Connect
Optimize
Secure
Xero MCP Server
for AI Agents
Production-ready Xero MCP server with 71 extensible actions — plus built-in authentication, security, and optimized execution.
Xero MCP Server
Built by 
StackOne
StackOne 
Coverage
71 Agent Actions
Create, read, update, and delete across Xero — and extend your agent's capabilities with custom actions.
Authentication
Agent Tool Authentication
Per-user OAuth in one call. Your Xero MCP server gets session-scoped tokens with zero credentials stored on your infra.
Agent Auth →
Security
Agent Protection
Every Xero tool response scanned for prompt injection in milliseconds — 88.7% accuracy, all running on CPU.
Prompt Injection Defense →
Performance
Max Agent Context. Min Cost.
Free up to 96% of your agent's context window to enhance reasoning and reduce cost, on every Xero call.
Tools Discovery →What is the Xero MCP Server?
A Xero MCP server lets AI agents read and write Xero data through the Model Context Protocol — Anthropic's open standard for connecting LLMs to external tools. StackOne's Xero MCP server ships with 71 pre-built actions, fully extensible via the Connector Builder — plus managed authentication, prompt injection defense, and optimized agent context. Connect it from MCP clients like Claude Desktop, Cursor, and VS Code, or from agent frameworks like OpenAI Agents SDK, LangChain, and Vercel AI SDK.
All Xero MCP Tools and Actions
Every action from Xero's API, ready for your agent. Create, read, update, and delete — scoped to exactly what you need.
Accounts
- Create Account
Create a new account in the chart of accounts
- List Accounts
Retrieve the chart of accounts
- Get Account
Retrieve a single account by ID
- Update Account
Update an existing account
- Delete Account
Delete an account from the chart of accounts
Bank Transactions
- Create Bank Transaction
Create a spend or receive money bank transaction
- List Bank Transactions
Retrieve a list of bank transactions
- Get Bank Transaction
Retrieve a single bank transaction by ID
- Update Bank Transaction
Update an existing spend or receive money transaction
- Delete Bank Transaction
Delete a spend or receive money transaction
Contacts
- Create Contact
Create a new contact
- List Contacts
Retrieve a list of contacts with optional filtering and pagination
- Get Contact
Retrieve a single contact by ID
- Update Contact
Update an existing contact
Credit Notes
- Create Credit Note
Create a credit note
- List Credit Notes
Retrieve a list of credit notes
- Get Credit Note
Retrieve a single credit note by ID
- Update Credit Note
Update an existing credit note
Employees
- Create Employee
Create a new employee
- List Employees
Retrieve a list of employees
- Get Employee
Retrieve a single employee by ID
Invoices
- Create Invoice
Create one or more invoices
- List Invoices
Retrieve a list of invoices with optional filtering and pagination
- Get Invoice
Retrieve a single invoice by ID
- Update Invoice
Update an existing invoice
Items
- Create Item
Create a new item (product/service)
- List Items
Retrieve a list of items (products/services)
- Get Item
Retrieve a single item by ID or Code
- Update Item
Update an existing item
- Delete Item
Delete an item
Journals
- List Journals
Retrieve a list of journals
- Get Journal
Retrieve a single journal by ID or number
Manual Journals
- Create Manual Journal
Create a new manual journal
- List Manual Journals
Retrieve a list of manual journals
- Get Manual Journal
Retrieve a single manual journal by ID
- Update Manual Journal
Update an existing manual journal
Payments
- Create Payment
Create a payment for an invoice, credit note, prepayment, or overpayment
- List Payments
Retrieve a list of payments
- Get Payment
Retrieve a single payment by ID
- Delete Payment
Delete (reverse) a payment
Purchase Orders
- Create Purchase Order
Create a new purchase order
- List Purchase Orders
Retrieve a list of purchase orders
- Get Purchase Order
Retrieve a single purchase order by ID or number
- Update Purchase Order
Update an existing purchase order
Quotes
- Create Quote
Create a new quote
- List Quotes
Retrieve a list of quotes
- Get Quote
Retrieve a single quote by ID
- Update Quote
Update an existing quote
Tax Rates
- List Tax Rates
Retrieve a list of tax rates
- Get Tax Rate
Retrieve a tax rate by tax type
Tracking Categorys
- Create Tracking Category
Create a new tracking category
- Get Tracking Category
Retrieve a single tracking category by ID
- Update Tracking Category
Update an existing tracking category
- Delete Tracking Category
Delete a tracking category
Tracking Options
- Create Tracking Option
Create a new tracking option within a category
- Update Tracking Option
Update an existing tracking option
- Delete Tracking Option
Delete a tracking option
Users
- List Users
Retrieve a list of users
- Get User
Retrieve a single user by ID
Other (12)
- List Companies
List all companies (organisations) connected to the Xero account
- Get Online Invoice URL
Retrieve the online invoice URL for a sales invoice
- Get Organisation
Retrieve organisation details
- Get Balance Sheet
Retrieve the Balance Sheet report
- Get Profit And Loss
Retrieve the Profit and Loss report
- Get Trial Balance
Retrieve the Trial Balance report
- Get Aged Receivables
Retrieve the Aged Receivables by Contact report
- Get Aged Payables
Retrieve the Aged Payables by Contact report
- Get Bank Summary
Retrieve the Bank Summary report
- Get Budget Summary
Retrieve the Budget Summary report
- Get Executive Summary
Retrieve the Executive Summary report
- List Tracking Categories
Retrieve a list of tracking categories
Set Up Your Xero MCP Server in Minutes
One endpoint. Any framework. Your agent is talking to Xero in under 10 lines of code.
MCP Clients
Agent Frameworks
JSON{
"mcpServers": {
"stackone": {
"command": "npx",
"args": [
"-y",
"mcp-remote@latest",
"https://api.stackone.com/mcp?x-account-id=<account_id>",
"--header",
"Authorization: Basic <YOUR_BASE64_TOKEN>"
]
}
}
}More Accounting MCP Servers
Chargify (Maxio)
118+ actions
Zoho Books
104+ actions
QuickBooks Online
95+ actions
Microsoft Dynamics 365 Business Central
70+ actions
Fastbill
57+ actions
Plaid
30+ actions
Expensify
15+ actions
Xero MCP Server Resources
MCP Code Mode: Keeping Tool Responses Out of Agent Context
Anthropic's code_execution processes data already in context. Custom MCP code mode keeps raw tool responses in a sandbox. 14K tokens vs 500.
11 min
Comparing BM25, TF-IDF, and Hybrid Search for MCP Tool Discovery
Benchmarking BM25, TF-IDF, and hybrid search for MCP tool discovery across 916 tools. The 80/20 TF-IDF/BM25 hybrid hits 21% Top-1 accuracy in under 1ms.
10 min
Indirect Prompt Injection Defense for MCP Tools: A Technical Guide
MCP tools that read emails, CRM records, and tickets are indirect prompt injection vectors. Here's how we built a two-tier defense that scans tool results in ~11ms.
12 min
Xero MCP Server FAQ
Xero MCP server vs direct API integration — what's the difference?
A Xero MCP server and direct API integration serve different use cases. Direct API integration is for software-to-software — backend code calling Xero. A Xero MCP server is for AI agents — MCP clients like Claude and Cursor, plus framework agents built with OpenAI, LangChain, or Vercel AI — discovering and calling Xero at runtime. StackOne provides both.
How does Xero authentication work for AI agents?
Xero authentication for AI agents works through a StackOne Connect Session. Create one via the dashboard or the SDK — you get an auth link and ready-to-paste config for Claude Desktop, Cursor, and other MCP clients. Your user authenticates their own Xero account; StackOne handles token exchange, storage, and refresh. Credentials never reach the LLM, and each user is isolated via
origin_owner_id.Are Xero MCP tools vulnerable to prompt injection?
Yes — Xero MCP tools can be vulnerable to indirect prompt injection. Any tool that reads user-written content — documents, messages, tickets, records, or free-text fields — is a potential vector. StackOne Defender scans every tool response before it enters the agent's context — regex patterns in ~1ms, then a MiniLM classifier in ~4ms. 88.7% accuracy, CPU-only.
What is the context bloat of a Xero agent and how do I avoid it?
Context bloat happens when Xero tool schemas and API responses eat your Xero agent's memory, preventing it from reasoning effectively. A single Xero query can return a massive JSON response, and connecting multiple tools compounds the problem. Tools Discovery and Code Mode reduce context bloat — loading only relevant tools per query and keeping raw responses out of the agent's context.
Can I limit which actions my Xero agent can access?
Yes — you can limit which actions your Xero agent can access directly from the StackOne dashboard. Toggle actions on or off, or restrict them to specific accounts, with no code changes to your agent. Session tokens can be scoped to exact actions so if one leaks, exposure stays contained.
Can I create custom agent actions for my Xero MCP server?
Yes — you can create custom agent actions for your Xero MCP server using Connector Builder. It's an integration agent your coding assistant (Claude Code, Cursor, or Copilot) can invoke to research Xero's API, generate production-ready connector YAML, test against the live API, and validate before you ship.
When should I NOT use a Xero MCP server?
Skip a Xero MCP server if your integration is purely software-to-software — direct Xero API integration is simpler when no AI agent is involved. For deterministic, compliance-critical operations (financial transactions, regulatory reporting), direct API gives you predictable behavior without agent-driven decision-making. MCP shines when AI agents need to dynamically discover and call Xero actions at runtime.
What AI frameworks and AI clients does the StackOne Xero MCP server support?
The StackOne Xero MCP server supports both. MCP clients (paste-and-go apps): Claude Desktop, Claude Code, Cursor, VS Code, Goose. Agent frameworks (code SDKs you build with): OpenAI Agents SDK, Anthropic, Vercel AI, Google ADK, CrewAI, Pydantic AI, LangChain, LangGraph, Azure AI Foundry.
Put your AI agents to work
All the tools you need to build and scale AI agent integrations, with best-in-class connectivity, execution, and security.