What can an AI agent do with
Organisation settings?
This lets the app view and change how your Xero organisation is set up, including your chart of accounts, tax rates, items, currencies, tracking categories, and branding themes. It can also see your organisation details and your list of Xero users.
How to spot it
On a Xero connection or settings screen, this is accounting.settings.
With it, an agent can
- Create, update, archive, and delete accounts in your chart of accounts.
- Change settings such as tax rates, items, and tracking categories.
- See your organisation details and the people who use your Xero.
It cannot, on its own
- Add, remove, or change Xero users. The users list is view only.
What a bad day looks like
A misbehaving agent could delete or rename accounts or change tax rates, so later transactions get coded or taxed wrong.
Set it up safer
- Use accounting.settings.read if it only needs to look up accounts or tax rates.
- Ask your accountant to approve any change to accounts or tax rates.
Ask the company selling the agent
- Why does your agent need to change my settings, not just read them?
- Will it ever delete accounts or change tax rates?
Source
Checked against Xero documentation on 2026-09-28. All Xero permissions →
Thinking about a specific agent?
Tell us what it connects to, what it is allowed to do and who approves its work. You get a plain-language label of what it can touch and what to ask the seller. It takes a couple of minutes, and your answers stay in your browser unless you choose to post a test job.
Or have a person go through the AI apps on up to 3 of your business services with you and get a written report, for $249.
This page explains what a permission allows. It does not describe, test or rate any product. Permission details are summarized in our own words from the provider's documentation, linked on the page; providers change their documentation, so check the source before you rely on a detail.