# Xero (oci · ghcr.io/wyre-technology/xero-mcp:v1.5.5)

MCP server for Xero accounting — contacts, invoices, payments, accounts, and financial reports.

- Trust score: 41/100 (low)
- Registry status: active
- Liveness: live
- Owner verified: no
- Last scored: 2026-08-22

## Components

- oci · `ghcr.io/wyre-technology/xero-mcp:v1.5.5`: 41/100 (this document), [markdown](https://verifymcp.io/servers/wyre-technology-xero-mcp/ghcr-io-wyre-technology-xero-mcp-v1-5-5.md), [page](https://verifymcp.io/servers/wyre-technology-xero-mcp/ghcr-io-wyre-technology-xero-mcp-v1-5-5)

## Channel facts

- Registry: `oci`
- Package: `ghcr.io/wyre-technology/xero-mcp:v1.5.5`
- Transport: `stdio`

## Trust breakdown

How this component scores in each security and reliability category. Every signal is checked automatically from public evidence about the published package, including repeated runs of it in an isolated sandbox, and we only credit what we can confirm. Scores are 0–100 per category. Scoring method: https://verifymcp.io/docs/scoring (what has changed: https://verifymcp.io/docs/scoring/changelog)

Scored 2026-08-22.

- **Supply Chain Security**: 0/100
  - Malware scan not yet available for this package.
  - Known CVEs could not be checked: this artifact ships no SBOM, so there is no dependency list to read. Publishing one would let us assess it.
  - Install-script risk not yet assessed.
  - Dependency health could not be checked: this artifact ships no SBOM, so there is no dependency list to read. Publishing one would let us assess it.
- **Provenance & Transparency**: 45/100
  - Source repository is publicly reachable at the declared URL.
  - Provenance check failed: no build-provenance attestation is published.
  - Clear OSI-approved license (Apache-2.0).
  - Actively maintained (last published 1 days ago).
  - Disclosure check failed: no security disclosure policy was found in the source repository.
- **Schema Quality & AI Usability**: 85/100
  - 100% of prompts and resources have a non-trivial description (not blank, and not just the item's name).
  - AI-judged instruction clarity (good).
  - Tool/resource definitions use about 1435 tokens (~68/item across 21 items; 20 tools + 1 resources), lean.
  - Usage-examples check failed: none of the tools include examples.
- **Stability & Change Management**: 0/100
  - Stability not yet verified: not enough scan history yet (needs a 30-day window).
- **Tool Coverage**: 100/100
  - 100% of tools have a non-trivial description (not blank, and not just the tool's name).
  - 100% of tool parameters carry a description.
- **Capabilities**: 100/100
  - Implements a supported MCP spec version (2025-11-25); the latest is 2026-07-28.
  - Supports UI / widget rendering.

**Unverified: 2 categories.** Categories scored 0 because we could not verify them: a data source with nothing on this package, evidence we could not reach, or a check we could not run. We only credit what we can confirm.

## Install

### Claude

```bash
claude mcp add wyre-technology-xero-mcp -- docker run --rm -i ghcr.io/wyre-technology/xero-mcp:v1.5.5
```

### Codex

```bash
codex mcp add wyre-technology-xero-mcp -- docker run --rm -i ghcr.io/wyre-technology/xero-mcp:v1.5.5
```

### opencode

```json
{
  "$schema": "https://opencode.ai/config.json",
  "mcp": {
    "wyre-technology-xero-mcp": {
      "type": "local",
      "command": [
        "docker",
        "run",
        "--rm",
        "-i",
        "ghcr.io/wyre-technology/xero-mcp:v1.5.5"
      ],
      "enabled": true
    }
  }
}
```

### Hermes

```yaml
mcp_servers:
  wyre-technology-xero-mcp:
    command: "docker"
    args: ["run", "--rm", "-i", "ghcr.io/wyre-technology/xero-mcp:v1.5.5"]
```

### Other

```json
{
  "mcpServers": {
    "wyre-technology-xero-mcp": {
      "command": "docker",
      "args": [
        "run",
        "--rm",
        "-i",
        "ghcr.io/wyre-technology/xero-mcp:v1.5.5"
      ]
    }
  }
}
```

## Changelog

Every change recorded for this component, newest first. Days that predate change tracking, or that we cannot explain, say so: "we were watching and nothing happened" and "we were not watching" are different claims.

### 2026-08-20 (score 41)

First indexed and scored.

## MCP tools (20)

### `xero_navigate` (~152 tokens)

Discover available Xero tools by domain. Returns tool names and descriptions for the selected domain. All tools are callable at any time — this is a help/discovery aid, not a prerequisite.

Input parameters:

- `domain` (string, required): The domain to explore: - contacts: Contact management - list, get, create, and search contacts (customers and suppliers) - invoices: Invoice management - list, get, create invoices and update their s…

### `xero_status` (~16 tokens)

Show credentials status and available domains

### `xero_back` (~26 tokens)

Return to domain selection (no-op in flattened mode). All tools are always available.

### `xero_contacts_list` (~86 tokens)

List contacts in Xero with pagination. Optionally filter using a where clause. Returns contact details including name, email, and addresses.

Input parameters:

- `page` (number): Page number (1-based, default: 1). Each page returns up to 100 contacts.
- `where` (string): Optional Xero where clause filter (e.g., 'ContactStatus=="ACTIVE"')

### `xero_contacts_get` (~48 tokens)

Get detailed information about a specific contact by its ID. Returns full contact profile including addresses, phone numbers, and email.

Input parameters:

- `contactId` (string, required): The unique contact ID (UUID)

### `xero_contacts_create` (~145 tokens)

Create a new contact in Xero. Name is required; other fields are optional.

Input parameters:

- `AccountNumber` (string): Account number for the contact
- `EmailAddress` (string): Contact email address
- `FirstName` (string): Contact first name
- `IsCustomer` (boolean): Whether the contact is a customer
- `IsSupplier` (boolean): Whether the contact is a supplier
- `LastName` (string): Contact last name
- `Name` (string, required): Contact name (required)
- `Phone` (string): Contact phone number
- `TaxNumber` (string): Tax number (ABN in Australia, GST in NZ, VAT in UK)

### `xero_contacts_search` (~38 tokens)

Search contacts by name. Returns contacts whose name contains the search term.

Input parameters:

- `term` (string, required): Search term to match against contact names

### `xero_invoices_list` (~105 tokens)

List invoices in Xero with pagination. Optionally filter by status and type (ACCREC for sales, ACCPAY for bills).

Input parameters:

- `Status` (string): Filter by invoice status
- `Type` (string): Filter by invoice type: ACCREC (accounts receivable / sales invoices) or ACCPAY (accounts payable / bills)
- `page` (number): Page number (1-based, default: 1). Each page returns up to 100 invoices.

### `xero_invoices_get` (~50 tokens)

Get detailed information about a specific invoice by its ID. Returns full invoice details including line items, amounts, and payment status.

Input parameters:

- `invoiceId` (string, required): The unique invoice ID (UUID)

### `xero_invoices_create` (~157 tokens)

Create a new invoice in Xero. Requires type, contact, and at least one line item.

Input parameters:

- `ContactID` (string, required): The contact ID to create the invoice for (required)
- `Date` (string): Invoice date in YYYY-MM-DD format
- `DueDate` (string): Due date in YYYY-MM-DD format
- `LineItems` (array, required): Array of line items (required). Each item needs Description, Quantity, UnitAmount, and AccountCode.
- `Reference` (string): Invoice reference/PO number
- `Status` (string): Initial invoice status (default: DRAFT)
- `Type` (string, required): Invoice type: ACCREC (sales invoice) or ACCPAY (bill) (required)

### `xero_invoices_update_status` (~60 tokens)

Update the status of an existing invoice. Can submit, authorise, or void an invoice.

Input parameters:

- `Status` (string, required): New status for the invoice (required)
- `invoiceId` (string, required): The invoice ID to update (required)

### `xero_payments_list` (~62 tokens)

List payments in Xero with pagination. Optionally filter by status.

Input parameters:

- `Status` (string): Filter by payment status
- `page` (number): Page number (1-based, default: 1). Each page returns up to 100 payments.

### `xero_payments_get` (~36 tokens)

Get detailed information about a specific payment by its ID.

Input parameters:

- `paymentId` (string, required): The unique payment ID (UUID)

### `xero_payments_create` (~100 tokens)

Create a new payment in Xero. Records a payment against an invoice.

Input parameters:

- `AccountID` (string, required): The bank account ID the payment is made from/to (required)
- `Amount` (number, required): Payment amount (required)
- `Date` (string, required): Payment date in YYYY-MM-DD format (required)
- `InvoiceID` (string, required): The invoice ID to apply the payment to (required)
- `Reference` (string): Payment reference

### `xero_accounts_list` (~115 tokens)

List chart of accounts in Xero. Optionally filter by account type or class.

Input parameters:

- `Class` (string): Filter by account class
- `Type` (string): Filter by account type (e.g., "BANK", "REVENUE", "EXPENSE", "CURRENT", "FIXED", "EQUITY", "CURRLIAB", "TERMLIAB", "DIRECTCOSTS", "OVERHEADS", "DEPRECIATN", "OTHERINCOME", "SALES")

### `xero_accounts_get` (~35 tokens)

Get detailed information about a specific account by its ID.

Input parameters:

- `accountId` (string, required): The unique account ID (UUID)

### `xero_reports_profit_and_loss` (~61 tokens)

Get a Profit and Loss (income statement) report for a date range.

Input parameters:

- `fromDate` (string, required): Start date in YYYY-MM-DD format (required)
- `toDate` (string, required): End date in YYYY-MM-DD format (required)

### `xero_reports_balance_sheet` (~38 tokens)

Get a Balance Sheet report as of a specific date.

Input parameters:

- `date` (string, required): Report date in YYYY-MM-DD format (required)

### `xero_reports_aged_receivables` (~45 tokens)

Get an Aged Receivables report showing outstanding customer invoices by age.

Input parameters:

- `date` (string, required): Report date in YYYY-MM-DD format (required)

### `xero_reports_aged_payables` (~43 tokens)

Get an Aged Payables report showing outstanding supplier bills by age.

Input parameters:

- `date` (string, required): Report date in YYYY-MM-DD format (required)

## Diagnostics

Captured diagnostic sections: Provenance. The full working is on the page: https://verifymcp.io/servers/wyre-technology-xero-mcp/ghcr-io-wyre-technology-xero-mcp-v1-5-5#diagnostics

## Score history

- 2026-08-22: 41
- 2026-08-21: 41
- 2026-08-20: 41

## Links

- Repository: https://github.com/wyre-technology/xero-mcp
- Changelog RSS feed: https://verifymcp.io/servers/wyre-technology-xero-mcp/ghcr-io-wyre-technology-xero-mcp-v1-5-5.xml
- Changelog JSON feed: https://verifymcp.io/servers/wyre-technology-xero-mcp/ghcr-io-wyre-technology-xero-mcp-v1-5-5.json
- HTML version of this page: https://verifymcp.io/servers/wyre-technology-xero-mcp/ghcr-io-wyre-technology-xero-mcp-v1-5-5