xero_api_integration_skill

Overview

This skill provides a secure, read-only Xero API integration for extracting organization data, chart of accounts, transactions, reports, assets, and contacts. It uses OAuth 2.0 with minimal read scopes and enforces strict non-destructive behavior: the skill never modifies Xero data. The extraction output is structured for accounting analysis and downstream processing.

How this skill works

Authenticate via OAuth 2.0 to obtain an access token and tenant ID, then call Xero read endpoints to collect organization info, accounts, reports, transactions, assets, and contacts. The skill paginates transactional endpoints, caches report responses, and refreshes tokens as needed while observing rate limits. All responses are normalized into a consistent XeroExtraction structure for analysis.

When to use it

• Building financial dashboards or analytics from Xero data
• Running audits or chart of accounts reviews without changing source data
• Generating trial balance, profit & loss, or balance sheet reports programmatically
• Extracting bank transactions, invoices, payments, and manual journals for reconciliation
• Exporting fixed asset registers and depreciation schedules for review

Best practices

• Request only the minimal read scopes required and treat access as read-only
• Encrypt tokens at rest, never log raw tokens, and store refresh tokens securely
• Implement exponential backoff and honor rate-limit headers (60/min, 4 concurrent, 5k/day)
• Cache stable report responses and use pagination for large transaction sets
• Validate tenant access and handle token refresh and revocation gracefully

Example use cases

• Pull FY trial balance and profit & loss to populate a financial model
• Aggregate bank transactions and invoices for automated reconciliation workflows
• Extract chart of accounts to map to a consolidated chart for multi-entity reporting
• Export fixed asset register for depreciation audit or migration
• Collect contacts and payments for supplier or customer analytics