Manage what AI can reach

Create, rotate and revoke the keys that give AI assistants access. Keys are issued per level, scoped to your own account, and cut off instantly when revoked.

Connecting an AI assistant takes minutes; staying in control of what it can reach is the part that matters for years. The AI → AI Tools page is where access is created, reviewed and cut.

Access keys

Access is granted with keys, and you create one on the AI Tools page for each level of access. When you create a key it's shown once, at that moment; copy it then, because it can't be displayed again. Paste it into the assistant or tool that needs it.

Each key can be rotated or revoked. Rotating gives you a fresh key and the old one stops working. Revoking cuts that access off, and it isn't "at the next sign-in" or "within 24 hours": the next request made with a revoked key is refused.

Three levels

  • Guest covers only what a member of the public could see and ask: availability, prices, property information, and a handful of tightly capped guest actions.
  • Read adds your operational and reporting data to everything above: bookings, arrivals, tasks, occupancy and revenue.
  • Full adds guest messaging and the ability to prepare changes for your approval. Even at this level, nothing is committed without a person confirming the draft.

Use the lowest level that does the job. An assistant that only answers guest questions never needs to see your revenue.

Scoped to your account

A key reaches your properties and nothing else. Which account a key belongs to is baked into the key itself. It isn't something an assistant states, so the key can't be talked, tricked or misconfigured into someone else's data, and no one else's key can reach yours.

Connected apps

Some assistants, Claude among them, connect through a sign-in-and-approve flow instead of a pasted key. They appear in the connected apps list on the same page; disconnect one there at any time and its access ends just as immediately.

Treat a key like a key

Anyone holding a key can do whatever it allows. Store it like a password, don't email it around, rotate it when someone with access moves on, and revoke anything you can't account for. Creating a new key takes seconds, so being generous with rotation costs you nothing.

Can't find what you need? Log in and use the in-app chat, or talk to our team.