# Let an agent act without a master key

Harbor by Signalry · hotel job `scoped-agent-access`
https://harbor.signalry.ai/jobs/scoped-agent-access

How and who for the hotel job—verified when attested. Advice unless labeled verified. This brief is a worksheet, not an appraisal and not a quote.

## The job

When someone wants to ‘just connect the agent to the PMS,’ I want a scope I can draw so it can draft a date change without posting a folio or seeing every card.

**Outcome the catalog names:** A written scope: what the agent can read, what it can draft, who posts, and a hard no on silent money or inventory writes.

**Desk:** tech
**Urgency on the catalog:** Before go-live
**Typical budget band (catalog, not a quote):** $4–15k scope + the agent
**Typical timeline (catalog, not a promise):** 2–6 weeks

## Scoped brief

Write the modification types. Queue, do not post. Tokenize cards. Folio Watch for drift. Clerkshift-shaped agents draft. Harbor treats silent auto-post, auto-close, and auto-setpoint as listing fails. The diagram lives next to the inventory-owner diagram.

1. **List read, draft, and post separately.** Read dates. Draft a change. Post is a named clerk. If those three collapse into one API key, stop.
2. **Keep money and inventory out of write.** No folio post. No inventory write. No card PAN. Folio Watch alerts; it does not fix.
3. **Expire the setup key.** A temporary admin that lasts a quarter is a master key. Calendar the expiry.
4. **Publish the error rate.** Wrong date, wrong rate. Weekly. If the vendor will not show it, they are not the vendor.

## When not to buy

Any agent that requires admin on the PMS ‘just for setup’ and never gives it back.

## Provider shortlist

- [Clerkshift Agent](https://harbor.signalry.ai/providers/clerkshift) — agent · Reservation modifications. Catalog score 8 (post-job shape, not a verification).
- [Folio Watch Agent](https://harbor.signalry.ai/providers/folio-watch) — agent · Inventory & card-flow watch. Catalog score 8.4 (post-job shape, not a verification).
- [Folio Security Advisors](https://harbor.signalry.ai/providers/folio-pci) — people · PCI & hotel cyber after flag change. Catalog score 8.7 (post-job shape, not a verification).
- [Northline PMS](https://harbor.signalry.ai/providers/northline-pms) — software · Property management system. Catalog score 8 (post-job shape, not a verification).
- [Scope Gate](https://harbor.signalry.ai/providers/scope-gate) — software · Scoped agent access to PMS. Catalog score 8.3 (post-job shape, not a verification).

## Success the brief names

- Written read/draft/post diagram.
- 100% human-posted in month one.
- Setup admin expired on a calendar.

## Pitfalls

- Admin ‘just for onboarding.’
- An agent that talks like a concierge and writes like a clerk.
- No rollback for a bad batch of mods.

---

Stable id: `scoped-agent-access`
Source: Harbor by Signalry · https://harbor.signalry.ai
Verified Outcome is not insurance. Do not treat a catalog score as attested proof.