Skip to content
Demiton

Xero

Stable Connected tier

Xero is a cloud accounting platform. Demiton reads financial data from Xero and can post invoices and contacts back via governed workflows.

Authentication: OAuth 2.0 (authorisation code flow)
System type: XERO
API reference: Xero Accounting API

Supported resources

ResourceFETCHPUSH
Invoice✓✓
Contact✓✓
Payment✓
Account✓
BankTransaction✓
PurchaseOrder✓
Item✓
CreditNote✓
TrackingCategory✓
Journal✓
TaxRate✓
Organisation✓
Reports/ProfitAndLoss✓
Reports/BalanceSheet✓
Reports/CashSummary✓
Reports/TrialBalance✓
Reports/BudgetSummary✓
Reports/AgedReceivablesByContact✓
Reports/AgedPayablesByContact✓
Budget✓

Integration model

Authentication uses Xero’s standard OAuth 2.0 authorisation code flow - during connection setup you’ll be redirected to Xero to authorise access. Tokens are rotated automatically by the adapter.

Writes are limited to Invoice and Contact resources. All other resources are read-only.

Connection setup

Xero uses OAuth 2.0 - no API key is needed. During connection setup:

  1. Enter your Xero app’s Client ID and Client Secret (from developer.xero.com)
  2. Click Create Connector - you’ll be redirected to Xero to authorise
  3. After authorising, Demiton stores the token and begins discovery

Security

Access type: Read and governed write (Invoices and Contacts only)

Demiton reads the full range of Xero accounting data. Writes are limited to Invoice and Contact creation/updates through governed workflows with approval gates.

Permissions required: Xero OAuth app with the minimum scopes your workflows need - typically accounting.transactions, accounting.contacts, and accounting.reports.read.

What Demiton does not touch: Xero user accounts and access control remain owned by Xero. Demiton never modifies Xero user permissions.

Data sensitivity: Xero financial data is classified as financial domain - restricted to users with appropriate ERP access or project-level allocation.

Next steps