Xero · Authentication Profile

Xero Authentication

Authentication

Xero secures its APIs with http and oauth2 across 2 declared security schemes, as derived from its OpenAPI definitions. OAuth 2.0 is offered via the authorizationCode flow(s).

AccountingBank FeedsFinanceFinancial ServicesInvoicingPayrollSmall Business
Methods: http, oauth2 Schemes: 2 OAuth flows: authorizationCode API key in:

Security Schemes

OAuth2 oauth2
· flows: authorizationCode
BasicAuth http
scheme: basic

Source

Authentication Profile

Raw ↑ 
generated: '2026-07-11'
method: derived
source: openapi/xero-accounting-openapi.yml, openapi/xero-assets-openapi.yml, openapi/xero-bankfeeds-openapi.yml,
  openapi/xero-files-openapi.yml, openapi/xero-finance-openapi.yml, openapi/xero-identity-openapi.yml,
  openapi/xero-payroll-au-openapi.yml, openapi/xero-payroll-nz-openapi.yml, openapi/xero-payroll-uk-openapi.yml,
  openapi/xero-projects-openapi.yml
summary:
  types:
  - http
  - oauth2
  oauth2_flows:
  - authorizationCode
schemes:
- name: OAuth2
  type: oauth2
  flows:
  - flow: authorizationCode
    authorizationUrl: https://login.xero.com/identity/connect/authorize
    tokenUrl: https://identity.xero.com/connect/token
    scopes: 16
  description: For more information
  sources:
  - openapi/xero-accounting-openapi.yml
  - openapi/xero-assets-openapi.yml
  - openapi/xero-bankfeeds-openapi.yml
  - openapi/xero-files-openapi.yml
  - openapi/xero-finance-openapi.yml
  - openapi/xero-identity-openapi.yml
  - openapi/xero-payroll-au-openapi.yml
  - openapi/xero-payroll-nz-openapi.yml
  - openapi/xero-payroll-uk-openapi.yml
  - openapi/xero-projects-openapi.yml
- name: BasicAuth
  type: http
  scheme: basic
  sources:
  - openapi/xero-identity-openapi.yml