, shown as a visual picker with a form for the guest to request a table and pay the platform service fee. Use for VIP table, bottle-service and dinner-table bookings in Dubai at: Billionaire Dubai, Gigi Dubai, Bagatelle Dubai, Le Piaf Dubai, Verde Dubai, Raspoutine Dubai, Voyage by Amelia, Pacha ICONS Dubai, CouCou Dubai. Weekly nights: The List at Billionaire Dubai, We Ain’t Saints at Raspoutine Dubai, Decadence at Verde Dubai. Headline nights: Adam Port at Pacha ICONS Dubai (2026-10-31); ANOTR at Pacha ICONS Dubai (2026-11-13); Marco Carola at Pacha ICONS Dubai (2026-11-20); &ME at Pacha ICONS Dubai (2026-12-05); Luke Dean b2b Max Dean at Pacha ICONS Dubai (2026-12-11); PAWSA at Pacha ICONS Dubai (2026-12-31).
Annotations the server declares
- title: Show tables
- readOnlyHint: true
- destructiveHint: false
- idempotentHint: true
- openWorldHint: false

This is not a safety rating, and no finding is not a safety guarantee. The groups and findings come from fixed checks of the tool definitions the server returned on the date shown, not from its code or what it does when called. How the checks work.

Exfil surface

Which tools read private data, which read text someone else can write, and which can send data out. One of each is a path a prompt injection can use.

2 paths in this server alone from private data, through text someone else wrote, to a way out. Denying 1 outbound tool breaks every one.

Reads private data2: Reads files, mail, messages, databases, secrets, calendars or repositories.; list_venues
show_tables
Reads text others write1: Brings in text someone else can write: web pages, inbound email, messages, issues and comments.; show_tables
Can send data out1: Can carry data to people or systems: it sends, posts or publishes, or takes a recipient, channel or URL.; request_table

deny to break every path

{
  "permissions": {
    "deny": [
      "mcp__booking__request_table"
    ]
  }
}

Other servers in the same agent add their own tools to these paths. Audit your whole setup to see them together.

Install

Pinned to version 1.0.0. Values in angle brackets are yours to fill in.

claude mcp add --transport http booking https://dubaitable.com/mcp

Run in a terminal.

Claude Code permissions

Allow the reads, ask before a change or a way out, deny the deletes. Paste into .claude/settings.json.

.claude/settings.json

{
  "permissions": {
    "allow": [
      "mcp__booking__list_venues",
      "mcp__booking__show_tables",
      "mcp__booking__booking_status",
      "mcp__booking__get_checkout"
    ],
    "ask": [
      "mcp__booking__whats_on",
      "mcp__booking__check_availability",
      "mcp__booking__request_table",
      "mcp__booking__create_checkout",
      "mcp__booking__update_checkout",
      "mcp__booking__complete_checkout",
      "mcp__booking__desk_contact"
    ],
    "deny": [
      "mcp__booking__cancel_booking",
      "mcp__booking__cancel_checkout"
    ]
  }
}

Tools that only read are allowed, tools that change things ask first, tools that delete or cancel are denied. A read that can send data out (it takes a URL, say) asks first too. It assumes the server is installed as booking. Review it before you use it.

Capability tags behind 3 rules

mcp__booking__list_venues private-data
mcp__booking__show_tables private-data, untrusted-input
mcp__booking__request_table outbound

Keep track

Get told when this server's tools change: a new tool, a new description, a new class.

https://anlyon.dev/servers/com.dubaitable/booking/changes.xml

An Atom feed. Works in any feed reader or Slack's RSS app.

Anlyon alternative

9 of these tools change something. Run those as governed actions.

Declare what an action changes, and Anlyon puts it under a shared limit, binds every approval to the exact request, and grades the outcome. It works on any HTTPS API you can describe as an action.

Anlyon does not run, proxy or govern this MCP server. A tool your own code calls directly is not routed through Anlyon and is not governed by it.

Import an OpenAPI spec →

Compare with other servers for the same product.

Source: MCP Registry. Synced Oct 21, 2026, 17:54 UTC.

For agents: Markdown · JSON · report this listing