AI agents
How do I control and undo what an AI agent does in my field service software?
Control an AI agent with five settings: what it may do on its own versus what it must ask a person to approve, who is allowed to use and configure it, which records and channels it can touch, an on or off switch per feature, and a log of every action it took. Undo is the part most tools lack: many vendors let you review or block an AI action before it runs, but few offer a one-click reversal after it runs, so ask for a demo of undoing a bulk change. For answers to technicians, require the AI to cite the manual or job record it used and to say it does not know when nothing covers the question.
- Split actions into two lists: safe to run alone (drafts, lookups, summaries) and must be approved (sends, price changes, deletes, bulk edits).
- Give AI the permissions of the person using it, never more: an AI tool should not see a number the user cannot.
- Every feature needs its own switch: phone, text, photo checks and document reading turn on and off separately.
- Ask for undo, not just approval: a confirm step stops bad actions, an undo fixes the ones that got through.
- Grounded answers cite their source; an answer with no source should be treated as a guess.
Pick a time for your demo
60 minute video call
This page covers controls inside field service software. It is not legal advice; if you operate in the EU, check whether your use counts as high risk under the AI Act.
Facts checked as of November 2026. Sources at the end of the page.
Step by step
How to put controls around an AI agent, step by step
The same six controls apply whether the AI answers calls, reads photos, edits jobs or works from Claude or ChatGPT through a connector.
1. List what the agent may do, and sort it by risk
Write down every action: look up a job, draft a text, book a visit, change a price, send an invoice, delete a record. Mark the ones that touch money, customers or many records at once as high impact. OWASP's guidance for AI agents says to require a human to approve high-impact actions before they are taken.
2. Turn on approval for the high-impact list
Most platforms have a setting for this, but it is often off by default. In Microsoft Copilot Studio each tool has an "Ask the end user before running" setting that defaults to No. Housecall Pro's CSR AI uses permissions to decide whether it may book, reschedule or cancel on its own.
3. Limit the agent to the user's own permissions
The AI should act as the person using it. ServiceTitan says what a user sees in Atlas is limited by their other permissions, so a metric hidden elsewhere stays hidden in Atlas. OWASP also says to limit what AI extensions can reach in other systems to the minimum necessary.
4. Decide who may switch it on and change it
Keep configuration with admins. Jobber says only admin users can open the Receptionist dashboard and settings. HubSpot requires a Super Admin to change the account setting "Give users access to generative AI tools and features". In ServiceTitan, Atlas settings sit under Atlas > Access & Capabilities.
5. Give each feature its own switch
Jobber's Receptionist has separate toggles for text and for voice calls, and a per-conversation toggle in the message center. Housecall Pro's CSR AI goes quiet once a person opens the conversation. Copilot Studio has an Enabled toggle on each tool that blocks the agent from using it.
6. Log every action and make it reversible
Each action should record who asked, which tool ran, what changed and whether it was approved. Microsoft logs Copilot Studio agent activity in Purview Audit, with who, when, what was accessed and whether it was a read, create or modify. Salesforce points admins to the Audit Trail in its Einstein Trust Layer. Then check whether the log lets you put the record back, not just read what happened.
Failure modes
Why AI control goes wrong
These are the worries buyers raised on our sales calls, by trade and size.
A mistake with no way back
A facility maintenance coordinator running work through subcontractors asked first whether a mistake the AI makes can be undone or deleted. Approval stops the obvious errors, but a wrong date on 40 recurring visits is found a week later, when only an undo or a restore from history helps.
The AI reads a photo for the wrong reason
A commercial electrical and low-voltage contractor worried the AI would misread what a photo was for, for example treating a reference photo as evidence of a fault, and asked to switch AI photo interpretation off. If photo checks cannot be turned off separately from the rest of the AI, teams turn off everything.
Anyone can change how the agent behaves
A commercial facility maintenance company asked whether security levels can limit who controls or edits the AI agents. If any dispatcher can rewrite an agent's instructions, nobody knows why it started booking jobs differently.
Confident answers with no source
A commercial HVAC and refrigeration contractor asked whether the AI makes up an answer when no manual covers the question. NIST calls this confabulation: confidently stated but false content. A technician who follows a made-up torque value or refrigerant charge is a safety problem, not a software one.
The AI logs a call without the details you need
The same contractor asked whether the AI could be made to require a date and time before it logs a service call. Without required fields, an AI intake creates jobs the office has to call back about, which defeats the point.
Customers who do not want to talk to AI
An emergency plumbing and HVAC company said its customers dislike AI voice and wanted texting only. Control includes choosing the channel: some customers should only ever get text, or a person.
Options
What the main tools let you control
As each vendor's help pages describe it in November 2026. Features change often; check the live page.
| Tool | Approve before acting | Who can configure | Switch off | Undo and log |
|---|---|---|---|---|
| Jobber Receptionist and Claude/ChatGPT connector | Receptionist asks before taking actions you have switched off. The connector cannot create or edit jobs or invoices, change the schedule, or delete or archive records. | Admin users only for Receptionist settings | Separate text and voice toggles, plus a per-conversation toggle | Conversations logged with recording, transcript and tags such as Needs action; no undo described |
| Housecall Pro CSR AI | Permissions decide whether it may book, reschedule or cancel; it confirms an action only after it succeeds | Settings > Team & Permissions > Team > AI Team > CSR AI | Text toggle under Integrations; goes quiet when a person opens the conversation | Full conversations under Inbox > CSR AI; no undo described |
| ServiceTitan Atlas | Help says to verify details before acting on its output | Admins under Atlas > Access & Capabilities; access limited by the user's other permissions | Persona assignment per user; no account switch described | Not described in the help pages we read |
| Microsoft Copilot Studio (with Dynamics 365) | "Ask the end user before running" per tool, default No; human review step in agent flows | Makers and admins; organization data policies can block tools | Enabled toggle per tool | Activity in Purview Audit with read, create or modify; no undo described |
| Fieldproxy | Every change comes back as a confirm card showing before and after; changes over limits you set go to an approver | Set by role; Claude and ChatGPT follow the same permissions | New agents and automations are saved switched off | One click to Undo on every confirmed change, including bulk and price changes; record of who changed what |
Vendor facts are linked in Sources. None of the other help pages we read describe a one-click undo of an AI action.
Worked example
A worked example: one wrong instruction, three outcomes
Say a commercial maintenance company with 25 technicians runs quarterly filter changes on 60 sites. A dispatcher types: "Move all next week's filter changes for the north region to Thursday." The AI matches 38 visits. Twelve of them were already moved by the customer to a fixed date, and should not change.
With no controls, the AI moves all 38 and sends 38 customer texts. The office finds the problem when the first site manager calls. Someone rebuilds 12 visits by hand from memory, and sends 12 apology texts.
With approval only, the dispatcher sees one card saying "Move 38 visits to Thursday" and taps approve, because 38 looks about right. The texts go out. Approval did not help, because the card did not show which visits were affected.
With approval that shows before and after, plus undo, the card lists all 38 visits with the old and new dates. The dispatcher spots two locked dates and approves anyway. A day later the other 10 turn up. One undo puts all 38 back as they were, and the dispatcher reruns the request with "except fixed-date visits". Because customer texts were set to need approval separately, none had been sent yet.
The lesson: approval is only as good as what the approver can see, and undo covers what they miss. Keep sends to customers behind their own approval, so a reversed schedule change does not leave a trail of wrong texts.
Buying checklist
What to check before you buy
Good signs
- The approval screen shows each record that will change, with before and after values.
- You can undo a bulk change in one step, and the demo shows it.
- The AI works under the user's own role: a technician's AI cannot see margins the technician cannot see.
- Admins choose who can change agent instructions, separately from who can use the agent.
- Separate switches for voice, text, photo checks and document reading.
- Answers to technicians cite the manual page or job record, and say "not covered" when nothing matches.
- A log of every AI action with who asked, what changed and the outcome.
- Limits on bulk changes and on sends to customers.
Red flags
- One switch for all AI, so turning off photo checks also turns off call answering.
- AI actions do not show in record history, so you cannot tell a person's edit from the AI's.
- Approval cards that summarize ("update 38 jobs") without listing them.
- The AI connector uses one shared admin key instead of each person's own login.
- "The AI never makes mistakes": every vendor we checked says the opposite in its help pages.
- No way to stop the AI on a single conversation when a person takes over.
Fieldproxy
Setting it up in Fieldproxy
Fieldproxy is one price per company with unlimited users; see /pricing. These are the controls the platform has, set up with you to your own roles and limits.
Confirm card on every change
Command Center (/agents/command-center) prepares each change as a confirm card showing what will change, before and after. Nothing is saved until a person approves it.
Undo on every confirmed change
Each confirmed change has one click to Undo, including bulk changes and price changes. Record history and restoring deleted records cover edits found later.
Approvers for changes over your limits
You set the limits and the approvers, e.g. a change order over a set amount or a discount above a set percentage waits for a named approver, who can still undo it afterwards. See /solutions/approval-workflows.
Background work as cards a person approves
Autopilot (/agents/autopilot) drafts follow-ups for quotes, payments, sign-offs and re-bookings as cards. A person taps Do it or Not needed, and a done card keeps its Undo.
Roles decide what the AI can see and do
Command Center works under the person's role. From Claude or ChatGPT through the MCP server (/mcp), each person signs in with their own account, and scopes (read, write, build), their role and any key limits on tables, rows and columns set the ceiling. Changing more than 5 records at once needs bulk permission and more than 1,000 is refused.
New agents start switched off
Builds are saved as drafts, and new automations and agents are saved switched off until someone turns them on. Which agents run, and on which jobs, is set with you (e.g. photo checks by the Vision agent, /agents/vision-agent, only at job close-out).
An audit log you can act on
Every MCP call is written to an audit log with the tool, key, person and outcome, with a record of who changed what. Administrators can see every key and connected app and revoke any of them, and a revoked key is refused on the next request.
Answers with sources for technicians
The Knowledge agent (/agents/knowledge-agent) answers from your manuals, service history and knowledge base, and every answer cites its source, so a technician can check the page it came from.
Regional notes
EU and UK: human oversight rules
The EU AI Act's human oversight article (Article 14) applies to high-risk AI systems, not to every AI feature. Where it applies, people overseeing the system must be able to disregard, override or reverse its output and to stop it with a "stop" button or a similar procedure. Most job scheduling and customer texting will not be high risk, but uses that touch workers' management or safety components can be, so check with your adviser. The page lists application dates of 2 December 2027 and 2 August 2028 for the two groups of high-risk systems.
Outside the EU there is no equivalent rule for field service AI, but the same ideas appear in voluntary guidance. NIST's Generative AI Profile suggests comparing outputs with known ground truth through human oversight and automated checks, and recording who holds human oversight roles.
How switching works
How switching to Fieldproxy works
We move your data over and set the system up to the way you already work. Fieldproxy replaces the old tool; it does not run alongside it.
List what the AI should and should not do
Walk us through the jobs you want AI on (calls, texts, photo checks, scheduling) and the actions that must always need a person.We set roles, limits and approvers
We map your roles, set the amounts and record counts that need an approver, and decide which agents start on and which stay off.Test on your own data
You try changes, approvals and Undo on your real jobs before anything reaches a customer.Go live one agent at a time
Turn agents on one by one, review the log after the first week, and adjust limits from what you see.
FAQ
Questions people ask
- Can I undo a mistake the AI makes?
- It depends on the tool. Most let you review or block an action before it runs; few describe a one-click undo afterward. In Fieldproxy every confirmed change, including bulk and price changes, has one click to Undo.
- Can I turn off one AI feature, like photo interpretation, and keep the rest?
- Look for separate switches per feature. Jobber's Receptionist has separate text and voice toggles, and Copilot Studio has an Enabled toggle per tool. In Fieldproxy, agents are saved switched off and turned on one at a time.
- Can I limit who controls or edits the AI agents?
- Yes, in most tools configuration is admin only: Jobber limits Receptionist settings to admin users, and HubSpot needs a Super Admin to change account AI settings. Ask whether using an agent and editing its instructions are separate permissions.
- Does the AI make up answers when no manual covers the question?
- Any language model can. ServiceTitan's own help says Atlas may give inaccurate or outdated responses. Require answers that cite the manual or job record they used, and treat an answer with no source as a guess.
- Can I make the AI collect a date and time before it logs a call?
- That is a required-fields rule on the job form, and it should apply to the AI the same way it applies to a person. Ask the vendor to show an AI intake failing to save a job with the field missing.
- Does AI connected through Claude or ChatGPT get around my permissions?
- It should not. Good connectors use each person's own login and role. Jobber's connector cannot delete records or change the schedule, and Fieldproxy's MCP server applies the person's role plus key scopes and row limits.
- Can I stop the AI on one customer conversation?
- Jobber has a per-conversation toggle, and Housecall Pro's CSR AI goes quiet when a person opens the conversation. Ask for this before go-live, since some customers will want a person or text only.
Sources
Competitor details on this page come from the vendors' own pages and documentation, checked as of November 2026. Plans and prices change, so check the vendor's current page before you decide.
- OWASP: LLM06:2025 Excessive Agency: https://genai.owasp.org/llmrisk/llm062025-excessive-agency/
- NIST AI 600-1: Generative AI Profile: https://nvlpubs.nist.gov/nistpubs/ai/NIST.AI.600-1.pdf
- EU AI Act Article 14: Human oversight: https://artificialintelligenceact.eu/article/14/
- Jobber Help Center: Receptionist powered by Jobber AI: https://help.getjobber.com/en/articles/receptionistpowered-by-jobber-ai/
- Jobber Help Center: connect Jobber to Claude and ChatGPT: https://help.getjobber.com/en/articles/connect-jobber-to-claude-and-chatgpt/
- Housecall Pro Help: CSR AI text answering: https://help.housecallpro.com/en/articles/16673934-csr-ai-text-answering-in-alpha
- Housecall Pro Help: CSR AI best practices and FAQs: https://help.housecallpro.com/en/articles/12001958-csr-ai-best-practices-and-faqs
- ServiceTitan Help: assign Atlas personas and manage access: https://help.servicetitan.com/docs/assign-atlas-access-and-personas
- ServiceTitan Help: Atlas: https://help.servicetitan.com/docs/en/atlas
- Microsoft Learn: add tools to custom agents in Copilot Studio: https://learn.microsoft.com/en-us/microsoft-copilot-studio/add-tools-custom-agent
- Microsoft Learn: request information from human review in agent flows: https://learn.microsoft.com/en-us/microsoft-copilot-studio/flows-request-for-information
- Microsoft Purview: audit logs for Copilot and AI applications: https://learn.microsoft.com/en-us/purview/audit-copilot
- HubSpot Knowledge Base: manage your AI settings: https://knowledge.hubspot.com/account-management/manage-your-ai-settings
- Salesforce Trailhead: Agentforce guardrails and trust patterns: https://trailhead.salesforce.com/content/learn/modules/trusted-agentic-ai/explore-agentforce-guardrails-and-trust-patterns
- ServiceM8: reply suggestions: https://www.servicem8.com/updates/reply-suggestions
Related
Keep reading
- How AI credits work in field service software
- AI photo verification before a job closes
- Connect Jobber to ChatGPT and Claude
- AI field service software
- What is the best field service software for a 5-10 person HVAC team?
- Cheaper ServiceTitan alternatives for small plumbing and HVAC companies, without payment processor lock-in