Generate OAuth URL
GET/api/xero/authorize
Generate a Xero OAuth 2.0 authorization URL to initiate the connection flow. Redirect the user to the returned URL to authenticate with Xero.
This endpoint currently requires session authentication; Personal Access Token scope support is in progress.
Authentication: Requires Bearer token.
Reconnecting with a different Xero organisation than the one this integration already syncs is refused and nothing is overwritten: the callback refuses the connection with "This Xero integration is connected to the organisation "<current>", but you signed in to the organisation "<other>". The connection was not changed. …". To move to another organisation, remove the integration and add a new one. (for example, a new set of books).
Request
Responses
- 200
- 401
- 403
- 429
OK
Response Headers
Unauthenticated — the bearer token is missing, revoked, expired, or malformed. Never retry automatically; fix the credential. See the Errors guide.
Forbidden — the token lacks a required scope, the endpoint is not available to API tokens, or the user behind the token lacks the permission. A human must adjust the token scopes or user permissions; do not retry.
Rate limited — platform limit is 1,000 requests/min; individual tokens may carry lower limits. Honor the Retry-After header before retrying. See the Rate Limits guide.