Integration · Xero

Connect Xero to Kroy.

Give authorised AI and Kroy workflows controlled access to the Xero information and actions they need.

Available
Connect Xero to Kroy

Xero + Kroy

Connect Xero once. Use it safely with any AI.

  1. Xero, where it already is.

    Xero stays the authoritative record. Nothing moves, and nothing is copied that doesn’t need to be.

  2. Xero connects to Kroy.

    OAuth 2. Kroy holds the connection.

  3. Your AI connects to Kroy.

    Claude, ChatGPT or another AI connects to Kroy — not to Xero. It never receives Xero credentials.

  4. Exactly what is allowed.

    Each Xero action is a Kroy capability; approve invoice waits for a person by default. Payroll is excluded by default and is not planned for the first release.

  5. A real request.

    Claude asks for read contacts. Kroy checks the person, the agent and the policy, calls Xero, and records the request.

Xero
Kroy
Claude
Priya Client manager
AUDIT

Xero capabilities

  • ✓xero.contacts.read
  • ✓xero.invoices.read
  • ✓xero.bills.read
  • ✓xero.invoices.draft_create
  • !xero.invoices.approve
  • ✕Payroll is excluded by default and is…
Xero
Kroy
Claude
Priya Client manager
AUDIT

Xero capabilities

  • ✓xero.contacts.read
  • ✓xero.invoices.read
  • ✓xero.bills.read
  • ✓xero.invoices.draft_create
  • !xero.invoices.approve
  • ✕Payroll is excluded by default and is…

Supported resources

  • Organisations
  • Contacts
  • Invoices
  • Bills
  • Bank transactions (read)
  • Reports (profit and loss, balance sheet, aged receivables)

Authentication

OAuth 2.0 with Xero. The connection is held by Kroy; AI clients never receive Xero tokens.

Supported actions

CapabilityTypeDefault
xero.contacts.read
Read contacts		readPolicy
xero.invoices.read
Read invoices		readPolicy
xero.bills.read
Read bills		readPolicy
xero.reports.read
Read reports		readPolicy
xero.invoices.draft_create
Create draft invoice		writePolicy
xero.invoices.approve
Approve invoice		writeHuman approval

Events

xero.invoice.createdxero.invoice.paid

Overview

Xero stays the authoritative record. Kroy connects to it so that authorised AI — Claude, ChatGPT and others — can use Xero data and actions without each AI holding its own Xero access.

Permissions

Each Xero action is a Kroy capability. Kroy decides every request against the person, the agent, the delegation between them and the organisation’s policies. Actions that change financial records can require human approval.

Industries

Accountancy practices can map staff to the client organisations they work on, so an AI acting for a manager sees that manager’s clients only.

Security

Kroy holds the Xero connection. Revoking an AI’s access to Kroy removes its access to Xero at the same moment. Every request is recorded.

Limitations

  • Payroll is excluded by default and is not planned for the first release.
  • Bank details cannot be changed through Kroy.
  • Actions are subject to Xero’s own API rate limits.