What can an AI agent do with
Invoices and bills?
This lets the app view and change invoices and bills, plus quotes, purchase orders, credit notes, repeating invoices, and the items you sell. It can also email sales invoices to your customers.
How to spot it
On a Xero connection or settings screen, this is accounting.invoices.
With it, an agent can
- Create and update sales invoices and bills.
- Email a sales invoice to your customer. It goes out from the person who connected the app.
- Delete draft invoices and void approved ones.
- Create quotes, purchase orders, credit notes, and repeating invoices.
- Add and change the products and services (items) you sell.
It cannot, on its own
- Record payments against invoices. That is accounting.payments.
- Delete an approved invoice. It can only void it.
What a bad day looks like
A tricked agent could send invoices with the wrong amount or to the wrong people, and they would come from your business.
Set it up safer
- If it only needs to look, use accounting.invoices.read.
- Require your approval before any invoice is approved or emailed.
- Connect with a Xero user who has only the permissions the tool needs. Xero checks the connecting user's permissions for some actions, such as changing a contact's bank details through an invoice.
Narrower permissions on Xero:
- Invoices and bills (view only)
accounting.invoices.read
Ask the company selling the agent
- Will your agent email invoices without asking me?
- Can it approve invoices, or only create drafts for me to review?
- How do I see a log of every invoice it created or sent?
Source
Checked against Xero documentation on 2026-09-28. All Xero permissions →
Thinking about a specific agent?
Tell us what it connects to, what it is allowed to do and who approves its work. You get a plain-language label of what it can touch and what to ask the seller. It takes a couple of minutes, and your answers stay in your browser unless you choose to post a test job.
Or have a person go through the AI apps on up to 3 of your business services with you and get a written report, for $249.
This page explains what a permission allows. It does not describe, test or rate any product. Permission details are summarized in our own words from the provider's documentation, linked on the page; providers change their documentation, so check the source before you rely on a detail.