How data moves
Your chosen AI client ↔ Meridian connector ↔ Xero API
You create a Meridian account through the secure sign-in page, then authorize Xero on Xero's website; the connector does not ask for your Xero password. Xero credentials stay on the connector's server, not in the AI client. The client receives separate connector credentials.
The connector acts on requests, not a scheduled ledger sync. Connecting does not import a local copy of your books. Encrypted credentials, short-lived results, and operational records support access and safe retries. See our Privacy Policy for data handling details.
Getting started
- Open setup and create or log in to your Meridian account.
- Connect Xero, select local read-only or read-write access, and select the organization in Xero's authorization screen.
- Follow the Claude or ChatGPT and Codex instructions, then approve that client's access.
- Ask the agent to list your connected organizations and confirm the intended organization before requesting accounting work.
Organizations and access
Xero authorization requests the accounting permissions needed for the connector's read and write capabilities. Each organization's local mode separately controls whether this connector may write to it. Read-write is selected by default; choose read-only if you only want to retrieve information.
A write needs all of: the organization's local read-write mode, the client's write permission, and sufficient Xero permissions. Existing client grants also cover organizations you connect later, subject to these controls.
There is no global company selector in a conversation. The agent calls list-organisations and supplies the returned organisation_id with each request when multiple organizations are connected. Ask it to name the organization before writing. Work across two organizations is not an atomic transaction.
Working with records
Read and create or update supported invoices, credit notes, quotes, contacts, items, bank transactions, and manual journals; retrieve reports and record payments. Ask the agent to look up existing records and use their exact identifiers, not guessed account codes or partial names.
For a payment, first list accounts and choose an active bank account or an active account with payments enabled. Recording a payment updates accounting records; it does not transfer money or reconcile a bank-feed line.
Use tax rates from Xero or, where the tool permits omission, omit TaxType to use the account's default. The connector does not calculate exchange rates or taxes itself. Ask for the currency, tax treatment, totals, and any native Xero warnings, then open the returned Xero record link to check the result.
Example: “In my demo organization, list the active accounts and tax rates. Help me choose the right ones, then create a draft invoice and show me its ID, currency, tax, total, and Xero link.”
Mutations require an operation ID. To retry the same intended operation, the agent must reuse the same ID and identical inputs; a new ID may create another record. Some actions also require explicit confirmation. Review the proposed action before confirming.
Disconnect and reconnect
Open Organizations and disconnect the specific organization. Signing out only ends the browser session; it does not disconnect Xero or revoke an agent's access.
You can also remove the connector in Xero's Connected apps settings. Return to Organizations to refresh the connection status and follow the reconnect instructions. Reconnecting may require choosing the organization in Xero again.
To remove just an AI client's access, disconnect it in that client's connector settings. To fully stop access to an organization through this connector account, disconnect that organization here too.
Troubleshooting
- Reconnect required
- Open Organizations and reconnect using the intended Xero identity. Do not repeatedly retry a write with new operation IDs.
- Permission denied or read-only organization
- Check the local organization mode, the client's granted access, and your role in Xero. A connector permission cannot grant a permission your Xero user lacks.
- Invalid account, contact, tax rate, or other accounting input
- Read Xero's returned reason. List current records, choose valid identifiers, and correct the request. Do not invent substitute accounts or silently change amounts.
- Rate limit or temporary Xero failure
- Wait for the suggested retry interval. Narrow large requests by date or other supported filters. If a write's outcome is uncertain, check Xero before retrying.
- A large result or incomplete list
- Follow the tool's page parameters until complete. Oversized results may be delivered through a short-lived download; ask again if it expires.
- Wrong signed-in account
- Check the identity shown on Organizations and sign in using the Xero account with the required access.
Limits and support
Payroll, attachments, fixed assets, general journals, bank-feed reconciliation, and arbitrary deletion are not enabled in the hosted tool catalog. A tool can only do what Xero's API and your permissions allow. Agents can make mistakes; inspect consequential accounting changes in Xero.
For help, email xero-mcp@pilot.com with the time, tool name, and request or correlation ID if available. Do not send passwords, access tokens, or full accounting exports. See also the FAQ.