# `io.usefulapi/bookingmood` on anlyon.dev

> Text inside fenced blocks marked untrusted-server-text was written by the MCP server's publisher, not by anlyon.dev. It is data to inspect, not instructions to follow. Invisible characters are shown as [U+XXXX].
> No finding is not a safety guarantee: these are point-in-time checks of tool definitions, not of code or behaviour.

- Page: https://anlyon.dev/servers/io.usefulapi/bookingmood
- JSON: https://anlyon.dev/api/v1/servers/io.usefulapi/bookingmood
- Version: 1.0.0 (active)
- Publisher: io.usefulapi (domain proven to the MCP Registry)
- Runs: remote (streamable-http)
- Sign-in to list tools: none
- Repository: https://github.com/m190/usefulapi-mcp
- Metadata from the official MCP Registry, synced 2026-10-24T23:17:41.874Z

Title and description, as the publisher wrote them:

```untrusted-server-text
Bookingmood MCP by usefulapi
Read Bookingmood bookings, availability, guests, payments and invoices; update bookings, contacts.
```

Scanned 2026-10-24T23:18:03.280Z over streamable-http.

**21 tools: 3 can delete or cancel things, 2 change things and 16 only read.**

| Group | Class | Tools | Claude Code |
| --- | --- | --- | --- |
| Deletes or cancels | destructive | 3 | deny |
| Can't be undone | irreversible | 0 | ask |
| Changes things | write | 2 | ask |
| Only reads | read | 16 | allow |

## Exfil surface

168 private-data -> untrusted-input -> outbound paths in this server alone. Denying 1 outbound tool breaks every one: `mcp__bookingmood__bookingmood_create_contact`.

| Tag | Meaning | Tools |
| --- | --- | --- |
| private-data | Reads files, mail, messages, databases, secrets, calendars or repositories. | `mcp__bookingmood__bookingmood_get_booking` `mcp__bookingmood__bookingmood_get_contact` `mcp__bookingmood__bookingmood_get_organization` `mcp__bookingmood__bookingmood_list_calendar_events` `mcp__bookingmood__bookingmood_list_contacts` `mcp__bookingmood__bookingmood_list_invoices` `mcp__bookingmood__bookingmood_list_messages` `mcp__bookingmood__bookingmood_list_tasks` |
| untrusted-input | Brings in text someone else can write: web pages, inbound email, messages, issues and comments. | `mcp__bookingmood__bookingmood_check_availability` `mcp__bookingmood__bookingmood_create_contact` `mcp__bookingmood__bookingmood_get_booking` `mcp__bookingmood__bookingmood_get_contact` `mcp__bookingmood__bookingmood_get_organization` `mcp__bookingmood__bookingmood_get_product` `mcp__bookingmood__bookingmood_list_bookings` `mcp__bookingmood__bookingmood_list_calendar_events` `mcp__bookingmood__bookingmood_list_contacts` `mcp__bookingmood__bookingmood_list_coupons` `mcp__bookingmood__bookingmood_list_invoices` `mcp__bookingmood__bookingmood_list_line_items` `mcp__bookingmood__bookingmood_list_messages` `mcp__bookingmood__bookingmood_list_payments` `mcp__bookingmood__bookingmood_list_products` `mcp__bookingmood__bookingmood_list_services` `mcp__bookingmood__bookingmood_list_tasks` `mcp__bookingmood__bookingmood_search_products` `mcp__bookingmood__bookingmood_set_event_status` `mcp__bookingmood__bookingmood_update_contact` `mcp__bookingmood__bookingmood_update_event_notes` |
| outbound | Can carry data to people or systems: it sends, posts or publishes, or takes a recipient, channel or URL. | `mcp__bookingmood__bookingmood_create_contact` |

| Private data | Untrusted input | Outbound |
| --- | --- | --- |
| `mcp__bookingmood__bookingmood_get_booking` | `mcp__bookingmood__bookingmood_check_availability` | `mcp__bookingmood__bookingmood_create_contact` |
| `mcp__bookingmood__bookingmood_get_booking` | `mcp__bookingmood__bookingmood_create_contact` | `mcp__bookingmood__bookingmood_create_contact` |
| `mcp__bookingmood__bookingmood_get_booking` | `mcp__bookingmood__bookingmood_get_booking` | `mcp__bookingmood__bookingmood_create_contact` |
| `mcp__bookingmood__bookingmood_get_booking` | `mcp__bookingmood__bookingmood_get_contact` | `mcp__bookingmood__bookingmood_create_contact` |
| `mcp__bookingmood__bookingmood_get_booking` | `mcp__bookingmood__bookingmood_get_organization` | `mcp__bookingmood__bookingmood_create_contact` |
| `mcp__bookingmood__bookingmood_get_booking` | `mcp__bookingmood__bookingmood_get_product` | `mcp__bookingmood__bookingmood_create_contact` |
| `mcp__bookingmood__bookingmood_get_booking` | `mcp__bookingmood__bookingmood_list_bookings` | `mcp__bookingmood__bookingmood_create_contact` |
| `mcp__bookingmood__bookingmood_get_booking` | `mcp__bookingmood__bookingmood_list_calendar_events` | `mcp__bookingmood__bookingmood_create_contact` |
| `mcp__bookingmood__bookingmood_get_booking` | `mcp__bookingmood__bookingmood_list_contacts` | `mcp__bookingmood__bookingmood_create_contact` |
| `mcp__bookingmood__bookingmood_get_booking` | `mcp__bookingmood__bookingmood_list_coupons` | `mcp__bookingmood__bookingmood_create_contact` |
| `mcp__bookingmood__bookingmood_get_booking` | `mcp__bookingmood__bookingmood_list_invoices` | `mcp__bookingmood__bookingmood_create_contact` |
| `mcp__bookingmood__bookingmood_get_booking` | `mcp__bookingmood__bookingmood_list_line_items` | `mcp__bookingmood__bookingmood_create_contact` |
| `mcp__bookingmood__bookingmood_get_booking` | `mcp__bookingmood__bookingmood_list_messages` | `mcp__bookingmood__bookingmood_create_contact` |
| `mcp__bookingmood__bookingmood_get_booking` | `mcp__bookingmood__bookingmood_list_payments` | `mcp__bookingmood__bookingmood_create_contact` |
| `mcp__bookingmood__bookingmood_get_booking` | `mcp__bookingmood__bookingmood_list_products` | `mcp__bookingmood__bookingmood_create_contact` |
| `mcp__bookingmood__bookingmood_get_booking` | `mcp__bookingmood__bookingmood_list_services` | `mcp__bookingmood__bookingmood_create_contact` |
| `mcp__bookingmood__bookingmood_get_booking` | `mcp__bookingmood__bookingmood_list_tasks` | `mcp__bookingmood__bookingmood_create_contact` |
| `mcp__bookingmood__bookingmood_get_booking` | `mcp__bookingmood__bookingmood_search_products` | `mcp__bookingmood__bookingmood_create_contact` |
| `mcp__bookingmood__bookingmood_get_booking` | `mcp__bookingmood__bookingmood_set_event_status` | `mcp__bookingmood__bookingmood_create_contact` |
| `mcp__bookingmood__bookingmood_get_booking` | `mcp__bookingmood__bookingmood_update_contact` | `mcp__bookingmood__bookingmood_create_contact` |
| `mcp__bookingmood__bookingmood_get_booking` | `mcp__bookingmood__bookingmood_update_event_notes` | `mcp__bookingmood__bookingmood_create_contact` |
| `mcp__bookingmood__bookingmood_get_contact` | `mcp__bookingmood__bookingmood_check_availability` | `mcp__bookingmood__bookingmood_create_contact` |
| `mcp__bookingmood__bookingmood_get_contact` | `mcp__bookingmood__bookingmood_create_contact` | `mcp__bookingmood__bookingmood_create_contact` |
| `mcp__bookingmood__bookingmood_get_contact` | `mcp__bookingmood__bookingmood_get_booking` | `mcp__bookingmood__bookingmood_create_contact` |
| `mcp__bookingmood__bookingmood_get_contact` | `mcp__bookingmood__bookingmood_get_contact` | `mcp__bookingmood__bookingmood_create_contact` |
| `mcp__bookingmood__bookingmood_get_contact` | `mcp__bookingmood__bookingmood_get_organization` | `mcp__bookingmood__bookingmood_create_contact` |
| `mcp__bookingmood__bookingmood_get_contact` | `mcp__bookingmood__bookingmood_get_product` | `mcp__bookingmood__bookingmood_create_contact` |
| `mcp__bookingmood__bookingmood_get_contact` | `mcp__bookingmood__bookingmood_list_bookings` | `mcp__bookingmood__bookingmood_create_contact` |
| `mcp__bookingmood__bookingmood_get_contact` | `mcp__bookingmood__bookingmood_list_calendar_events` | `mcp__bookingmood__bookingmood_create_contact` |
| `mcp__bookingmood__bookingmood_get_contact` | `mcp__bookingmood__bookingmood_list_contacts` | `mcp__bookingmood__bookingmood_create_contact` |
| `mcp__bookingmood__bookingmood_get_contact` | `mcp__bookingmood__bookingmood_list_coupons` | `mcp__bookingmood__bookingmood_create_contact` |
| `mcp__bookingmood__bookingmood_get_contact` | `mcp__bookingmood__bookingmood_list_invoices` | `mcp__bookingmood__bookingmood_create_contact` |
| `mcp__bookingmood__bookingmood_get_contact` | `mcp__bookingmood__bookingmood_list_line_items` | `mcp__bookingmood__bookingmood_create_contact` |
| `mcp__bookingmood__bookingmood_get_contact` | `mcp__bookingmood__bookingmood_list_messages` | `mcp__bookingmood__bookingmood_create_contact` |
| `mcp__bookingmood__bookingmood_get_contact` | `mcp__bookingmood__bookingmood_list_payments` | `mcp__bookingmood__bookingmood_create_contact` |
| `mcp__bookingmood__bookingmood_get_contact` | `mcp__bookingmood__bookingmood_list_products` | `mcp__bookingmood__bookingmood_create_contact` |
| `mcp__bookingmood__bookingmood_get_contact` | `mcp__bookingmood__bookingmood_list_services` | `mcp__bookingmood__bookingmood_create_contact` |
| `mcp__bookingmood__bookingmood_get_contact` | `mcp__bookingmood__bookingmood_list_tasks` | `mcp__bookingmood__bookingmood_create_contact` |
| `mcp__bookingmood__bookingmood_get_contact` | `mcp__bookingmood__bookingmood_search_products` | `mcp__bookingmood__bookingmood_create_contact` |
| `mcp__bookingmood__bookingmood_get_contact` | `mcp__bookingmood__bookingmood_set_event_status` | `mcp__bookingmood__bookingmood_create_contact` |
| `mcp__bookingmood__bookingmood_get_contact` | `mcp__bookingmood__bookingmood_update_contact` | `mcp__bookingmood__bookingmood_create_contact` |
| `mcp__bookingmood__bookingmood_get_contact` | `mcp__bookingmood__bookingmood_update_event_notes` | `mcp__bookingmood__bookingmood_create_contact` |
| `mcp__bookingmood__bookingmood_get_organization` | `mcp__bookingmood__bookingmood_check_availability` | `mcp__bookingmood__bookingmood_create_contact` |
| `mcp__bookingmood__bookingmood_get_organization` | `mcp__bookingmood__bookingmood_create_contact` | `mcp__bookingmood__bookingmood_create_contact` |
| `mcp__bookingmood__bookingmood_get_organization` | `mcp__bookingmood__bookingmood_get_booking` | `mcp__bookingmood__bookingmood_create_contact` |
| `mcp__bookingmood__bookingmood_get_organization` | `mcp__bookingmood__bookingmood_get_contact` | `mcp__bookingmood__bookingmood_create_contact` |
| `mcp__bookingmood__bookingmood_get_organization` | `mcp__bookingmood__bookingmood_get_organization` | `mcp__bookingmood__bookingmood_create_contact` |
| `mcp__bookingmood__bookingmood_get_organization` | `mcp__bookingmood__bookingmood_get_product` | `mcp__bookingmood__bookingmood_create_contact` |
| `mcp__bookingmood__bookingmood_get_organization` | `mcp__bookingmood__bookingmood_list_bookings` | `mcp__bookingmood__bookingmood_create_contact` |
| `mcp__bookingmood__bookingmood_get_organization` | `mcp__bookingmood__bookingmood_list_calendar_events` | `mcp__bookingmood__bookingmood_create_contact` |

And 118 more: every combination of one tool from each row of the table above.

## Findings

No check matched anything in these tool definitions.


## Deletes or cancels (3)

Removes, cancels or revokes something. Claude Code: deny.

### `bookingmood_set_event_status`

- The name "bookingmood_set_event_status" says "set": a word for a change.
- The server marks it destructive (destructiveHint: true).
- Tag untrusted-input: The server marks it openWorldHint: true: it reaches things outside the server's own data.

Description, as the server wrote it:

```untrusted-server-text
WRITE: change the status of ONE calendar event to CONFIRMED, TENTATIVE or CANCELLED. This changes what the calendar shows as available and can trigger Bookingmood's own automations for the booking (guest e-mails, tasks, payment reminders), so confirm with the user before cancelling or confirming. PATCH /calendar_events?id=eq.{id}.
```

### `bookingmood_update_contact`

- The name "bookingmood_update_contact" says "update": a word for a change.
- The server marks it destructive (destructiveHint: true).
- Tag untrusted-input: The server marks it openWorldHint: true: it reaches things outside the server's own data.

Description, as the server wrote it:

```untrusted-server-text
WRITE: change fields of ONE existing contact (only the fields you pass are changed; others stay). No message is sent to the contact. PATCH /contacts?id=eq.{id}.
```

### `bookingmood_update_event_notes`

- The name "bookingmood_update_event_notes" says "update": a word for a change.
- The server marks it destructive (destructiveHint: true).
- Tag untrusted-input: The server marks it openWorldHint: true: it reaches things outside the server's own data.

Description, as the server wrote it:

```untrusted-server-text
WRITE: replace the internal notes of ONE calendar event (the whole notes text is overwritten, so include the existing text if you want to keep it - read it first with bookingmood_list_calendar_events). Notes are internal; no guest is notified. PATCH /calendar_events?id=eq.{id}.
```

## Changes things (2)

Creates or changes something that can be changed back. Claude Code: ask.

### `bookingmood_check_availability`

- Nothing in its name or description says what it does, so it is counted as a write.
- The server marks it read-only (readOnlyHint: true), but an annotation never lowers a class.
- Tag untrusted-input: The server marks it openWorldHint: true: it reaches things outside the server's own data.

Description, as the server wrote it:

```untrusted-server-text
Availability calendar of up to 5 products: per product a list of intervals {start, end, status} with status available, tentative, unavailable, booked or reserved. One request per product. GET /availability?product_id={id}.
```

### `bookingmood_create_contact`

- The name "bookingmood_create_contact" says "create": a word for a change.
- Tag untrusted-input: The server marks it openWorldHint: true: it reaches things outside the server's own data.
- Tag outbound: The input takes a destination (input.phone): what the tool writes goes there.

Description, as the server wrote it:

```untrusted-server-text
WRITE: create ONE new contact (guest/customer) in Bookingmood. Not idempotent: calling it twice creates two contacts, so search with bookingmood_list_contacts first. No message is sent to the contact. POST /contacts.
```

## Only reads (16)

Looks things up and changes nothing. Claude Code: allow.

### `bookingmood_get_booking`

- The name "bookingmood_get_booking" says "get": a word for reading.
- Tag private-data: The description's first sentence says "calendar": it reads calendars.
- Tag untrusted-input: The server marks it openWorldHint: true: it reaches things outside the server's own data.

Description, as the server wrote it:

```untrusted-server-text
One booking with everything attached: its calendar events (dates, product, status, occupancy, notes), line items, payments, invoices and the guest contacts linked to it. Five or six read requests. The guest contacts come from the booking-contact link table; if that lookup fails the reply says so instead of failing. GET /bookings, /calendar_events, /line_items, /payments, /invoices, /contact_bookings, /contacts.
```

### `bookingmood_get_contact`

- The name "bookingmood_get_contact" says "get": a word for reading.
- Tag private-data: The name "bookingmood_get_contact" says "get" and "contact": it reads contacts. The description's first sentence says "contact": it reads contacts.
- Tag untrusted-input: The server marks it openWorldHint: true: it reaches things outside the server's own data.

Description, as the server wrote it:

```untrusted-server-text
One contact by id. GET /contacts?id=eq.{id}.
```

### `bookingmood_get_organization`

- The name "bookingmood_get_organization" says "get": a word for reading.
- Tag private-data: The description's first sentence says "contact": it reads contacts.
- Tag untrusted-input: The server marks it openWorldHint: true: it reaches things outside the server's own data.

Description, as the server wrote it:

```untrusted-server-text
The Bookingmood organization this API key belongs to: name, company, plan (tier, subscription type, expiry), languages, country, VAT number, custom domain and contact details. Payment-provider ids and secrets are not returned. GET /organizations.
```

### `bookingmood_get_product`

- The name "bookingmood_get_product" says "get": a word for reading.
- Tag untrusted-input: The server marks it openWorldHint: true: it reaches things outside the server's own data.

Description, as the server wrote it:

```untrusted-server-text
One product by id with its capacities (guest-group min/max limits) embedded. GET /products?id=eq.{id}&select=*,capacities(*).
```

### `bookingmood_list_bookings`

- The name "bookingmood_list_bookings" says "list": a word for reading.
- Tag untrusted-input: The server marks it openWorldHint: true: it reaches things outside the server's own data.

Description, as the server wrote it:

```untrusted-server-text
List bookings, newest first: reference, method (request or book), currency, confirmed_at (null = not confirmed yet), created_at. A booking's dates and guests are on its calendar events (bookingmood_list_calendar_events) and contacts. Filter by creation date, confirmation state or reference text. The guest access secret is never returned. GET /bookings.
```

### `bookingmood_list_calendar_events`

- The name "bookingmood_list_calendar_events" says "list": a word for reading.
- Tag private-data: The name "bookingmood_list_calendar_events" says "list" and "calendar": it reads calendars. The description's first sentence says "list" and "calendar": it reads calendars.
- Tag untrusted-input: The server marks it openWorldHint: true: it reaches things outside the server's own data.

Description, as the server wrote it:

```untrusted-server-text
List calendar events: bookings (type 'booking'), blocked periods and notes, with product_id, booking_id, start_date, end_date, status (TENTATIVE, CONFIRMED, CANCELLED), occupancy, title and notes. Use the date filters for arrivals/departures (e.g. start_date_from = start_date_to = today lists today's arrivals) or active_on for who is in the property on a day. Ordered by start date. GET /calendar_events.
```

### `bookingmood_list_contacts`

- The name "bookingmood_list_contacts" says "list": a word for reading.
- Tag private-data: The name "bookingmood_list_contacts" says "list" and "contact": it reads contacts. The description's first sentence says "list" and "contact": it reads contacts.
- Tag untrusted-input: The server marks it openWorldHint: true: it reaches things outside the server's own data. The description's first sentence says "list" and "email": it reads inbound email, which other people can write.

Description, as the server wrote it:

```untrusted-server-text
List contacts (guests and customers): name, email, phone, company, address, language, notes. Search by name, email or company (case-insensitive, contains). Newest first. GET /contacts.
```

### `bookingmood_list_coupons`

- The name "bookingmood_list_coupons" says "list": a word for reading.
- Tag untrusted-input: The server marks it openWorldHint: true: it reaches things outside the server's own data.

Description, as the server wrote it:

```untrusted-server-text
List discount coupons: code, description, definition, quota, scope (global, product, service, rent), stackable. Deleted coupons are left out. GET /coupons.
```

### `bookingmood_list_invoices`

- The name "bookingmood_list_invoices" says "list": a word for reading.
- Tag private-data: The description's first sentence says "list" and "file": it reads files.
- Tag untrusted-input: The server marks it openWorldHint: true: it reaches things outside the server's own data. The description's first sentence says "list" and "url": it reads web pages, which anyone can write.

Description, as the server wrote it:

```untrusted-server-text
List invoices: reference, booking_id, attachment (a custom uploaded file URL, if any), created_at. Filter by booking or creation date. Newest first. GET /invoices.
```

### `bookingmood_list_line_items`

- The name "bookingmood_list_line_items" says "list": a word for reading.
- Tag untrusted-input: The server marks it openWorldHint: true: it reaches things outside the server's own data.

Description, as the server wrote it:

```untrusted-server-text
List invoice/booking line items: name (per language), amount and quantity (integers; the API reference does not state the unit), item_type (rent, fee...), fee_type (fee or deposit), booking_id, event_id, invoice_id. GET /line_items.
```

### `bookingmood_list_messages`

- The name "bookingmood_list_messages" says "list": a word for reading.
- Tag private-data: The name "bookingmood_list_messages" says "list" and "message": it reads messages. The description's first sentence says "list" and "mail": it reads mail.
- Tag untrusted-input: The server marks it openWorldHint: true: it reaches things outside the server's own data. The name "bookingmood_list_messages" says "list" and "message": it reads messages, which other people can write. The description's first sentence says "list" and "mail": it reads inbound email, which other people can write.

Description, as the server wrote it:

```untrusted-server-text
List the e-mails and SMS Bookingmood sent or scheduled to guests: subject, body, type (email or sms), status (sent, manually-scheduled, scheduled-around-arrival, scheduled-around-departure), send_at, booking_id. The rendered HTML is not returned. Latest first. GET /messages.
```

### `bookingmood_list_payments`

- The name "bookingmood_list_payments" says "list": a word for reading.
- Tag untrusted-input: The server marks it openWorldHint: true: it reaches things outside the server's own data.

Description, as the server wrote it:

```untrusted-server-text
List payments (deposits, balances, offline payments): booking_id, invoice_id, amount and paid (integers; the API reference does not state the unit, normally the smallest currency unit), currency, due_at, completed_at (null = not paid), status, offline. Filter to unpaid payments, a booking or a due date. Ordered by due date, latest first. GET /payments.
```

### `bookingmood_list_products`

- The name "bookingmood_list_products" says "list": a word for reading.
- Tag untrusted-input: The server marks it openWorldHint: true: it reaches things outside the server's own data.

Description, as the server wrote it:

```untrusted-server-text
List the rentable products (apartments, rooms, boats, bikes...) with name, currency, timezone, rent period (daily/nightly), booking interaction, fee and deposit. Names and descriptions are objects keyed by language ('default', 'nl-NL', ...). Images are not returned. GET /products.
```

### `bookingmood_list_services`

- The name "bookingmood_list_services" says "list": a word for reading.
- Tag untrusted-input: The server marks it openWorldHint: true: it reaches things outside the server's own data.

Description, as the server wrote it:

```untrusted-server-text
List services: the extras, fees and form fields guests can add to a booking, with label, type, fee, deposit and description. GET /services.
```

### `bookingmood_list_tasks`

- The name "bookingmood_list_tasks" says "list": a word for reading.
- Tag private-data: The description's first sentence says "list" and "calendar": it reads calendars. The input names a calendar (input.calendar_event_id), and the tool reads: it reads calendars.
- Tag untrusted-input: The server marks it openWorldHint: true: it reaches things outside the server's own data.

Description, as the server wrote it:

```untrusted-server-text
List housekeeping/operations tasks attached to calendar events: label, due_at, completed_at (null = open), schedule (manual, arrival, departure), calendar_event_id. Filter to open tasks or a due-date window. Earliest due first. GET /tasks.
```

### `bookingmood_search_products`

- The name "bookingmood_search_products" says "search": a word for reading.
- Tag untrusted-input: The server marks it openWorldHint: true: it reaches things outside the server's own data.

Description, as the server wrote it:

```untrusted-server-text
Which products can be booked for a stay: for each product whether it matches the dates, guest numbers and options, its availability and a price range {min, max}. Read-only (a search; nothing is booked). occupancy maps a capacity-group id (from bookingmood_get_product capacities) to a number of guests. POST /search.
```

## Claude Code permissions

For `.claude/settings.json`, assuming the server is installed as `bookingmood`:

```json
{
  "permissions": {
    "allow": [
      "mcp__bookingmood__bookingmood_get_organization",
      "mcp__bookingmood__bookingmood_list_products",
      "mcp__bookingmood__bookingmood_get_product",
      "mcp__bookingmood__bookingmood_list_bookings",
      "mcp__bookingmood__bookingmood_get_booking",
      "mcp__bookingmood__bookingmood_list_calendar_events",
      "mcp__bookingmood__bookingmood_search_products",
      "mcp__bookingmood__bookingmood_list_contacts",
      "mcp__bookingmood__bookingmood_get_contact",
      "mcp__bookingmood__bookingmood_list_payments",
      "mcp__bookingmood__bookingmood_list_invoices",
      "mcp__bookingmood__bookingmood_list_line_items",
      "mcp__bookingmood__bookingmood_list_coupons",
      "mcp__bookingmood__bookingmood_list_services",
      "mcp__bookingmood__bookingmood_list_tasks",
      "mcp__bookingmood__bookingmood_list_messages"
    ],
    "ask": [
      "mcp__bookingmood__bookingmood_check_availability",
      "mcp__bookingmood__bookingmood_create_contact"
    ],
    "deny": [
      "mcp__bookingmood__bookingmood_update_event_notes",
      "mcp__bookingmood__bookingmood_set_event_status",
      "mcp__bookingmood__bookingmood_update_contact"
    ]
  }
}
```

Capability tags behind the rules (a read tagged outbound is asked about):

- `mcp__bookingmood__bookingmood_get_organization`: private-data, untrusted-input
- `mcp__bookingmood__bookingmood_list_products`: untrusted-input
- `mcp__bookingmood__bookingmood_get_product`: untrusted-input
- `mcp__bookingmood__bookingmood_list_bookings`: untrusted-input
- `mcp__bookingmood__bookingmood_get_booking`: private-data, untrusted-input
- `mcp__bookingmood__bookingmood_list_calendar_events`: private-data, untrusted-input
- `mcp__bookingmood__bookingmood_check_availability`: untrusted-input
- `mcp__bookingmood__bookingmood_search_products`: untrusted-input
- `mcp__bookingmood__bookingmood_list_contacts`: private-data, untrusted-input
- `mcp__bookingmood__bookingmood_get_contact`: private-data, untrusted-input
- `mcp__bookingmood__bookingmood_list_payments`: untrusted-input
- `mcp__bookingmood__bookingmood_list_invoices`: private-data, untrusted-input
- `mcp__bookingmood__bookingmood_list_line_items`: untrusted-input
- `mcp__bookingmood__bookingmood_list_coupons`: untrusted-input
- `mcp__bookingmood__bookingmood_list_services`: untrusted-input
- `mcp__bookingmood__bookingmood_list_tasks`: private-data, untrusted-input
- `mcp__bookingmood__bookingmood_list_messages`: private-data, untrusted-input
- `mcp__bookingmood__bookingmood_update_event_notes`: untrusted-input
- `mcp__bookingmood__bookingmood_set_event_status`: untrusted-input
- `mcp__bookingmood__bookingmood_create_contact`: untrusted-input, outbound
- `mcp__bookingmood__bookingmood_update_contact`: untrusted-input