Xero MCP and Claude: what AI can safely do in your Xero.

What is the Xero MCP server?

The Xero MCP server is Xero's own open-source connector that lets an AI app like Claude read and write data in your Xero file: contacts, invoices, quotes, payments, bank transactions and reports. MCP (Model Context Protocol) is the open standard AI apps use to plug into other software. You install it, connect it to one Xero organisation, and then ask in plain English.

It is not the only way in. In May 2026 Xero also launched a Claude connector you switch on from Claude's connector directory, and anything that has to run on its own still goes through the Xero API. Most of the confusion we hear on sales calls comes from mixing these three up, so here they are side by side.

What can Claude actually do with your Xero data?

Connected properly, Claude can tell you who owes you money and for how long, draft a reminder for each overdue invoice in your own tone, build a monthly report from live figures, flag likely duplicate invoices, and prepare invoices or quotes for you to check. With the MCP server it can also create those records in Xero.

The jobs that pay off fastest for the businesses we work with are boring ones:

• Invoice chasing. Pull the aged receivables, sort by who matters, and draft a different message for a customer seven days late than one sixty days late. You read them and press send.
• Reporting. A plain-English month-end summary for the owner: cash position, what changed, which customers grew or slowed. This is where the read-only Claude connector is genuinely useful on its own. For a report that lands in your inbox every Monday without anyone asking, see how we approach automated reporting.
• Getting invoices out on time. Turning a finished job, a timesheet or an email into a draft invoice, so billing happens the day the work is done, not at the end of the week.
• Reconciliation help. Claude can explain an unreconciled line, find the matching invoice and suggest the coding. Matching itself is now mostly JAX's job inside Xero.

What can't AI do in Xero?

The Claude connector cannot create, edit, approve, reconcile or pay anything; Xero built it read-only. The MCP server can write records, but it has no delete for most of them and only handles payroll for New Zealand and UK files, not Australian ones. Neither one runs by itself overnight. Someone has to ask.

That last point matters most. MCP is a way for Claude to use Xero while you are in the conversation. If the job is "every morning, check yesterday's completed jobs and raise the invoices", you need an automation built on the API, with logging and someone accountable when it gets something wrong. A connector is the right tool for a person; an API build is the right tool for a process. Our guide to Claude Desktop connectors covers the person side in more depth.

There are also limits that have nothing to do with Xero. AI will not fix messy data. If your price list lives in three places, Claude will confidently use the wrong one. And it does not replace your bookkeeper's judgement on GST treatment or BAS; it gives them a faster first draft.

Is it safe to connect Claude to Xero?

It can be, if you control three things: which Xero permissions the connection has, whose Claude account it lives in, and whether anything gets sent or approved without a person checking. Start read-only, keep it on a business Claude account, and make every write a draft first.

• Permissions. A Xero custom connection is tied to one organisation and to the scopes you choose. If Claude only needs to read invoices and reports, do not grant payments or bank transactions. Xero moved new custom connections to finer-grained permissions in April 2026, which makes this easier.
• Accounts. The real risk in most offices is a staff member connecting the company Xero to a personal AI account. Put it on a Team or Enterprise Claude account where an admin controls which connectors are switched on.
• Drafts, not sends. Our rule on every build: AI prepares, a person approves. Invoices are created as drafts, reminders sit in a queue, nothing is paid by a machine.
• Training. Xero says data shared through its Claude connector is limited to your session and is not used to train Anthropic's models.

How we handle data on every build is on our security page.

What does the Xero API cost?

Since 2 March 2026, Xero charges developers by tier. Starter is free for up to five connected organisations. Core is A$35 a month for up to 50, Plus A$245 for up to 1,000, and Advanced A$1,445 for up to 10,000, all excluding GST. A business connecting only its own Xero file will usually fit in Starter.

Figures are from Xero's developer pricing page. These tiers matter most to software companies selling into many Xero files. For a single business, the bigger costs are the Claude plan, your Xero subscription, and the time to set it up properly. A custom connection, which the MCP server uses, carries its own small monthly charge from Xero; check the current figure in your Xero account before you start.

Should you use JAX or Claude with Xero?

Use JAX for the work that lives inside Xero, like bank reconciliation, bill capture and following up overdue invoices. Use Claude when the job crosses tools: your job system, your inbox, your price files and Xero together. Most businesses end up using both, and they do not compete.

JAX is Xero's own AI agent. On Xero's Australian JAX page, Xero says it reconciles transactions automatically, captures bills and receipts, and follows up overdue invoices, with features varying by plan. Xero also announced XeroForce in 2026, a plain-English builder for custom agents, but some JAX features are still rolling out, so check what your plan has today rather than what was announced.

Where JAX stops is the edge of Xero. It does not know your ServiceM8 job is finished, that a customer emailed about a dispute, or which supplier quoted cheaper this week. That cross-tool joining is what an AI integration is for. If you are still choosing which apps should talk to Xero at all, start with our guide to Xero integrations.