Xero · OAuth Scopes
Xero OAuth Scopes
OAuth 2.0
searched
Xero publishes 68 OAuth 2.0 scopes via the authorizationCode and clientCredentials flows. Scopes are the fine-grained permissions an application requests at authorization time to act against the Xero API on a user’s behalf.
Tokens are issued from https://identity.xero.com/connect/token.
This index is generated from the provider’s OpenAPI security definitions (and, where available, its documented scope reference) and refreshes on every APIs.io network build. Browse every provider’s scopes at scopes.apis.io.
AccountingBank FeedsFinanceFinancial ServicesInvoicingPayrollSmall Business
Scopes: 68
Flows: authorizationCode, clientCredentials
Method: searched
OAuth endpoints
Authorization URL
https://login.xero.com/identity/connect/authorize
https://login.xero.com/identity/connect/authorize
Token URL
https://identity.xero.com/connect/token
https://identity.xero.com/connect/token
Flows
authorizationCodeclientCredentials
authorizationCodeclientCredentials
Scopes (68)
| Scope | Description | Flows |
|---|---|---|
| accountdata.balances.read | Read general ledger account balances | authorizationCode |
| accountdata.movements.read | Read general ledger account movements | authorizationCode |
| accountdata.transactions.read | Read general ledger account transactions | authorizationCode |
| accounting.attachments | Grant read-write access to attachments | authorizationCode |
| accounting.attachments.read | Grant read-only access to attachments | authorizationCode |
| accounting.budgets.read | Grant read-only access to read budgets | authorizationCode |
| accounting.contacts | Grant read-write access to contacts and contact groups | authorizationCode |
| accounting.contacts.read | Grant read-only access to contacts and contact groups | authorizationCode |
| accounting.journals.read | Grant read-only access to journals | authorizationCode |
| accounting.reports.read | Grant read-only access to accounting reports | authorizationCode |
| accounting.reports.tenninetynine.read | Grant read-only access to 1099 reports | authorizationCode |
| accounting.settings | Grant read-write access to organisation and account settings | authorizationCode |
| accounting.settings.read | Grant read-only access to organisation and account settings | authorizationCode |
| accounting.transactions | Grant read-write access to bank transactions, credit notes, invoices, repeating invoices | authorizationCode |
| accounting.transactions.read | Grant read-only access to invoices | authorizationCode |
| assets | Grant read-write access to fixed assets | authorizationCode |
| assets.read | Grant read-only access to fixed assets | authorizationCode |
| bankfeeds | Grant read-write access to bankfeeds | authorizationCode |
| bankfeedsv2 | Grant read-write access to Bank Feeds Feed Connections 2.0 | authorizationCode |
| Grant read-only access to your email | authorizationCode | |
| files | Grant read-write access to files and folders | authorizationCode |
| files.read | Grant read-only access to files and folders | authorizationCode |
| finance.bankstatementsplus.read | Grant read-only access to bank statements accounting data | authorizationCode |
| finance.cashvalidation.read | Grant read-only access to bank statement and reconcilation data | authorizationCode |
| finance.statements.read | Grant read-only access to finacial statements | authorizationCode |
| marketplace.billing | Grant read-only access to fixed assets | clientCredentials |
| openid | Grant read-only access to your open id | authorizationCode |
| paymentservices | Grant read-write access to payment services | authorizationCode |
| payroll.employees | Grant read-write access to payroll employees | authorizationCode |
| payroll.employees.read | Grant read-only access to payroll employees | authorizationCode |
| payroll.payruns | Grant read-write access to payroll payruns | authorizationCode |
| payroll.payruns.read | Grant read-only access to payroll payruns | authorizationCode |
| payroll.payslip | Grant read-write access to payroll payslips | authorizationCode |
| payroll.payslip.read | Grant read-only access to payroll payslips | authorizationCode |
| payroll.settings | Grant read-write access to payroll settings | authorizationCode |
| payroll.settings.read | Grant read-only access to payroll settings | authorizationCode |
| payroll.timesheets | Grant read-write access to payroll timesheets | authorizationCode |
| payroll.timesheets.read | Grant read-only access to payroll timesheets | authorizationCode |
| profile | your profile information | authorizationCode |
| projects | Grant read-write access to projects | authorizationCode |
| projects.read | Grant read-only access to projects | authorizationCode |
| accounting.invoices | ||
| accounting.invoices.read | ||
| accounting.payments | ||
| accounting.payments.read | ||
| accounting.banktransactions | ||
| accounting.banktransactions.read | ||
| accounting.manualjournals | ||
| accounting.manualjournals.read | ||
| accounting.reports.aged.read | ||
| accounting.reports.balancesheet.read | ||
| accounting.reports.banksummary.read | ||
| accounting.reports.budgetsummary.read | ||
| accounting.reports.executivesummary.read | ||
| accounting.reports.profitandloss.read | ||
| accounting.reports.trialbalance.read | ||
| accounting.reports.taxreports.read | ||
| practicemanager.job | ||
| practicemanager.job.read | ||
| practicemanager.client | ||
| practicemanager.client.read | ||
| practicemanager.staff | ||
| practicemanager.staff.read | ||
| practicemanager.time | ||
| practicemanager.time.read | ||
| einvoicing | ||
| app.connections | ||
| offline_access |
📄 Provider scope reference: https://developer.xero.com/documentation/guides/oauth2/scopes/
Source
OAuth Scopes
Work with this as data
Every scope set here is available over the APIs.io API and to AI agents over MCP.