Xero for AI agents

Xero is cloud accounting software for small businesses, covering invoicing, bank reconciliation, and financial reporting. Connect it once through Arc0, and your agent, or Claude, ChatGPT and Cursor, can use it through one MCP endpoint, limited to what each user approved.

Finance and accountingOAuth 2.0MCP + RESTxero.com
AUDIT LOG · XEROPOLICY: acme-support
09:41:07 · claude · u_8f2read
xero.list_files
List Files✓ allowed · 212ms
09:41:08 · claude · u_8f2read
xero.get_item
Get Item✓ allowed · 164ms
09:41:09 · claude · u_8f2write
xero.create_item
Create Item✓ approved · approved by user
EVERY XERO CALL, ON THE RECORD
01 · USE CASES

What agents do in Xero.

01

Create an invoice

Draft a new invoice for a contact with line items and due date.

02

Get the profit and loss report

Pull the current profit and loss statement, a read-only financial report.

03

Confirm before recording a payment

Check the invoice and amount before recording a payment against it, since it changes the account balance.

02 · ACTIONS

53 Xero actions, graded by risk.

Every Xero action is tagged read, write or destructive, so one policy covers the whole app and new actions inherit the right default.

read

36

Look things up. Allowed by default.

  • xero.get_item
    Get Item
  • xero.get_asset
    Get Asset
  • xero.get_budget
    Get Budget
  • xero.get_quotes
    Get Quotes
  • xero.list_files
    List Files
  • xero.list_items
    List Items
  • xero.get_account
    Get Account
  • xero.get_invoice
    Get Invoice
  • xero.get_payment
    Get Payment
  • xero.get_project
    Get Project
  • xero.list_assets
    List Assets
  • xero.list_quotes
    List Quotes
  • xero.get_contacts
    Get Contacts
  • xero.list_folders
    List Folders
  • xero.list_accounts
    List Accounts
  • xero.list_invoices
    List Invoices
+ 20 MORE

write

17

Create and change things. Allow, or ask the user first.

  • xero.create_item
    Create Item
  • xero.create_quote
    Create Quote
  • xero.update_quote
    Update Quote
  • xero.create_contact
    Create Contact
  • xero.create_invoice
    Create Invoice
  • xero.create_payment
    Create Payment
  • xero.update_contact
    Update Contact
  • xero.create_credit_note
    Create Credit Note
  • xero.update_credit_note
    Update Credit Note
  • xero.post_invoice_update
    Update Invoice
  • xero.create_manual_journal
    Create Manual Journal
  • xero.create_purchase_order
    Create Purchase Order
  • xero.update_manual_journal
    Update Manual Journal
  • xero.update_purchase_order
    Update Purchase Order
  • xero.create_bank_transaction
    Create Bank Transaction
  • xero.update_bank_transaction
    Update Bank Transaction
+ 1 MORE

destructive

0

Delete, cancel or archive. Ask first, or deny outright.

  • No destructive actions.
03 · HOW IT WORKS

Xero in three steps.

  1. 01Your users connect XeroThey sign in to Xero on Arc0 Connect, under your brand, and approve the access you ask for.
  2. 02You set the rulesReads run, and writes like “create Item” can wait for the user to approve.
  3. 03Any agent can actYour agent calls Xero through the Arc0 SDK or MCP, and so can Claude, ChatGPT and Cursor. Every call lands on the audit log.
POLICY.TS
await arc0.policies.set('xero', {
  read: 'allow',
  write: 'ask',        // create_item
  destructive: 'deny',  
})

# Claude Code: the same connection, one URL
$ claude mcp add --transport http arc0 \
    https://mcp.arc0.ai/u/u_8f2
04 · AUTH AND DATA

How Xero connects.

Users sign in to Xero on Arc0 Connect and approve the scopes you request. Build with Arc0’s Xero OAuth app, or bring your own so the Xero consent screen names you. Tokens refresh automatically, and you can export them whenever you want.

The same Xero connection serves your agent over MCP and your own backend over REST and the proxy, so a user connects once. How Arc0 handles credentials →

AUTH
OAuth 2.0
CREDENTIALS
Per-tenant encrypted vault
MODEL SEES
Results only, never credentials
AUDIT LOG
Every call, on every plan
05 · WORKS WITH

Use Xero from any agent.

Claude
ChatGPT
Cursor
Codex
VS Code
OpenAI Agents SDK
Claude Agent SDK
Vercel AI SDK
Mastra
LangGraph
07 · FAQ

Xero and Arc0, answered.

Q01

Can I use Xero with Claude, ChatGPT or Cursor?

Yes. Connect Xero to Arc0 once, then add your Arc0 MCP URL to Claude, ChatGPT, Cursor, Claude Code or any other remote-MCP client. Each assistant only gets the Xero actions you allow.

Q02

How do users connect Xero?

Users sign in to Xero on Arc0 Connect and approve the scopes you request. Build with Arc0’s Xero OAuth app, or bring your own so the Xero consent screen names you. Tokens refresh automatically, and you can export them whenever you want.

Q03

Which Xero actions can my agent take?

53 in total: 36 read, 17 write and 0 destructive, such as “create Item”. Your policies decide which of them each agent may call.

Q04

Can I make my agent read-only in Xero?

Yes. Allow read actions and deny writes in the Xero policy. Your agent can still look things up, and any write it attempts is blocked and logged.

Q05

Can my own backend call Xero too?

Yes. The same Xero connection is available over REST and through the Arc0 proxy, so your product and your agent share one connection per user.

Get started

Plug Xero into your agent.

Your users connect Xero once, under your brand. Your agent gets 53 actions behind your policies, with every call on the record.

Free to build · MCP + REST · Audit log on every plan