Skip to content
Hostelivo
Menu

Devices and integrations

The status of every integration, as it is

We read each vendor's official documentation and recorded what we found and what we could not verify. No integration has been tested on a physical device yet. A status only changes after a recorded test.

23 lock and access control vendors reviewed

  • Documentation available22
  • Integration developed0
  • Tested in vendor sandbox0
  • Verified on hardware0
  • Partner approval required0
  • Not available yet1

Counts are computed from the integration list in the code itself.

Device categories

These are the kinds of devices the platform deals with in a hostel. Each category connects differently and each model has different capabilities.

  • Smart door locks

    A code, card or mobile key, depending on the lock.

    Through the vendor cloud API or a gateway

  • QR and barcode readers

    At the entrance, a gate or the kiosk.

    Through a cloud reader or a controller

  • RFID and NFC cards

    A card per guest, encoded and revoked with the stay.

    Through the access control system

  • Card encoders

    A front desk device that writes the card.

    Through vendor software or an SDK

  • Gateways and bridges

    Connect locks to the internet for remote commands.

    Required by some vendors for remote unlock and revoke

  • Smart lockers

    A locker per bed with an electronic lock.

    Through the locker system or the lock itself

  • Reception screens

    An iPad or tablet for self check-in.

    A browser only, no special connection

  • Access controllers

    Manage several doors and readers in a building.

    Through the vendor's local or cloud server

  • IoT devices

    Temperature, leak or usage sensors.

    Under study, no connection today

  • Compatible CCTV

    A list of cameras and their locations only.

    The platform never receives or stores video

Surveillance cameras have their own law in Saudi Arabia. The platform does not stream or store video, and the camera location list does not offer rooms or bathrooms. Installation and recording retention are the property's responsibility under the rules.

The status ladder

Every integration climbs the same steps in order. We never skip a step without recorded evidence.

  1. 1

    Documentation available

    We read the vendor's official docs and they are enough to start. No code yet.

  2. 2

    Integration developed

    We wrote the connector against the docs and tested it on recorded responses.

  3. 3

    Tested in vendor sandbox

    We ran it against the vendor sandbox with a real test account.

  4. 4

    Verified on hardware

    We ran it end to end on a physical device.

Partner approval required
The vendor requires an agreement or review before opening the API or some of its features.
Not available yet
We found no public integration path for this vendor.

We never say a device works with the platform before it is verified on hardware, or a payment provider before it is tested in its sandbox.

Vendors we reviewed

Every detail here comes from an official page we read on the research date. Anything we could not confirm is marked as not verified. We do not show vendor logos.

Payment providers
Category
Status

23 results

  • TTLock

    LocksDocumentation available
    Connection method
    Cloud API with an on-site bridge or gateway
    Requirements
    Developer account reviewed by hand before keys are issued. Remote unlock needs a gateway or a WiFi lock.
    Documented capabilities
    Period and one-time PINs. Remote unlock. Mobile eKey. IC cards. Offline PINs. Lock records and battery.
    Compatibility notes
    Lock callbacks are unsigned. We treat them as hints and recheck through the API. The docs state there is no sandbox.
  • SALTO KS

    Access control systemsDocumentation available
    Connection method
    Vendor cloud API
    Requirements
    Credentials are issued by the local SALTO business unit. No self sign-up.
    Documented capabilities
    PINs. Remote unlock. Mobile keys. Tags. Lockers. Offline keys. Entries and battery level.
    Compatibility notes
    Events arrive over a persistent live connection, not webhooks. The production base URL is not verified.
  • ZKTeco ZKBio

    Access control systemsDocumentation available
    Connection method
    On-premise server at the property
    Requirements
    A ZKBio CVSecurity server at the property with an activated API licence, and network reach to it.
    Documented capabilities
    Remote door open. RFID cards. Person QR codes. Transaction logs.
    Compatibility notes
    No documented webhooks, so events must be polled. We read an earlier manual and must recheck the current one.
  • Nuki

    LocksDocumentation available
    Connection method
    Vendor cloud API
    Requirements
    Devices linked to a Nuki Web account. Acting for other accounts and webhooks need Advanced API approval.
    Documented capabilities
    Keypad codes. Remote unlock. App authorisations. Lock log. Battery state.
    Compatibility notes
    Limits are 4 per second, 100 per minute and 1000 per hour. Webhooks are signed. No sandbox.
  • igloohome

    LocksDocumentation available
    Connection method
    Cloud API with an on-site bridge or gateway
    Requirements
    Acting for other owners needs a business partnership with igloohome. Remote commands need a Bridge.
    Documented capabilities
    Offline AlgoPINs. PINs through the Bridge. Remote unlock. Bluetooth eKeys. Activity logs and battery.
    Compatibility notes
    The webhook signature method contradicts itself in the docs. Blocked until the vendor clarifies.
  • RemoteLock

    LocksDocumentation available
    Connection method
    Vendor cloud API
    Requirements
    A RemoteLock Connect account, then API access enabled on request by sales.
    Documented capabilities
    PINs with start and end times. Remote unlock. Offline backup PINs. Events and battery level.
    Compatibility notes
    120 requests per minute. Webhooks use a shared secret, not a signature, so we recheck through the API. The events list endpoint is marked deprecated.
  • dormakaba exivo

    Access control systemsDocumentation available
    Connection method
    Vendor cloud API
    Requirements
    The Connectivity service must be enabled by the installing partner for each site. Key and secret per site.
    Documented capabilities
    Remote door unlock. Digital keys and visits. RFID media. Access logs.
    Compatibility notes
    No general webhook system, so logs must be polled. Time limits on PINs are unconfirmed.
  • ASSA ABLOY Vingcard

    LocksDocumentation available
    Connection method
    Connection method not verified
    Requirements
    API access goes through the vendor. We found no public developer portal.
    Documented capabilities
    No capabilities verified from an official source.
    Compatibility notes
    The only detail we read came from a third party, not the vendor.
  • Onity DirectKey

    LocksDocumentation available
    Connection method
    Vendor SDK
    Requirements
    Contact sales. The site now sits under the Honeywell domain.
    Documented capabilities
    The page mentions an SDK and integration help only.
    Compatibility notes
    Auth, webhooks and sandbox are not verified.
  • HID Origo

    Access control systemsDocumentation available
    Connection method
    Connection method not verified
    Requirements
    A technology partner programme. Its page refused our request during research.
    Documented capabilities
    No capabilities verified from a page we read.
    Compatibility notes
    Status is based on the programme existing and needs confirmation.
  • Kisi

    Access control systemsDocumentation available
    Connection method
    Vendor cloud API
    Requirements
    Docs are public. Auth details not read.
    Documented capabilities
    A cloud API reference exists, but it renders in the browser and we did not read it.
    Compatibility notes
    The reference must be reviewed in a browser before any development.
  • Paxton Net2

    Access control systemsDocumentation available
    Connection method
    Connection method not verified
    Requirements
    Contact the integrations team, following a published process for commercial integrations.
    Documented capabilities
    No capabilities verified from a page we read.
    Compatibility notes
    A claim that API access is limited to commercial integrators is not verified.
  • Yale / August

    LocksNot available yet
    Connection method
    No public API found
    Requirements
    No public integration path found.
    Documented capabilities
    Nothing documented that we could read.
    Compatibility notes
    The developer site shows no readable content. Search only found unofficial libraries.
  • Tedee

    LocksDocumentation available
    Connection method
    Cloud API with an on-site bridge or gateway
    Requirements
    Docs are public. Auth details not read.
    Documented capabilities
    A cloud API and a local Bridge API, per the docs pages.
    Compatibility notes
    Pages render in the browser and endpoint details were not read.
  • SwitchBot

    LocksDocumentation available
    Connection method
    Cloud API with an on-site bridge or gateway
    Requirements
    A token from the app, no approval. A Hub is needed for cloud control of Bluetooth devices.
    Documented capabilities
    Time-limited keypad codes with start and end. Webhooks. A battery field.
    Compatibility notes
    10,000 calls per day. No webhook signature documented. Lock and unlock command details not read.
  • Tuya

    LocksDocumentation available
    Connection method
    Vendor cloud API
    Requirements
    A Tuya cloud development account. Zigbee locks need a gateway.
    Documented capabilities
    Temporary, dynamic and offline passwords, one-time or multi-use.
    Compatibility notes
    PINs are encrypted before sending. Password status must be polled. Auth and limits not verified.
  • Aqara

    LocksDocumentation available
    Connection method
    Vendor cloud API
    Requirements
    An Aqara developer account. Three authorisation modes.
    Documented capabilities
    HTTP API for device state and remote control. Lock support documented in the mobile SDK.
    Compatibility notes
    Lock control through the cloud API is not confirmed.
  • iLOQ

    Access control systemsDocumentation available
    Connection method
    Connection method not verified
    Requirements
    Agreement and training, then a test environment, then iLOQ approval.
    Documented capabilities
    Granting access to keys. Audit trail. Event subscriptions. Mobile SDK for NFC locks.
    Compatibility notes
    Docs are available after contract.
  • Gantner

    LockersDocumentation available
    Connection method
    Connection method not verified
    Requirements
    Docs are behind a login.
    Documented capabilities
    Relevant for locker management, but API details are not verified.
    Compatibility notes
    A candidate for lockers once docs are available.
  • EVVA Xesar

    Access control systemsDocumentation available
    Connection method
    MQTT interface on the property system
    Requirements
    Unclear whether downloading the docs needs a partner login.
    Documented capabilities
    An MQTT interface and app SDK to manage a Xesar installation, per the product page.
    Compatibility notes
    We did not get the documentation file itself.
  • Hikvision HikCentral

    Access control systemsDocumentation available
    Connection method
    On-premise server at the property
    Requirements
    Register for the TPP programme and wait for approval, then install OpenAPI on the local platform.
    Documented capabilities
    Person permissions, card swipe events and door control, per the partner page.
    Compatibility notes
    The API runs on the HikCentral server at the property.
  • Suprema BioStar 2

    Access control systemsDocumentation available
    Connection method
    On-premise server at the property
    Requirements
    A BioStar 2 server, version 2.7.10 or later, at the property.
    Documented capabilities
    REST API on the local server with a login session.
    Compatibility notes
    Licensing and webhooks not verified. Any biometric feature such as fingerprint stays disabled in the platform.
  • 2N

    Intercoms and access unitsDocumentation available
    Connection method
    API on the device itself, on the local network
    Requirements
    The device on the same network or reachable over it. Licence requirements not verified.
    Documented capabilities
    Output control, access grants, user directory, mobile keys and an event log.
    Compatibility notes
    The API security section was not read.

Research date 26 October 2026. Documented capabilities means the vendor lists them in its docs. It does not mean they work with the platform today.

Before connecting any device

These are fixed conditions for connecting any lock or door to the platform. We ask the installer for them because guest safety comes before any feature.

  1. 1

    Free exit from inside

    The exit side of the door always stays mechanical or independent of the system.

  2. 2

    Release on fire alarm

    Linking locks to the alarm system is the installer's job and is recorded at handover.

  3. 3

    A fallback when offline

    A backup key or code at the front desk if the connection or battery fails.

  4. 4

    A gateway for remote commands

    Depends on the vendor. Without it, remote revocation may not arrive at once.

  5. 5

    The property's own vendor account

    We connect with your account and its permissions. We never reuse one property's account for another.

  6. 6

    No personal data to the lock cloud

    The lock vendor receives only a credential reference, never a name or ID number.

Have a device that is not listed?

In the trial hostel you can see how commands and their states show up without any device.