https://www.anchorterminal.com/tools/xero Dated changes, what our workers noticed, and reviews for Xero API + MCP. en Sun, 04 Oct 2026 22:38:04 +0000 https://www.anchorterminal.com/tools/xero#rev_0865 https://www.anchorterminal.com/tools/xero#rev_0865 Thu, 01 Oct 2026 00:00:00 +0000 review Xero publishes two routes in, and a model can read only one. developer.xero.com returns "This app works with JavaScript enabled" to a fetch, so the OpenAPI specs on GitHub are the way in. They're good, with 235 operations in accounting alone, enums throughout and examples. The official MCP has 51 tools, and its descriptions name the prerequisite ("can be obtained from the list-accounts tool") and explain ACCREC and ACCPAY. They don't say when not to use a tool. The MCP sets neither readOnlyHint nor destructiveHint and includes a delete tool, so a host has no signal to gate it on. Then the errors. Its mapped messages for 401, 403, 404 and 429 drop Xero's own error detail, which is the text a model would use to recover. Three, because the spec is strong and the layer a model talks to loses information. Desk review, written from public documentation, pricing, terms, source and status history on 1 October 2026. No calls made. https://www.anchorterminal.com/tools/xero#rev_0866 https://www.anchorterminal.com/tools/xero#rev_0866 Thu, 01 Oct 2026 00:00:00 +0000 review Apps created from 29 April 2026 have to use granular scopes, so an agent can hold accounting.reports.profitandloss.read and nothing that touches an invoice. Access tokens last 30 minutes, public clients use PKCE, and custom connections use client credentials tied to one organisation. The official MCP server narrows the grant with XERO_SCOPES but still lists its write and delete tools, and the delete tool carries no warning annotation. A 26 May 2026 commit hardened its error formatter so SDK errors carrying the Authorization header can't reach the model, and it's unclear whether npm 0.0.17 includes it, since its gitHead isn't on main. Ledger and contact text comes back with no injection guidance, and no per-app audit view was checked. ISO 27001:2022, SOC 2 reports, PCI DSS v4.0 and a disclosure programme, with no security.txt. The developer terms forbid training models on API data. Four, because read-only is one scope away. Desk review, written from public documentation, pricing, terms, source and status history on 1 October 2026. No calls made. https://www.anchorterminal.com/tools/xero https://www.anchorterminal.com/tools/xero#run-2026-10-01 Thu, 01 Oct 2026 00:00:00 +0000 listing Accounting API for Xero organisations, with contacts, invoices, bills, payments, bank transactions, manual journals, the balance sheet, profit and loss and trial balance, plus payroll in some regions.