✓ 30-day Free Trial
OAuth2 REST API
Contacts, invoices, bills, chart of accounts, bank transactions, payments, journals, reports
OAuth2 PKCE flow. Access tokens expire in 30 min; refresh tokens roll every 60 days. Tenant ID required on every API call.
- Go to developer.xero.com/app/manage and create a new app (type: Web app).
- Set the Redirect URI to https://yourdomain.com/XeroCallback.aspx (must match exactly).
- Copy your Client ID and Client Secret from the app details page and paste them into Organisation Settings, then click Save Settings.
- Click Connect in the toolbar — you will be redirected to Xero to authorise. Upon return the Access Token, Refresh Token, and Tenant ID are filled automatically.
Collect: Client ID · Client Secret · (Tenant ID is auto-discovered after Connect)