Skip to content
Harborby Signalry
Tech / digitalBefore go-live

Job brief

Let an agent act without a master key

How and who for the hotel job—verified when attested.

When someone wants to ‘just connect the agent to the PMS,’ I want a scope I can draw so it can draft a date change without posting a folio or seeing every card.

Usable on this screen

Scoped brief

Write the modification types. Queue, do not post. Tokenize cards. Folio Watch for drift. Clerkshift-shaped agents draft. Harbor treats silent auto-post, auto-close, and auto-setpoint as listing fails. The diagram lives next to the inventory-owner diagram.

Outcome
A written scope: what the agent can read, what it can draft, who posts, and a hard no on silent money or inventory writes.
Catalog budget band
$4–15k scope + the agent. A worksheet range, not a quote.
Catalog timeline
2–6 weeks. Not a promise.
  1. Step 1

    List read, draft, and post separately

    Read dates. Draft a change. Post is a named clerk. If those three collapse into one API key, stop.

  2. Step 2

    Keep money and inventory out of write

    No folio post. No inventory write. No card PAN. Folio Watch alerts; it does not fix.

  3. Step 3

    Expire the setup key

    A temporary admin that lasts a quarter is a master key. Calendar the expiry.

  4. Step 4

    Publish the error rate

    Wrong date, wrong rate. Weekly. If the vendor will not show it, they are not the vendor.

Provider shortlist

  1. Agent

    Clerkshift Agent

    Reservation modifications

    Catalog score 8. A post-job shape, not a verification. Stable id clerkshift.

  2. Agent

    Folio Watch Agent

    Inventory & card-flow watch

    Catalog score 8.4. A post-job shape, not a verification. Stable id folio-watch.

  3. People

    Folio Security Advisors

    PCI & hotel cyber after flag change

    Catalog score 8.7. A post-job shape, not a verification. Stable id folio-pci.

  4. Software· demo

    Northline PMS

    Property management system

    Catalog score 8. A post-job shape, not a verification. Stable id northline-pms.

Leave a record

The next hotel starts from what you leave

Harbor by Signalry stays hotels only. A description, a claim, and a reported result each leave a stable id behind. Nothing here is a price, a customer, or a verification.

  • Buyer

    Describe your job

    No account. Harbor by Signalry opens the closest catalog brief, when not to buy, and a shortlist. A weak sentence stays on the catalog.

    Open a brief
  • Supplier

    Join as a supplier

    Company, jobs served, regions, and a hotel reference. The packet is queued as unverified pending. The form cannot mark it verified.

    Start a claim
  • Hotel

    Record a result

    A metric, before and after, and the dates. It is shown as reported until a person checks the evidence. Verified Outcome is not insurance.

    Record a result

AdviceIf the agent can post a folio, it is not scoped. It is staff you cannot fire at 2 a.m.

VerifiedRivermark: 73% drafted, 100% human-posted, auto-post off.

Situation

What is actually on fire

An agent wants admin ‘just for setup’ and never gives it back. Night-audit login is shared. Scope is a slogan.

Approaches

Two or three paths — with the give

One job, one property, one expiry

When. You can name what the agent must never do

You give. Slower setup

Shared closer login

When. You want speed

You give. Integrity fail — Harbor will not rank this path

Hold and list every login that can post a folio

When. You cannot name who has the master key

You give. A week of access archaeology

Who to involve

  • · Tech lead
  • · GM
  • · Night audit
  • · Vendor / agent owner

First 7 days

YAML-shaped: day / theme / tasks / owner / risk / exit. Advice until a case is verified.

  1. day: 1

    Write the fail in one sentence

    • · Write the fail in one sentence. Job: Let an agent act without a master key.
    owner:
    Hotel tech lead
    risk:
    The exit is not written down
    exit:
    A note the next shift can open
  2. day: 2

    Pull the last 7 days of the live number

    • · Pull the last 7 days of the live number. If it is missing, that absence is the finding.
    owner:
    Hotel tech lead
    risk:
    The exit is not written down
    exit:
    A note the next shift can open
  3. day: 3

    Name who owns the workaround today (desk,

    • · Name who owns the workaround today (desk, HK, night audit, owner).
    owner:
    Hotel tech lead
    risk:
    The exit is not written down
    exit:
    A note the next shift can open
  4. day: 4

    Walk one peak hour

    • · Walk one peak hour. Write what the system claims vs what the floor did.
    owner:
    Hotel tech lead
    risk:
    The exit is not written down
    exit:
    A note the next shift can open
  5. day: 5

    Ask vendors the worksheet questions

    • · Ask vendors the worksheet questions. Discard anyone who cannot answer with a caveat.
    owner:
    Hotel tech lead
    risk:
    The exit is not written down
    exit:
    A note the next shift can open
  6. day: 6

    Pick one approach

    • · Pick one approach. Write when-not-to-buy on the same page.
    owner:
    Hotel tech lead
    risk:
    The exit is not written down
    exit:
    A note the next shift can open
  7. day: 7

    Run the smallest test that would change Mo

    • · Run the smallest test that would change Monday. No annual contract yet.
    owner:
    Hotel tech lead
    risk:
    The exit is not written down
    exit:
    A note the next shift can open

Decision worksheet

Questions, red flags, bands

Take this to a vendor call. Budget bands are Advice — a Harbor shape, not a quote.

Ask the vendor

  1. 1. Who types the status / number — a person, or your product?
  2. 2. What would have happened anyway in 90 days without you?
  3. 3. Show a property of this size and stack. Demo-labeled categories do not count as proof.
  4. 4. What can your agent never do (folio post, mark clean, change a rate)?
  5. 5. What is the kill-switch if guest comments move?

Red flags

  • · Admin just for setup.
  • · No expiry.
  • · Agent that auto-posts a folio.
  • · Shared night-audit password.

When not to buy. Any agent that requires admin on the PMS ‘just for setup’ and never gives it back.

Do it in-house

Time and a named owner. No vendor. Use the 7-day plan first.

$4–15k scope + the agent

Typical Harbor band for this job — advice, not a quote.

Full program

People + system + 90-day proof. Only if the 7-day plan already failed.

Vendor checklist

Score the call. Keep it on this browser.

Weighted questions — yes/no, scale, or text. Must-pass ids persist on this browser. Pass threshold 70. A no on a must-pass is a walk-away — not a maybe.

Brand
Stack shape — not a partnership
  1. property context · weight 2 · must pass

    Can they name your key count and whether you are independent, soft-brand, or major — without a discovery theater?

  2. property context · weight 2 · must pass

    Do they treat your PMS as a shape (Opera-class / Mews-class / Cloudbeds-class) — not a fake partnership slide?

  3. control · weight 3 · must pass

    Who types the status / number — a person, or your product?

  4. vendor · weight 2

    What would have happened anyway in 90 days without you?

  5. vendor · weight 2

    Show a property of this size and stack. Demo-labeled categories do not count as proof.

  6. vendor · weight 2

    What can your agent never do (folio post, mark clean, change a rate)?

  7. vendor · weight 2

    What is the kill-switch if guest comments move?

Does not clear

0 / 100

must_pass: scoped-agent-access-ctx-rooms, scoped-agent-access-ctx-stack, scoped-agent-access-q1

A must-pass failed. Walk away.

How

The brief

Write the modification types. Queue, do not post. Tokenize cards. Folio Watch for drift. Clerkshift-shaped agents draft. Harbor treats silent auto-post, auto-close, and auto-setpoint as listing fails. The diagram lives next to the inventory-owner diagram.

  1. Step 1

    List read, draft, and post separately

    Read dates. Draft a change. Post is a named clerk. If those three collapse into one API key, stop.

  2. Step 2

    Keep money and inventory out of write

    No folio post. No inventory write. No card PAN. Folio Watch alerts; it does not fix.

  3. Step 3

    Expire the setup key

    A temporary admin that lasts a quarter is a master key. Calendar the expiry.

  4. Step 4

    Publish the error rate

    Wrong date, wrong rate. Weekly. If the vendor will not show it, they are not the vendor.

Tradeoffs

  1. Draft-only with a named poster

    You get. Speed you can defend

    You give. A clerk still in the loop

  2. Master key for convenience

    You get. A faster demo

    You give. A Saturday you cannot unwind

Pitfalls

  • · Admin ‘just for onboarding.’
  • · An agent that talks like a concierge and writes like a clerk.
  • · No rollback for a bad batch of mods.

Success criteria

  • · Written read/draft/post diagram.
  • · 100% human-posted in month one.
  • · Setup admin expired on a calendar.

Who

Ranked for this job

Rank is post-job score, then listed order. Not for sale. Software marked demo is an archetype.

Agencies & contractors

Systems

AI agents

Loading the compare table…

Compare

When to pick whom

People do the work beside the desk. Software is a system — demo-labeled when it is a category shape. Agents draft; they do not post money or mark a room clean.

ProviderKindScoreFeePick whenWalk away when
Folio Security AdvisorsPeople
8.7
$18–40k audit + remediation planA flag change, a PMS change, or a real card incident.Enterprises that already have a hotel-fluent CISO bench.
Northline PMSSoftware· demo
8.0
Demo · $8–14 / room / monthIndependents replacing a brittle on-prem PMS.Enterprise flags that need a brand-mandated stack.
Scope GateSoftware
8.3
$240–$480 / month + setupTech leads who want agents without giving away the kingdom.Hotels still on a PMS with no API.
Clerkshift AgentAgent
8.0
$0.40–0.90 / handled request + monthly floorDesks drowning in date-change email.Hotels that want an unmanned reservations office.
Folio Watch AgentAgent
8.4
$299–699 / monthTech leads mid-cutover or mid-flag-change.Hotels that want an agent to quietly 'handle' money.

Open graph

Hotels on this job

Evidence

Peer case studies

Nearby jobs