ROAST.
a coffee shop an AI agent can use, and misuse
WebMCP: checking…

An AI agent can drive this shop directly through WebMCP. Pick a consent model on the right and press Ask the agent. Watch what it can do with no consent step, a naive one, and a poisoned one, then the handshake that cannot be fooled. Nothing here is real: no payment, no backend, the shop resets on reload. More at crowley.nl.

Shop

Cart

    Total $0

    Shipping to

    Account

    The handshake

    What was shown vs what ran