Skip to main content
Let your agents read your Xero organisation, contacts, invoices, payments, bank transactions, credit notes and financial reports, and create contacts, invoices and payments. Every accounting action takes the tenant_id returned by list_connections.

Connection

  • Authentication: OAuth 2.0 — you authorize Atako via Xero’s consent screen; no key to copy.
  • Scopes requested:
    • offline_access
    • accounting.settings.read
    • accounting.contacts
    • accounting.invoices
    • accounting.payments
    • accounting.banktransactions.read
    • accounting.reports.profitandloss.read
    • accounting.reports.balancesheet.read
    • accounting.reports.aged.read
Nothing to paste: click Connect and approve Atako in your Xero account, choosing the organisation(s) to share. Prerequisite on the Atako side — an administrator creates a Xero app (Developer Portal https://developer.xero.com/app/manage → New app → Web app), sets the redirect URI to ${API_URL}/integrations/oauth/callback, generates a Client secret, and puts the Client ID and Client Secret in INTEGRATION_OAUTH_XERO_CLIENT_ID / _CLIENT_SECRET. An uncertified Xero app can connect at most 25 organisations — beyond that the app must be certified through the Xero App Partner program.See Xero’s documentation.

Read actions (13)

Write actions (5)

Permissions

Every action above must be explicitly granted to an agent before it can be used. See Permissions for the grant model and Security for how credentials are protected.