Xero
by Xero
Ask your AI assistant about a Xero organisation's profit, cash position, aged receivables and payables, invoices and top customers. Read-only on Xero's own word and corroborated by its OAuth scopes, and scoped to one organisation you pick at sign-in.
Verified connector
Listed by Anthropic as a partner connector in its Connectors Directory.
Connection checked by Agentman on .
Anthropic states this reflects the level of review a connector received, not a security audit.
Connect Xero via MCP
https://mcp.xero.com/mcpWorks in any MCP-compatible client. In Agentman Studio it is one click — no config file to edit.
Xero Tools & Capabilities (11)
Tool names from Anthropic's directory listing. This server requires sign-in, so we could not read tool descriptions or parameter schemas.
Limits
- Read-only, and the wire agrees with the vendor. Xero states the connector is read-only at launch with no write actions. Every accounting report and invoice scope advertised ends
.read. The one un-suffixed scope isaccounting.settings, which covers organisation settings rather than transactions; no tool name is settings-shaped, but we flag it rather than dismiss it. - "At launch" is Xero's own qualifier. Xero describes the read-only property as the state at launch. That is a statement about today, not a permanent commitment, and re-checking the scopes is how you would notice a change.
- One organisation per connection, and switching is undocumented. Xero documents choosing an organisation at sign-in and nothing about changing it afterwards. Practice users with many client organisations should not assume a portfolio workflow works.
- Summaries, not the ledger. No transaction-level tool, no journals, no bank transactions. Xero points detail work back into Xero, and its scope set requests report endpoints only.
- Counterparty names are in scope. Aged receivables and payables are reported by contact, and
get_contactsandget_top_customers_by_revenuename customers. For sole traders that means individuals. - Not advice, and not a replacement for a human. Xero states the connector is not a source of tax, compliance or financial advice and does not replace your accountant, bookkeeper or JAX. We carry that unsoftened and offer no accounting or tax view of our own.
- Xero remains the source of truth. Xero states this directly and links every answer back to the originating report, invoice or contact so you can check the detail before you act. Treat a connector answer as a prompt to verify, not as a filed figure.
- Session-scoped data. Xero states the connection is read-only and session-only, that data is never used to train AI models, and Anthropic's listing states retrieved data is never stored between sessions.
- Two tools we cannot tell apart. Neither vendor documents
get_invoicesversusshow_invoices_summary. - Do not confuse this with Xero's self-hosted MCP server. That separate developer package documents 49 tools including creates, updates and deletes. It is not what the Connect button installs.
- We could not verify tool behaviour ourselves. The endpoint returns 401 to an anonymous handshake, so no schemas and no safety annotations were readable. Tools are not annotated as far as we can confirm — we infer nothing from the names alone.
- Xero's own setup article was unreadable to us. The documentation URL in Anthropic's directory is a Salesforce Experience Cloud page that returns a JavaScript shell to every client we tried, including browser and crawler user agents; its knowledge API and sitemap both redirect to a login. Role requirements and admin-approval behaviour are the gaps that leaves.
- Prompts are unconfirmed. Anthropic's snapshot lists no prompt names, and the gated endpoint blocked our own check.
Frequently asked questions
Can the Xero connector change my books?
No. Xero states the connector is read-only at launch, that Claude has no write actions, and that your books stay exactly as they are. The OAuth scopes corroborate it on the wire: every accounting report and invoice scope the server advertises ends in `.read`. Anthropic's directory also labels the connector Read, and its own description says read-only access.
Can the Xero connector see more than one organisation?
No. Xero documents choosing the organisation you want as a step in connecting, and the connection is made against that organisation. Xero's Accounting API identifies an organisation per request by tenant, so the token you grant is bound to what you picked. Xero does not document how to switch organisations after connecting, so treat a connected session as single-entity.
What do the Xero profit and loss and aged reports return?
Summary financial reports rather than the underlying ledger. Xero describes the connector as surfacing financial summaries with flexible date ranges and year-over-year comparisons, and points you back to Xero for deeper analysis. Aged receivables and payables in Xero are reported by contact, so real customer and supplier names reach the model alongside outstanding balances.
What is the difference between get_invoices and show_invoices_summary?
Xero does not document the distinction, and we did not authenticate, so we cannot state it. Anthropic lists both names and labels the connector Interactive as well as Read, which is how connectors that render visual output are marked. The naming suggests one returns data and one renders a summary view, but that is inference, not documentation.
Do I need a developer account or API key for the Xero connector?
No. Xero states there is no developer setup or API work required — you sign in with your ordinary Xero login. You need an active Xero subscription and a Claude account on a free or paid plan, and Xero does not charge for the connector. That is a different product from Xero's self-hosted MCP server, which does need developer credentials.
Is the Xero MCP server the same as the Xero connector in Claude?
No, and Xero draws the line itself: the connector is the read-only way to get answers in Claude, while the Xero MCP server is a developer tool for custom workflows and automations. The self-hosted server on Xero's GitHub documents 49 tools, 23 of which create, update, approve or delete records. The hosted connector exposes 11 read tools.
Can I rely on the numbers Claude reads from Xero?
Check them in Xero before acting. Xero says the connector is not a source of tax, compliance or financial advice and does not replace your accountant or bookkeeper, and that Xero stays the source of truth. It links every answer back to the report, invoice or contact it came from so you can verify the detail before you act.
Sources
- Xero Claude connector page — https://www.xero.com/campaign/claude-connector/ (fetched 2026-08-19; also served at https://www.xero.com/us/ai-in-accounting/claude/ and https://www.xero.com/uk/ai-in-accounting/claude/, which differ only in spelling and regional offers) · retrieved 2026-08-19
- Xero media release, Xero Delivers Claude Integration to Advance AI-Powered Financial Intelligence, published 13 May 2026 — https://www.xero.com/us/media-releases/xero-delivers-claude-integration-to-advance-ai-powered-financial-intelligence/ (fetched 2026-08-19) · retrieved 2026-08-19
- Xero self-hosted MCP server README — https://raw.githubusercontent.com/XeroAPI/xero-mcp-server/main/README.md (fetched 2026-08-19; 49 tools listed, 23 of them write-shaped by our count) · retrieved 2026-08-19
- Anthropic connector page for Xero — https://claude.com/connectors/xero (fetched 2026-08-19; capabilities shown as Read and Interactive) · retrieved 2026-08-19
- Xero OAuth 2.0 scopes reference — https://developer.xero.com/documentation/guides/oauth2/scopes/ (attempted 2026-08-19; returns HTTP 200 but is fully client-rendered and yielded no scope text, so the
.read-variant convention is carried from secondary descriptions, not from Xero's page) · retrieved 2026-08-19 - Xero Central setup article, the URL named in Anthropic's directory — https://central.xero.com/s/article/Connect-Xero-using-the-Xero-connector-in-Claude (attempted 2026-08-19 with browser, Googlebot and Bingbot user agents and via a reader proxy; a Salesforce Experience Cloud JavaScript shell every time. Its knowledge API and
central.xero.com/sitemap.xmlboth redirect to or return a login, andcentral.xero.com/llms.txtreturns 401) · retrieved 2026-08-19 central.xero.com/robots.txtallows the site to all agents with a per-article deny list that does not include the Claude connector article; noContent-Signalheader is present.developer.xero.com/robots.txtdisallows only/api/;www.xero.com/robots.txtdisallows asset and download paths only (all fetched 2026-08-19) · retrieved 2026-08-19- Live RFC 9728 protected-resource descriptor — https://mcp.xero.com/.well-known/oauth-protected-resource/mcp (fetched 2026-08-19; the root and path-insert forms both return 404
Not Found) · retrieved 2026-08-19 - Live OpenID Connect metadata — https://identity.xero.com/.well-known/openid-configuration (fetched 2026-08-19; both
oauth-authorization-serverforms onmcp.xero.comreturn 404) · retrieved 2026-08-19 - Live anonymous probe — 2026-08-19: an
initializerequest to the endpoint returns HTTP 401Jwt is missingwithwww-authenticate: Bearer realm="https://mcp.xero.com/mcp"· retrieved 2026-08-19 - Xero privacy notice — https://www.xero.com/legal/privacy/ · Support — https://central.xero.com/0/
- Anthropic connector directory — https://claude.ai/directory/4c1fcb68-c482-46c5-a677-659eaf2f2c85 (snapshot 2026-08-16) · retrieved 2026-08-16
Use in Agentman
Connect once and your agents call these tools on their own — on a schedule, in a workflow, with nobody at the keyboard.
Open in Agentman StudioServer Info
- Category
- Finance
- Developer
- Xero
- Tools
- 11
- Domain
- mcp.xero.com
Using Claude Desktop or another MCP client? Setup docs — the connection URL above works anywhere.