io.github.codespar/mcp-xero

NPM · @CODESPAR/MCP-XERO · SCANNED AUG 4

MCP server for Xero — global cloud accounting: contacts, invoices, payments, items, reports

Available components

+24 this week 69 69 Trust /100

Trust breakdown (6 categories)

How this component scores in each security and reliability category. Every signal is checked automatically from public evidence about the published package, including repeated runs of it in an isolated sandbox, and we only credit what we can confirm. How we score →

Supply Chain Security86

No malware found by supply-chain analysis.Pass
Only part of the dependency tree could be resolved (94 of 98), so this covers what we could see, not the whole tree.Partial
No install/post-install scripts declared.Pass
Only part of the dependency tree could be resolved (94 of 98), so this covers what we could see, not the whole tree. View diagnostics → Partial

Provenance & Transparency45

Source repository is publicly reachable at the declared URL. View diagnostics → Pass
Provenance check failed: no build-provenance attestation is published. See how to fix → View diagnostics → Fail
Clear OSI-approved license (MIT).Pass
Actively maintained (last published 42 days ago).Pass
Disclosure check failed: no security disclosure policy was found in the source repository. See how to fix → Fail

Schema Quality & AI Usability72

AI-judged instruction clarity (good).Pass
Context-footprint check failed: tool/resource definitions use about 2873 tokens (~119/item across 24 items; 24 tools + 0 resources), over budget; trim descriptions and params. See how to fix → Fail
Usage-examples check failed: none of the tools include examples. See how to fix → Fail

Stability & Change Management30

Stability observed for 9 of 30 days with no destabilising changes; credit accrues until the full window elapses.Partial

Tool Coverage100

100% of tools have a non-trivial description (not blank, and not just the tool's name).Pass
100% of tool parameters carry a description.Pass

Capabilities100

Implements a supported MCP spec version (2025-11-25); the latest is 2026-07-28.Pass

Install

Add this component to your MCP client. Where a client-specific snippet is available, pick your client below and copy it straight into your config; otherwise use the connection detail shown.

npm · @codespar/mcp-xero

Claude Codex opencode OpenClaw Hermes Other

# add to Claude Code

claude mcp add codespar-mcp-xero -- npx -y @codespar/mcp-xero

# add to Codex CLI

codex mcp add codespar-mcp-xero -- npx -y @codespar/mcp-xero

// opencode.json

{
  "$schema": "https://opencode.ai/config.json",
  "mcp": {
    "codespar-mcp-xero": {
      "type": "local",
      "command": [
        "npx",
        "-y",
        "@codespar/mcp-xero"
      ],
      "enabled": true
    }
  }
}

# add to OpenClaw

openclaw mcp add codespar-mcp-xero --command npx --arg -y --arg @codespar/mcp-xero

# ~/.hermes/config.yaml

mcp_servers:
  codespar-mcp-xero:
    command: "npx"
    args: ["-y", "@codespar/mcp-xero"]

// mcp.json

{
  "mcpServers": {
    "codespar-mcp-xero": {
      "command": "npx",
      "args": [
        "-y",
        "@codespar/mcp-xero"
      ]
    }
  }
}

Changelog

Every change we have recorded for this component, newest first. Security-relevant changes are always shown. ▲ marks a change for the better, ▼ a change for the worse; unmarked changes are neutral.

4 Aug 26 +1

No change was recorded against any check on this day. Stability & Change Management went from 27 to 30. That category is still filling its 30-day observation window: 8 days of observed history at the previous scan, 9 at this one. The score rises as the window fills, whether or not the server changes.
2 Aug 26 +43
- Provenance: unverified → fail ▼ security
- Install scripts: unverified → pass ▲ security
- Known CVEs: unverified → partial ▲ security
- Malware scan: unverified → pass ▲ security
- Stability: Stability not yet verified: we do not have a sandbox capture of the MCP schema this version of the package serves yet. security
- Capabilities: pass → unverified ▼ functional
- License: unverified → pass ▲ functional
- Stability: unverified → 0.23 ▲ functional
- Dependency health: unverified → partial ▲ functional
- Maintenance: unverified → pass ▲ functional
- Schema quality: unverified → good ▲ functional
- Licence: MIT functional
1 Aug 26 +5
- Stability: Stability not yet verified: not enough scan history yet (needs a 30-day window). security
- MCP protocol: unverified → pass ▲ functional
31 Jul 26 −25
- We updated how we score, so this day's move reflects our rubric, not a change to the server See what changed → functional
27 Jul 26 45

First indexed and scored.

Show 2 earlier entries Hide earlier entries

Diagnostics

Diagnostic detail from the automated scan of this channel: what the scanner observed at each step, so you can see exactly where a check passed or failed. It is informational only and never changes the trust score.

Captured 4 Aug 2026 · Analysed npm/@codespar/[email protected]

Provenance none

Ecosystem: npm · Outcome: none

Dependencies 94 packages

94 packages in the resolved dependency tree · 94 deprecated · 29 stale.

The dependency tree was only partially resolved, so these counts may be incomplete.

MCP tools — 24 exposed · ~2,806 tokens

The tools this component advertises to a client, with an estimated token cost for each. Expand a tool to see its parameters and schema. The per-tool counts are indicative and are not scored directly; the schema's total context footprint is one signal in Schema Quality & AI Usability.

Tool Tokens

archive_contact ~47

Archive a Xero contact by setting ContactStatus=ARCHIVED. Archived contacts are hidden from default lists but history is preserved.

Input Output Examples

Name	Type	Req	Description
ContactID	string	yes	Xero Contact UUID to archive.

No output schema declared.

No examples provided.

create_bank_transaction ~188

Create a bank transaction (SPEND = money out, RECEIVE = money in) directly on a bank account — for transactions without a matching invoice/bill (fees, transfers, one-off expenses).

Input Output Examples

Name	Type	Req	Description
BankAccount	object	yes	Bank account reference — provide AccountID or Code.
Contact	object	yes	Contact reference — provide ContactID.
CurrencyCode	string	—	ISO-4217 currency code.
Date	string	—	Transaction date YYYY-MM-DD.
IsReconciled	boolean	—	Mark as reconciled on creation.
LineAmountTypes	string	—	Line amount tax treatment.
LineItems	array	yes	Array of line items (Description, Quantity, UnitAmount, AccountCode, TaxType).
Reference	string	—	Free-text reference.
Type	string	yes	Transaction type. SPEND/RECEIVE are the common values.

No output schema declared.

No examples provided.

create_contact ~271

Create a Xero contact (customer or supplier — Xero uses one unified Contact object with IsCustomer/IsSupplier flags inferred from transactions).

Input Output Examples

Name	Type	Req	Description
AccountNumber	string	—	Merchant-side account number for this contact.
Addresses	array	—	Array of address objects with AddressType (POBOX/STREET), AddressLine1..4, City, Region, PostalCode, Country.
ContactNumber	string	—	External system identifier (max 50 chars).
DefaultCurrency	string	—	ISO-4217 currency code used as default on invoices for this contact.
EmailAddress	string	—	Primary email address.
FirstName	string	—	Contact first name (for individuals).
IsCustomer	boolean	—	Hint that this contact is a customer.
IsSupplier	boolean	—	Hint that this contact is a supplier.
LastName	string	—	Contact last name (for individuals).
Name	string	yes	Full name of the contact. Required and must be unique within the tenant.
Phones	array	—	Array of phone objects with PhoneType (DEFAULT/DDI/MOBILE/FAX), PhoneNumber, PhoneAreaCode, PhoneCountryCode.
TaxNumber	string	—	Tax number (VAT, ABN, GST, EIN, etc.) — country-dependent.

No output schema declared.

No examples provided.

create_credit_note ~196

Create a credit note. Type ACCRECCREDIT = credit to a customer (offsets an AR invoice), ACCPAYCREDIT = credit from a supplier (offsets an AP bill).

Input Output Examples

Name	Type	Req	Description
Contact	object	yes	Contact reference — provide ContactID.
CreditNoteNumber	string	—	Merchant credit note number (auto-assigned for ACCRECCREDIT if omitted).
CurrencyCode	string	—	ISO-4217 currency.
Date	string	—	Credit note date YYYY-MM-DD.
LineAmountTypes	string	—	Line amount tax treatment.
LineItems	array	yes	Array of line items (Description, Quantity, UnitAmount, AccountCode, TaxType).
Reference	string	—	Free-text reference.
Status	string	—	Credit note status. Defaults to DRAFT.
Type	string	yes	ACCRECCREDIT (customer credit) or ACCPAYCREDIT (supplier credit).

No output schema declared.

No examples provided.

create_invoice ~268

Create an invoice in Xero. Type ACCREC = accounts-receivable (sales invoice to a customer), ACCPAY = accounts-payable (bill from a supplier). Default Status=DRAFT; set AUTHORISED to issue immediately.

Input Output Examples

Name	Type	Req	Description
Contact	object	yes	Contact reference — provide ContactID of an existing contact.
CurrencyCode	string	—	ISO-4217 currency code. Defaults to organization base currency.
Date	string	—	Invoice date, YYYY-MM-DD.
DueDate	string	—	Payment due date, YYYY-MM-DD.
InvoiceNumber	string	—	Optional merchant invoice number. If omitted, Xero auto-numbers (ACCREC only).
LineAmountTypes	string	—	Whether LineItem UnitAmount is tax-exclusive, tax-inclusive, or tax-free.
LineItems	array	yes	Array of line items. Each: Description, Quantity, UnitAmount, AccountCode (or ItemCode), TaxType, DiscountRate.
Reference	string	—	ACCREC only — free-text reference visible on invoice.
Status	string	—	DRAFT (default), SUBMITTED (awaiting approval), or AUTHORISED (live/issued).
Type	string	yes	ACCREC (sales/AR) or ACCPAY (bill/AP).

No output schema declared.

No examples provided.

create_item ~222

Create a Xero inventory/product item. Items can be sales-only, purchase-only, or tracked inventory (requires IsTrackedAsInventory + InventoryAssetAccountCode).

Input Output Examples

Name	Type	Req	Description
Code	string	yes	User-defined item code (required, unique within tenant).
Description	string	—	Sales description shown on invoices.
InventoryAssetAccountCode	string	—	Inventory asset account code (required when IsTrackedAsInventory is true).
IsPurchased	boolean	—	True if item is available for purchase (appears on bills).
IsSold	boolean	—	True if item is available for sale (appears on invoices).
IsTrackedAsInventory	boolean	—	True to track stock on hand — requires InventoryAssetAccountCode.
Name	string	—	Item display name.
PurchaseDescription	string	—	Purchase description shown on bills.
PurchaseDetails	object	—	Purchase pricing: UnitPrice, AccountCode (expense account), TaxType.
SalesDetails	object	—	Sales pricing: UnitPrice, AccountCode (revenue account), TaxType.

No output schema declared.

No examples provided.

create_payment ~136

Record a payment against an invoice or credit note. Reduces the invoice's AmountDue and posts to the specified bank/payment account.

Input Output Examples

Name	Type	Req	Description
Account	object	yes	Bank/payment account reference — provide AccountID or Code (e.g. '090' for a bank account).
Amount	number	yes	Payment amount in invoice currency.
CurrencyRate	number	—	FX rate if invoice currency differs from org base currency.
Date	string	—	Payment date, YYYY-MM-DD.
Invoice	object	yes	Invoice reference — provide InvoiceID.
Reference	string	—	Free-text reference (bank ref, check number, etc).

No output schema declared.

No examples provided.

email_invoice ~62

Email an AUTHORISED invoice to the contact's email address on file. Xero uses the default invoice email template. No body required.

Input Output Examples

Name	Type	Req	Description
InvoiceID	string	yes	Xero Invoice UUID. Invoice must be AUTHORISED and contact must have an EmailAddress.

No output schema declared.

No examples provided.

get_balance_sheet ~151

Retrieve the Balance Sheet report for the tenant. Returns assets, liabilities, and equity grouped by account as of a given date.

Input Output Examples

Name	Type	Req	Description
date	string	—	Report date YYYY-MM-DD. Defaults to today.
paymentsOnly	boolean	—	Cash-basis report if true (ignore accrual).
periods	number	—	Number of comparison periods (1-11).
standardLayout	boolean	—	If true, return the standard (non-customised) layout.
timeframe	string	—	Period size when 'periods' > 0.
trackingOptionID1	string	—	Tracking category option to filter the report.
trackingOptionID2	string	—	Second tracking category option.

No output schema declared.

No examples provided.

get_contact ~32

Retrieve a single Xero contact by ContactID (UUID).

Input Output Examples

Name	Type	Req	Description
ContactID	string	yes	Xero Contact UUID.

No output schema declared.

No examples provided.

get_invoice ~45

Retrieve a single invoice by InvoiceID (UUID) or InvoiceNumber.

Input Output Examples

Name	Type	Req	Description
InvoiceID	string	yes	Xero Invoice UUID or InvoiceNumber (e.g. INV-0042).

No output schema declared.

No examples provided.

get_payment ~28

Retrieve a single payment by PaymentID.

Input Output Examples

Name	Type	Req	Description
PaymentID	string	yes	Xero Payment UUID.

No output schema declared.

No examples provided.

list_accounts ~76

List the Xero chart of accounts. Use this to discover AccountCodes/AccountIDs needed for invoice line items and payments.

Input Output Examples

Name	Type	Req	Description
order	string	—	Ordering, e.g. 'Code ASC'.
where	string	—	Xero where clause, e.g. 'Class=="REVENUE"' or 'Type=="BANK"'.

No output schema declared.

No examples provided.

list_bank_transactions ~92

List bank transactions (spend/receive entries on bank accounts). Supports where-clause filtering by BankAccount.AccountID, Type, Date, etc.

Input Output Examples

Name	Type	Req	Description
order	string	—	Ordering, e.g. 'Date DESC'.
page	number	—	Page number (100 per page).
where	string	—	Xero where clause, e.g. 'BankAccount.AccountID==guid("...")'.

No output schema declared.

No examples provided.

list_contacts ~122

List Xero contacts. Supports Xero's where clause for server-side filtering (e.g. 'Name=="ACME Ltd"', 'IsCustomer==true').

Input Output Examples

Name	Type	Req	Description
includeArchived	boolean	—	If true, include archived contacts in results.
order	string	—	Ordering clause, e.g. 'Name ASC' or 'UpdatedDateUTC DESC'.
page	number	—	Page number (100 contacts per page).
where	string	—	Xero where clause, e.g. 'Name.Contains("ACME")' or 'IsCustomer==true'.

No output schema declared.

No examples provided.

list_credit_notes ~87

List credit notes. Supports where-clause filtering by Type, Status, Contact.ContactID, Date.

Input Output Examples

Name	Type	Req	Description
order	string	—	Ordering, e.g. 'Date DESC'.
page	number	—	Page number (100 per page).
where	string	—	Xero where clause, e.g. 'Type=="ACCRECCREDIT" AND Status=="AUTHORISED"'.

No output schema declared.

No examples provided.

list_invoices ~136

List invoices with optional Xero where-clause filtering. Common filters: Status=="AUTHORISED", Type=="ACCREC", Contact.ContactID==guid("..."), Date>=DateTime(2026,1,1).

Input Output Examples

Name	Type	Req	Description
order	string	—	Ordering, e.g. 'Date DESC'.
page	number	—	Page number (100 invoices per page).
statuses	string	—	Comma-separated statuses filter, e.g. 'DRAFT,AUTHORISED'.
where	string	—	Xero where clause, e.g. 'Status=="AUTHORISED" AND Type=="ACCREC"'.

No output schema declared.

No examples provided.

list_items ~66

List all items/products in the Xero tenant. Supports where clause, e.g. 'IsSold==true'.

Input Output Examples

Name	Type	Req	Description
order	string	—	Ordering, e.g. 'Code ASC'.
where	string	—	Xero where clause, e.g. 'IsSold==true'.

No output schema declared.

No examples provided.

list_organisations ~42

Retrieve the Xero organisation(s) the access token has access to — returns name, base currency, country, fiscal year start, tax settings, and edition.

Input Output Examples

Input schema present but exposes no named parameters.

No output schema declared.

No examples provided.

list_payments ~85

List payments recorded in Xero. Supports where-clause filtering (e.g. 'Status=="AUTHORISED"', 'Date>=DateTime(2026,1,1)').

Input Output Examples

Name	Type	Req	Description
order	string	—	Ordering, e.g. 'Date DESC'.
page	number	—	Page number (100 per page).
where	string	—	Xero where clause.

No output schema declared.

No examples provided.

list_tax_rates ~77

List tax rates configured in the Xero tenant. Use the returned TaxType codes on invoice/bill line items. Supports where clause like 'Status=="ACTIVE"'.

Input Output Examples

Name	Type	Req	Description
order	string	—	Ordering, e.g. 'Name ASC'.
where	string	—	Xero where clause, e.g. 'Status=="ACTIVE"'.

No output schema declared.

No examples provided.

update_contact ~180

Update an existing Xero contact. POSTs to /Contacts/{ContactID}. Only include fields you want changed; Xero merges updates.

Input Output Examples

Name	Type	Req	Description
AccountNumber	string	—	Merchant-side account number.
Addresses	array	—	Addresses array (replaces existing).
ContactID	string	yes	Xero Contact UUID to update.
ContactNumber	string	—	External system identifier.
DefaultCurrency	string	—	ISO-4217 default currency.
EmailAddress	string	—	Primary email address.
FirstName	string	—	Contact first name.
LastName	string	—	Contact last name.
Name	string	—	Updated name (must remain unique within tenant).
Phones	array	—	Phones array (replaces existing).
TaxNumber	string	—	Tax number (VAT/ABN/GST/EIN).

No output schema declared.

No examples provided.

update_invoice ~145

Update an existing invoice. POSTs to /Invoices/{InvoiceID}. DRAFT/SUBMITTED invoices are fully editable; AUTHORISED invoices have limited editable fields (Reference, DueDate, etc).

Input Output Examples

Name	Type	Req	Description
Date	string	—	Invoice date YYYY-MM-DD.
DueDate	string	—	Payment due date YYYY-MM-DD.
InvoiceID	string	yes	Xero Invoice UUID to update.
InvoiceNumber	string	—	Merchant invoice number.
LineAmountTypes	string	—	Tax treatment for line amounts.
LineItems	array	—	Replacement line items array.
Reference	string	—	Free-text reference.
Status	string	—	New invoice status.

No output schema declared.

No examples provided.

void_invoice ~52

Void an invoice by setting Status=VOIDED. Only DRAFT, SUBMITTED, or AUTHORISED invoices with zero payments can be voided.

Input Output Examples

Name	Type	Req	Description
InvoiceID	string	yes	Xero Invoice UUID to void.

No output schema declared.

No examples provided.

On this page

Handy links

Scoring key

80+ high trust
60–79 medium
below 60 low

How we score

Score history · last 30 days

27 Jul 4 Aug

Day	Score
27 Jul	45
28 Jul	45
30 Jul	45
31 Jul	20
1 Aug	25
2 Aug	68
3 Aug	68
4 Aug	69