Calls without X-API-Key need no key. Calls with it need a paid plan — get a key.
Get an API key
Free tier, no form to fill in. Signing in shares your email address with us — we
store it to create your key and to recognise you if you sign in with another
provider. See our Privacy Policy and
Terms.
openapi: 3.2.0
info:
title: Boxkite Agent Organisations API
version: 0.1.0-draft
x-api-key-url: 'https://app.getboxkite.com/settings/api-keys — sign in and create a key (shown once), then send it as ''Authorization: Bearer <key>''.'
description: 'Programmatic, read-only export of a user''s Xero data as a ZIP plus a manifest.json and an Info/ file-to-object mapping. Boxkite only requests read-only Xero scopes, so an export can never modify the user''s books — it is safe to complete end to end. start_export returns a Stripe checkoutUrl for the one-off payment (49 USD per organisation): open it in a browser and complete payment, then poll the export and download it.'
contact:
email: hello@getboxkite.com
url: https://www.getboxkite.com/agents
license:
name: Terms
url: https://www.getboxkite.com/terms
servers:
- url: https://app.getboxkite.com/api/v1
description: Production
security:
- bearerAuth: []
tags:
- name: Organisations
paths:
/organisations:
get:
operationId: listOrganisations
summary: List the Xero organisations connected to the authenticated account.
responses:
'200':
description: Connected organisations (empty if Xero is not connected yet).
content:
application/json:
schema:
type: array
items:
$ref: '#/components/schemas/Organisation'
'401':
description: Missing or invalid credentials.
tags:
- Organisations
components:
schemas:
Organisation:
type: object
properties:
id:
type: string
name:
type: string
status:
type: string
enum:
- connected
- disconnected
securitySchemes:
bearerAuth:
type: http
scheme: bearer
description: Boxkite API key created at https://app.getboxkite.com/settings/api-keys (sign in first; shown once), sent as a bearer token. OAuth 2.1 access tokens are also accepted for the MCP server.