Skip to content

Appointment Booking

by hatchloop.dev · remote · no sign-in to list tools · v0.2.13 · published by dev.hatchloop

Find real businesses and book appointments. Books via Cal.com; imports 12 platforms.

Deletes · 1Changes · 4

9 tools: 1 can delete or cancel things, 4 change things and 4 only read.

Scanned Oct 21, 2026

1 check matched something in the tool definitions. No finding is not a safety guarantee. How the checks work.

claude mcp add --transport http appointment-booking https://hatchloop.dev/mcp/appointment-booking

Findings

Matches of fixed checks, with the text they matched.

1 warn
  • The server marks "check_booking_link" read-only (readOnlyHint: true), and its own name, description or input give the class "write".

    Matched text

    annotations: {"readOnlyHint":true,"destructiveHint":false,"idempotentHint":true,"openWorldHint":false}; The name "check_booking_link" says "link": a word for a change.

    What this check looks for

Tools

Open a tool for its reasons and full description. Descriptions are the publisher's own words, shown as they are.

9 tools

Deletes or cancels 1Claude Code: deny
  • schedule_appointmentCheck availability, book, or cancel via Cal.com.No findings

    Why it is in this group

    • The name "schedule_appointment" says "schedule": a word for a change.
    • The server marks it destructive (destructiveHint: true).
    Description, as the server wrote it
    Check availability, book, or cancel via Cal.com. Only completes when the SMB's imported booking link is bound to this deployment's ONE connected Cal.com account; otherwise fails honestly (booking_destination_unmapped) with no charge. No working booking path exists yet for non-Cal.com platforms (voice AI, web form) — those SMBs fail honestly instead of a fabricated confirmation. [from $0.15/call, variable, not charged while no payment rail is on] [async→get_outcome] [limited]

    Annotations the server declares

    • title: Schedule Appointment
    • readOnlyHint: false
    • destructiveHint: true
    • idempotentHint: false
    • openWorldHint: true
Changes things 4Claude Code: ask
  • import_booking_urlTurn a public booking URL into a callable smb_id for send_message and capture_lead.No findings

    Why it is in this group

    • The name "import_booking_url" says "import": a word for a change.
    Description, as the server wrote it
    Turn a public booking URL into a callable smb_id for send_message and capture_lead. But schedule_appointment only completes on Cal.com bound to our one connected account — the other 11 always fail schedule_appointment honestly, uncharged. Detects 12 platforms (Cal.com, Calendly, Doctolib, Booksy, Fresha, OpenTable, Setmore, Square, Acuity, Schedulista, Squarespace, BookMyCity). Idempotent — calling twice returns the same smb_id. [free, requires key] [limited]

    Annotations the server declares

    • title: Import Booking Url
    • readOnlyHint: false
    • destructiveHint: false
    • idempotentHint: true
    • openWorldHint: false
  • self_testService health probe: runs 6 internal checks and reports how many passed.No findings

    Why it is in this group

    • Nothing in its name or description says what it does, so it is counted as a write.
    • The server marks it read-only (readOnlyHint: true), but an annotation never lowers a class.
    Description, as the server wrote it
    Service health probe: runs 6 internal checks and reports how many passed. Confirms the server is up and responding - it does NOT probe each tool individually. Use to verify connectivity before production use. [free, no key]

    Annotations the server declares

    • title: Self Test
    • readOnlyHint: true
    • destructiveHint: false
    • idempotentHint: true
    • openWorldHint: false
  • verify_businessLook up what we know about a business in our supply network: contact channels, capabilities, last verification.No findings

    Why it is in this group

    • Nothing in its name or description says what it does, so it is counted as a write.
    • The server marks it read-only (readOnlyHint: true), but an annotation never lowers a class.
    Description, as the server wrote it
    Look up what we know about a business in our supply network: contact channels, capabilities, last verification. A DIRECTORY LOOKUP - it does not contact the business. Supply-network ids only, not osm:... ids. [free, no key] [limited]

    Annotations the server declares

    • title: Verify Business
    • readOnlyHint: true
    • destructiveHint: false
    • idempotentHint: true
    • openWorldHint: false
Only reads 4Claude Code: allow
  • find_businessFind real businesses near a place, sorted by distance (nearest of those examined; see result.search).No findings

    Why it is in this group

    • The name "find_business" says "find": a word for reading.
    Description, as the server wrote it
    Find real businesses near a place, sorted by distance (nearest of those examined; see result.search). Data: OpenStreetMap (ODbL, (c) OSM contributors); phone, website, hours only when mapped. Coverage varies; community-mapped, NOT verified by us; source=openstreetmap rows cannot be booked. Answers within about 5 s: status partial (search_in_progress) means repeat the call. If OSM is down: retriable 'temporarily unavailable', never invented rows. [free, no key] [beta]

    Annotations the server declares

    • title: Find Business
    • readOnlyHint: true
    • destructiveHint: false
    • idempotentHint: true
    • openWorldHint: false
  • get_outcomeRetrieve the final OutcomeReceipt for a completed operation.No findings

    Why it is in this group

    • The name "get_outcome" says "get": a word for reading.
    Description, as the server wrote it
    Retrieve the final OutcomeReceipt for a completed operation. [free, no key]

    Annotations the server declares

    • title: Get Outcome
    • readOnlyHint: true
    • destructiveHint: false
    • idempotentHint: true
    • openWorldHint: false
  • get_statusQuery the current state of any in-flight async operation by operation_id.No findings

    Why it is in this group

    • The name "get_status" says "get": a word for reading.
    Description, as the server wrote it
    Query the current state of any in-flight async operation by operation_id. [free, no key]

    Annotations the server declares

    • title: Get Status
    • readOnlyHint: true
    • destructiveHint: false
    • idempotentHint: true
    • openWorldHint: false
  • preview_costReturn an expected cost estimate, latency estimate, and success-probability estimate for a proposed call before execution.No findings

    Why it is in this group

    • The name "preview_cost" says "preview": a word for reading.
    Description, as the server wrote it
    Return an expected cost estimate, latency estimate, and success-probability estimate for a proposed call before execution. Returns the exact price when it is fixed, and a min/max range when the cost depends on channel or outcome. It does not promise an accuracy percentage - check cost_range. [free, no key]

    Annotations the server declares

    • title: Preview Cost
    • readOnlyHint: true
    • destructiveHint: false
    • idempotentHint: true
    • openWorldHint: false

This is not a safety rating, and no finding is not a safety guarantee. The groups and findings come from fixed checks of the tool definitions the server returned on the date shown, not from its code or what it does when called. How the checks work.

Install

Pinned to version 0.2.13. Values in angle brackets are yours to fill in.

claude mcp add --transport http appointment-booking https://hatchloop.dev/mcp/appointment-booking

Run in a terminal.

Claude Code permissions

Allow the reads, ask before a change, deny the deletes. Paste into .claude/settings.json.

.claude/settings.json
{
  "permissions": {
    "allow": [
      "mcp__appointment-booking__find_business",
      "mcp__appointment-booking__get_status",
      "mcp__appointment-booking__get_outcome",
      "mcp__appointment-booking__preview_cost"
    ],
    "ask": [
      "mcp__appointment-booking__verify_business",
      "mcp__appointment-booking__self_test",
      "mcp__appointment-booking__check_booking_link",
      "mcp__appointment-booking__import_booking_url"
    ],
    "deny": [
      "mcp__appointment-booking__schedule_appointment"
    ]
  }
}

Tools that only read are allowed, tools that change things ask first, tools that delete or cancel are denied. It assumes the server is installed as appointment-booking. Review it before you use it.