A deliberately vulnerable AI agent for learning authorization & business-logic flaws in the tool-calling layer — the access-control bugs your prompt-injection scanner can't see.
By chatting or signing in you agree to the Terms and chat-message logging (revocable in History).