Multi-tenant Xero gateway
One Xero connection. Unlimited apps.
Xero caps how many apps can connect to an organisation. Xero Proxy holds that one connection and fans it out to every tool that needs it, each with its own scoped, revocable key.
The problem
Every tool that needs Xero data eats a connection slot
A business running accounting, payroll, reporting and a handful of internal tools against the same Xero organisation runs out of room fast. Xero Proxy sits between your organisation and every one of those tools, occupying a single slot no matter how many downstream consumers rely on it.
How it works
Transparent by design
The proxy mirrors Xero’s own API one for one. If an app already speaks Xero, it speaks Xero Proxy.
Connect once
Authorise Xero Proxy against your Xero organisation the usual way, with OAuth 2.0 and PKCE. That's the one connection slot spent.
Mint scoped keys
Issue a platform API key for every downstream app, each restricted to specific orgs, specific Xero scopes, and optionally an IP range.
Point apps at us
Downstream apps swap their Xero base URL and bearer token for ours. Same paths, same payloads, nothing else to change.
Scoping
Every key is scoped three ways, on every request
A key’s effective permissions are always the intersection of what it was granted and what the underlying connection actually holds. Unmapped routes are denied by default.
Org scope
A key names exactly which orgs it may reach, and can never see an org outside its own account.
Permission scope
Keys carry Xero's own scope vocabulary, read and write tracked separately, across every API family.
Network scope
An optional IP or CIDR allowlist per key, enforced before a request ever reaches Xero.
1
Connection slot used, no matter how many apps you plug in
3
Independent scopes checked before a request ever reaches Xero
0
Raw secrets stored. Keys are hashed the moment they're minted
Stop rationing your Xero connection
See exactly how a request moves through the proxy, and what happens when a token expires under load.
See how it works