Use a dedicated integration identity
Do not give an external AI agent an owner’s normal Zuesie password. Customer API credentials will be scoped to an organisation and to explicit capabilities.
Grant the minimum capability
A reporting assistant may only need read access to properties and reservations. A messaging agent may need draft permission but not permission to publish a rate or cancel a booking.
Keep consequential actions governed
Actions such as cancellations, refunds, sensitive guest communication and destructive configuration changes should require explicit policy and, where appropriate, human approval.
Treat personal data carefully
Reservation and guest data can contain personal information. Send only the fields an AI workflow genuinely needs and respect the operator’s privacy and retention obligations.
Build against stable tools
The public AI/API contract will be versioned. Until it is published, internal Shannon endpoints are not a supported customer integration surface and should not be copied into third-party automations.
Need help?
Early Zuesie customers can use the Support section inside the PMS to talk directly to Mara and the Zuesie team.