Xero for AI agents
Xero is cloud accounting software for small businesses, covering invoicing, bank reconciliation, and financial reporting. Connect it once through Arc0, and your agent, or Claude, ChatGPT and Cursor, can use it through one MCP endpoint, limited to what each user approved.
What agents do in Xero.
Create an invoice
Draft a new invoice for a contact with line items and due date.
Get the profit and loss report
Pull the current profit and loss statement, a read-only financial report.
Confirm before recording a payment
Check the invoice and amount before recording a payment against it, since it changes the account balance.
53 Xero actions, graded by risk.
Every Xero action is tagged read, write or destructive, so one policy covers the whole app and new actions inherit the right default.
read
36Look things up. Allowed by default.
- xero.get_itemGet Item
- xero.get_assetGet Asset
- xero.get_budgetGet Budget
- xero.get_quotesGet Quotes
- xero.list_filesList Files
- xero.list_itemsList Items
- xero.get_accountGet Account
- xero.get_invoiceGet Invoice
- xero.get_paymentGet Payment
- xero.get_projectGet Project
- xero.list_assetsList Assets
- xero.list_quotesList Quotes
- xero.get_contactsGet Contacts
- xero.list_foldersList Folders
- xero.list_accountsList Accounts
- xero.list_invoicesList Invoices
write
17Create and change things. Allow, or ask the user first.
- xero.create_itemCreate Item
- xero.create_quoteCreate Quote
- xero.update_quoteUpdate Quote
- xero.create_contactCreate Contact
- xero.create_invoiceCreate Invoice
- xero.create_paymentCreate Payment
- xero.update_contactUpdate Contact
- xero.create_credit_noteCreate Credit Note
- xero.update_credit_noteUpdate Credit Note
- xero.post_invoice_updateUpdate Invoice
- xero.create_manual_journalCreate Manual Journal
- xero.create_purchase_orderCreate Purchase Order
- xero.update_manual_journalUpdate Manual Journal
- xero.update_purchase_orderUpdate Purchase Order
- xero.create_bank_transactionCreate Bank Transaction
- xero.update_bank_transactionUpdate Bank Transaction
destructive
0Delete, cancel or archive. Ask first, or deny outright.
- No destructive actions.
Xero in three steps.
- 01Your users connect XeroThey sign in to Xero on Arc0 Connect, under your brand, and approve the access you ask for.
- 02You set the rulesReads run, and writes like “create Item” can wait for the user to approve.
- 03Any agent can actYour agent calls Xero through the Arc0 SDK or MCP, and so can Claude, ChatGPT and Cursor. Every call lands on the audit log.
await arc0.policies.set('xero', { read: 'allow', write: 'ask', // create_item destructive: 'deny', }) # Claude Code: the same connection, one URL $ claude mcp add --transport http arc0 \ https://mcp.arc0.ai/u/u_8f2
How Xero connects.
Users sign in to Xero on Arc0 Connect and approve the scopes you request. Build with Arc0’s Xero OAuth app, or bring your own so the Xero consent screen names you. Tokens refresh automatically, and you can export them whenever you want.
The same Xero connection serves your agent over MCP and your own backend over REST and the proxy, so a user connects once. How Arc0 handles credentials →
- AUTH
- OAuth 2.0
- CREDENTIALS
- Per-tenant encrypted vault
- MODEL SEES
- Results only, never credentials
- AUDIT LOG
- Every call, on every plan
Use Xero from any agent.
More finance and accounting apps.
Xero and Arc0, answered.
Can I use Xero with Claude, ChatGPT or Cursor?
Yes. Connect Xero to Arc0 once, then add your Arc0 MCP URL to Claude, ChatGPT, Cursor, Claude Code or any other remote-MCP client. Each assistant only gets the Xero actions you allow.
How do users connect Xero?
Users sign in to Xero on Arc0 Connect and approve the scopes you request. Build with Arc0’s Xero OAuth app, or bring your own so the Xero consent screen names you. Tokens refresh automatically, and you can export them whenever you want.
Which Xero actions can my agent take?
53 in total: 36 read, 17 write and 0 destructive, such as “create Item”. Your policies decide which of them each agent may call.
Can I make my agent read-only in Xero?
Yes. Allow read actions and deny writes in the Xero policy. Your agent can still look things up, and any write it attempts is blocked and logged.
Can my own backend call Xero too?
Yes. The same Xero connection is available over REST and through the Arc0 proxy, so your product and your agent share one connection per user.
Plug Xero into your agent.
Your users connect Xero once, under your brand. Your agent gets 53 actions behind your policies, with every call on the record.
Free to build · MCP + REST · Audit log on every plan